$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.cer File: 6357BB750B73CD5D9DBBCD91013CC468BF5759FE.cer (raw, json) Hash identifier: mrwMsVnDBo3QtE2L3nM9kSVo7XOCj0gB433UFq0yC+s= Subject key identifier: 63:57:BB:75:0B:73:CD:5D:9D:BB:CD:91:01:3C:C4:68:BF:57:59:FE Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 5711DECCC22A814002F9B1CD317A324EBE14477F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 25 Feb 2024 21:06:42 +0000 Certificate not after: Sun 23 Feb 2025 21:11:42 +0000 Subordinate resources: IP: 2a0a:6044:a100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 06:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:11:de:cc:c2:2a:81:40:02:f9:b1:cd:31:7a:32:4e:be:14:47:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Feb 25 21:06:42 2024 GMT Not After : Feb 23 21:11:42 2025 GMT Subject: CN=6357BB750B73CD5D9DBBCD91013CC468BF5759FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:36:89:ab:5e:1c:f6:30:26:ab:16:bc:1c:dc: af:a1:66:e2:98:46:a4:a1:7b:98:97:30:3c:40:3b: 62:c1:05:20:01:a2:da:bf:26:eb:98:96:19:0a:93: bb:1b:d1:37:ca:d8:e5:38:17:8e:bf:32:14:49:0e: bc:e4:87:a8:44:ca:ca:ad:10:bd:d7:26:f3:3d:5b: 0b:57:d9:08:66:4d:3c:0b:b1:93:5f:ba:54:f6:49: ce:6c:d2:ed:73:f6:d2:79:8e:57:d1:e0:f9:0a:20: e4:85:59:d0:a7:cc:01:d2:26:31:bb:07:8e:76:5d: fd:b8:a7:62:94:4e:55:63:3b:64:28:b4:79:32:23: 4d:4a:56:da:c4:96:e3:99:e8:58:65:af:9c:24:4e: 80:40:56:cc:2f:54:46:d9:ce:1e:2c:e8:2e:f5:48: 71:12:75:a6:50:7f:c9:8c:ec:aa:c6:ae:0f:c7:12: d7:eb:90:df:4f:1f:48:1f:90:6e:fd:e0:47:a3:5d: 40:b0:6b:7d:11:da:e2:25:b3:70:30:ed:2f:09:34: fa:5c:d1:b3:78:ae:21:8f:8b:36:4c:61:c0:60:76: 9b:b6:2c:9d:45:98:32:c6:75:4a:d5:27:2a:fd:e1: a4:c6:02:44:fc:a6:0e:c2:9d:a7:2c:24:5a:79:d6: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:57:BB:75:0B:73:CD:5D:9D:BB:CD:91:01:3C:C4:68:BF:57:59:FE X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/0/6357BB750B73CD5D9DBBCD91013CC468BF5759FE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a100::/40 Signature Algorithm: sha256WithRSAEncryption 81:fd:1f:e9:6c:b2:a7:7c:de:c3:2f:95:91:52:bc:94:9b:a9: 66:ea:2c:80:ba:db:2f:2f:02:09:f5:0a:e8:7b:7c:3f:f0:1c: 8e:94:23:67:bc:08:a8:c5:5b:66:5f:10:c2:7f:1b:76:8e:e3: 60:1a:54:fb:81:63:47:0b:16:a3:10:f8:73:af:7e:4f:6b:c0: 6c:3f:2b:fd:d1:ef:35:27:81:37:52:d6:56:76:d9:e9:2b:59: 8a:6c:ab:6c:7d:83:c5:8d:08:be:d8:ff:17:9f:88:ea:53:fb: 7a:20:84:23:96:75:72:4d:74:21:a4:af:83:e0:e4:5b:24:e2: 34:44:d3:b4:88:65:0d:06:4e:bd:2b:8e:d3:a3:a2:fe:b9:ee: 80:d6:dc:03:31:7d:05:41:96:29:98:48:81:c3:7e:4f:b5:56: b6:8f:4a:2d:08:13:3c:e8:7e:7a:98:ef:f2:d9:7a:b8:0a:9c: a4:16:7f:41:53:b5:2d:27:9b:b7:90:03:09:15:5f:08:38:3a: a6:77:c3:64:61:6a:b2:bd:46:62:ed:3f:4e:d2:0d:63:38:aa: 48:52:fb:e0:e9:26:e6:ef:36:bb:24:d4:51:e1:44:aa:bf:d7: 0f:71:12:dc:72:d5:ab:e1:a7:04:f2:de:8e:50:18:4c:05:c0: 71:3f:b6:76 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUVxHezMIqgUAC+bHNMXoyTr4UR38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDAyMjUyMTA2NDJaFw0yNTAyMjMyMTExNDJaMDMxMTAvBgNV BAMTKDYzNTdCQjc1MEI3M0NENUQ5REJCQ0Q5MTAxM0NDNDY4QkY1NzU5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvNomrXhz2MCarFrwc3K+hZuKY RqShe5iXMDxAO2LBBSABotq/JuuYlhkKk7sb0TfK2OU4F46/MhRJDrzkh6hEysqt EL3XJvM9WwtX2QhmTTwLsZNfulT2Sc5s0u1z9tJ5jlfR4PkKIOSFWdCnzAHSJjG7 B452Xf24p2KUTlVjO2QotHkyI01KVtrEluOZ6Fhlr5wkToBAVswvVEbZzh4s6C71 SHESdaZQf8mM7KrGrg/HEtfrkN9PH0gfkG794EejXUCwa30R2uIls3Aw7S8JNPpc 0bN4riGPizZMYcBgdpu2LJ1FmDLGdUrVJyr94aTGAkT8pg7CnacsJFp51qQbAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjV7t1C3PNXZ27 zZEBPMRov1dZ/jAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNTAwZWU4MjUtNzJhZS00MWMzLTljNDgtZTUyZDBjNDYzNzNmLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS81MDBlZTgyNS03MmFlLTQxYzMtOWM0OC1lNTJkMGM0NjM3M2Yv MC82MzU3QkI3NTBCNzNDRDVEOURCQkNEOTEwMTNDQzQ2OEJGNTc1OUZFLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEoTANBgkqhkiG9w0BAQsFAAOCAQEAgf0f 6Wyyp3zewy+VkVK8lJupZuosgLrbLy8CCfUK6Ht8P/AcjpQjZ7wIqMVbZl8Qwn8b do7jYBpU+4FjRwsWoxD4c69+T2vAbD8r/dHvNSeBN1LWVnbZ6StZimyrbH2DxY0I vtj/F5+I6lP7eiCEI5Z1ck10IaSvg+DkWyTiNETTtIhlDQZOvSuO06Oi/rnugNbc AzF9BUGWKZhIgcN+T7VWto9KLQgTPOh+epjv8tl6uAqcpBZ/QVO1LSebt5ADCRVf CDg6pnfDZGFqsr1GYu0/TtINYziqSFL74Okm5u82uyTUUeFEqr/XD3ES3HLVq+Gn BPLejlAYTAXAcT+2dg== -----END CERTIFICATE-----Generated at Sat Sep 28 13:04:57 2024 by rpki-client on console-fra.rpki-client.org