$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.cer File: 6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.cer (raw, json) Hash identifier: SHmhJULrjvhu4wHAnz1Sn56U3L93shHBzZq1WQmbBN8= Subject key identifier: 6B:70:A7:1E:22:E3:4D:AB:7D:A3:61:F2:FE:D9:F9:1A:48:49:DE:4A Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 01AD9B34A1B3EB2E6A259AD9AA4E50E960D37719 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 26 Aug 2024 16:42:31 +0000 Certificate not after: Mon 25 Aug 2025 16:47:31 +0000 Subordinate resources: IP: 2a0a:6044:7900::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ad:9b:34:a1:b3:eb:2e:6a:25:9a:d9:aa:4e:50:e9:60:d3:77:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 26 16:42:31 2024 GMT Not After : Aug 25 16:47:31 2025 GMT Subject: CN=6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:4d:12:d1:2e:22:37:d6:dd:ff:bb:c7:b7: 73:bb:b6:45:1d:97:83:2f:c9:43:d9:49:2a:c9:90: 83:8a:b3:af:cb:b1:66:78:18:fb:14:55:c7:90:1e: 5c:cd:de:5b:53:f7:59:e0:65:46:5a:92:58:d8:c9: e6:13:9d:79:32:ac:ed:e9:c6:d7:3c:50:9b:41:8a: d8:81:c8:6c:63:0f:9a:3b:2c:7f:0d:e9:cb:1a:ac: 7d:24:24:16:e1:39:be:59:b4:6e:0f:19:e0:1b:7e: 2a:5f:85:0d:56:ee:eb:d2:89:20:9c:a1:e3:9b:0a: 3d:cb:cf:df:95:09:33:ad:ed:9f:70:ed:88:41:17: ab:a8:87:10:61:ba:4f:e7:52:c5:ea:a8:c7:80:c7: 55:c3:24:24:02:93:3f:14:20:37:2b:4c:15:f0:31: de:bc:f6:c5:d1:5d:fa:f4:97:37:a7:d1:f5:23:ca: 76:98:dd:96:80:07:94:49:4d:ca:79:ef:f6:5d:a7: 17:5e:e2:a1:bd:7e:fe:84:2e:c8:be:84:b6:b0:da: 0b:da:32:10:9e:02:0f:83:59:6a:e1:8b:30:7e:23: 1f:f5:5b:5f:f9:7d:f4:5a:7e:ed:b9:9b:be:d2:c6: 4e:a0:46:01:3f:14:7f:4e:df:51:4a:ce:0b:83:df: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:70:A7:1E:22:E3:4D:AB:7D:A3:61:F2:FE:D9:F9:1A:48:49:DE:4A X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7900::/40 Signature Algorithm: sha256WithRSAEncryption 52:bc:73:3a:38:78:96:e6:0a:8d:3f:e1:d3:04:bc:9e:ea:7f: f2:80:4d:a8:9a:d9:98:6e:44:dc:fe:ca:d9:4b:08:93:a3:6b: a0:2a:34:c3:d2:e3:da:40:be:1a:01:16:7c:94:d8:de:ff:98: cb:e3:b0:b9:4c:89:f1:05:9d:5f:0a:4a:aa:8f:dd:4b:04:b7: e7:91:6b:af:1a:a0:1b:73:28:b6:ce:d3:5c:f6:72:84:4c:71: 91:61:b2:92:20:29:26:e0:c1:e7:f3:3d:52:12:e7:0b:66:1e: 82:f9:07:79:bb:b3:bd:3a:60:94:7d:aa:03:0f:f6:c7:2b:bf: fb:aa:97:4b:cc:bf:c9:0f:e8:83:04:4b:0d:ea:2b:76:c2:28: 8b:f9:db:4b:a5:f3:87:22:44:9a:0a:3f:14:4a:ad:ce:e9:06: cc:e6:df:d3:95:8e:d8:09:ce:92:be:ab:c8:d4:3f:df:8a:73: e1:da:34:2a:b7:ea:8b:99:8f:20:8d:c6:5b:ec:e1:8c:d3:57: 6b:12:2d:27:a5:75:70:be:ad:57:50:c0:62:bd:2d:43:de:63: 63:c2:19:f3:88:b4:f6:08:3f:74:29:94:87:96:75:45:12:f3: 7e:17:66:89:6f:1c:13:8d:9d:ef:8c:38:ed:a4:5f:2e:c6:bc: b0:94:dd:b1 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUAa2bNKGz6y5qJZrZqk5Q6WDTdxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjYxNjQyMzFaFw0yNTA4MjUxNjQ3MzFaMDMxMTAvBgNV BAMTKDZCNzBBNzFFMjJFMzREQUI3REEzNjFGMkZFRDlGOTFBNDg0OURFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCduE0S0S4iN9bd/7vHt3O7tkUd l4MvyUPZSSrJkIOKs6/LsWZ4GPsUVceQHlzN3ltT91ngZUZakljYyeYTnXkyrO3p xtc8UJtBitiByGxjD5o7LH8N6csarH0kJBbhOb5ZtG4PGeAbfipfhQ1W7uvSiSCc oeObCj3Lz9+VCTOt7Z9w7YhBF6uohxBhuk/nUsXqqMeAx1XDJCQCkz8UIDcrTBXw Md689sXRXfr0lzen0fUjynaY3ZaAB5RJTcp57/Zdpxde4qG9fv6ELsi+hLaw2gva MhCeAg+DWWrhizB+Ix/1W1/5ffRafu25m77Sxk6gRgE/FH9O31FKzguD34T7AgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrcKceIuNNq32j YfL+2fkaSEneSjAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNjU4MzlmYmQtMzI3ZS00ZmNlLThhM2UtNTNmZjhmMGM0NjBlLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82NTgzOWZiZC0zMjdlLTRmY2UtOGEzZS01M2ZmOGYwYzQ2MGUv MC82QjcwQTcxRTIyRTM0REFCN0RBMzYxRjJGRUQ5RjkxQTQ4NDlERTRBLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEeTANBgkqhkiG9w0BAQsFAAOCAQEAUrxz Ojh4luYKjT/h0wS8nup/8oBNqJrZmG5E3P7K2UsIk6NroCo0w9Lj2kC+GgEWfJTY 3v+Yy+OwuUyJ8QWdXwpKqo/dSwS355FrrxqgG3Mots7TXPZyhExxkWGykiApJuDB 5/M9UhLnC2YegvkHebuzvTpglH2qAw/2xyu/+6qXS8y/yQ/ogwRLDeordsIoi/nb S6XzhyJEmgo/FEqtzukGzObf05WO2AnOkr6ryNQ/34pz4do0Krfqi5mPII3GW+zh jNNXaxItJ6V1cL6tV1DAYr0tQ95jY8IZ84i09gg/dCmUh5Z1RRLzfhdmiW8cE42d 74w47aRfLsa8sJTdsQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org