$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer File: 98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer (raw, json) Hash identifier: P+XTAHUY4BNLqf+hh3XDVkjZvMOpe+dAXpClfeKdlSQ= Subject key identifier: 98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 356F811802CC7C16A0C1E8FC90C513CE35C8535F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 18 Apr 2024 23:15:19 +0000 Certificate not after: Thu 17 Apr 2025 23:20:19 +0000 Subordinate resources: IP: 2a0a:6044:a300::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6f:81:18:02:cc:7c:16:a0:c1:e8:fc:90:c5:13:ce:35:c8:53:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Apr 18 23:15:19 2024 GMT Not After : Apr 17 23:20:19 2025 GMT Subject: CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:b9:31:7f:c2:9b:bb:13:8f:a0:0b:11:e3: 6a:54:89:6e:43:89:8d:02:01:84:e2:4f:7e:1d:f4: f3:38:01:ac:3e:48:cd:de:15:19:b2:c4:58:ad:01: d1:8b:f4:90:3b:51:ed:4a:01:6f:d4:73:da:1c:56: d6:b1:b2:93:cb:06:0e:d4:7e:c4:47:2d:0d:79:01: d9:ef:de:e8:e0:b4:1f:af:66:a8:48:cf:c7:06:de: 2a:13:d1:aa:40:cf:6b:8d:2f:ad:02:80:45:04:f7: 7c:8b:86:f9:21:7d:94:1f:f4:11:16:0b:ef:33:b2: 87:e8:e8:5e:a0:ee:d8:e7:80:87:ff:b2:6e:98:d3: 8f:63:d8:9a:76:fe:6d:c8:99:75:42:b2:04:19:f9: fe:98:37:33:54:53:1a:14:f3:f9:5e:33:29:78:d0: c2:30:60:57:3a:19:c3:dc:ea:09:ec:5b:d0:55:09: f9:93:8f:e6:3a:46:c7:2b:80:e3:7e:6d:d3:6f:2c: 10:b5:d6:d8:56:c6:9d:75:94:23:b1:4a:8e:25:6e: 6b:ee:15:86:1c:c1:4a:ac:f1:53:62:6c:e5:58:6d: a8:16:87:db:c9:c7:08:b6:9b:6e:69:61:2b:40:a0: a4:08:5e:c6:4f:be:07:98:0c:77:6c:6c:54:c7:f5: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a300::/40 Signature Algorithm: sha256WithRSAEncryption 0f:09:66:58:d6:1c:cc:31:5b:85:f5:42:d8:cb:4d:a0:9c:39: b2:d9:e8:bc:86:77:01:b2:34:9b:52:59:0b:22:3d:1c:8f:f0: 7f:38:26:be:ce:a9:57:66:28:87:35:1d:87:bd:d6:8a:50:10: be:2a:93:4e:5f:25:e5:b2:0e:c8:3e:80:08:f9:5a:2e:bf:4e: 3b:70:15:56:03:3c:cd:45:54:88:a4:a8:3f:0d:97:07:83:88: f6:95:4b:a4:6e:4a:cf:90:4b:bf:17:98:80:66:90:6a:21:1c: 1f:0b:75:33:34:d5:d4:d9:46:5a:20:88:6d:9e:86:31:52:89: 5f:8c:61:d1:38:4d:8f:bd:60:64:55:da:f1:39:5b:f8:50:2c: d9:b4:06:42:c0:ae:79:47:d1:e3:bb:bc:db:08:e8:d6:86:86: d1:34:a5:b0:67:5f:55:a1:7f:a5:61:3a:aa:b9:21:2c:4a:43: 96:ef:96:44:07:b5:13:c9:8a:14:4c:f9:c2:e4:29:e8:4e:0c: 3f:f5:9e:f6:c3:fa:46:84:98:19:e9:60:74:4b:5c:e7:87:7e: 82:7d:e0:21:33:3c:83:a0:33:21:0d:b8:67:bc:23:9a:16:00: ba:97:f5:59:ec:4e:f3:89:1a:04:ce:69:4c:aa:35:68:8e:cc: 16:31:93:be -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUNW+BGALMfBagwej8kMUTzjXIU18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA0MTgyMzE1MTlaFw0yNTA0MTcyMzIwMTlaMDMxMTAvBgNV BAMTKDk4QUZCNzREMjc0MkNFOERCRTRFRkVBQTBFOTZCQ0ZFNTJBOTA5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxrkxf8KbuxOPoAsR42pUiW5D iY0CAYTiT34d9PM4Aaw+SM3eFRmyxFitAdGL9JA7Ue1KAW/Uc9ocVtaxspPLBg7U fsRHLQ15Adnv3ujgtB+vZqhIz8cG3ioT0apAz2uNL60CgEUE93yLhvkhfZQf9BEW C+8zsofo6F6g7tjngIf/sm6Y049j2Jp2/m3ImXVCsgQZ+f6YNzNUUxoU8/leMyl4 0MIwYFc6GcPc6gnsW9BVCfmTj+Y6RscrgON+bdNvLBC11thWxp11lCOxSo4lbmvu FYYcwUqs8VNibOVYbagWh9vJxwi2m25pYStAoKQIXsZPvgeYDHdsbFTH9Y4pAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYr7dNJ0LOjb5O /qoOlrz+UqkJyzAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4Lzcv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgv Ny85OEFGQjc0RDI3NDJDRThEQkU0RUZFQUEwRTk2QkNGRTUyQTkwOUNCLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEozANBgkqhkiG9w0BAQsFAAOCAQEADwlm WNYczDFbhfVC2MtNoJw5stnovIZ3AbI0m1JZCyI9HI/wfzgmvs6pV2YohzUdh73W ilAQviqTTl8l5bIOyD6ACPlaLr9OO3AVVgM8zUVUiKSoPw2XB4OI9pVLpG5Kz5BL vxeYgGaQaiEcHwt1MzTV1NlGWiCIbZ6GMVKJX4xh0ThNj71gZFXa8Tlb+FAs2bQG QsCueUfR47u82wjo1oaG0TSlsGdfVaF/pWE6qrkhLEpDlu+WRAe1E8mKFEz5wuQp 6E4MP/We9sP6RoSYGelgdEtc54d+gn3gITM8g6AzIQ24Z7wjmhYAupf1WexO84ka BM5pTKo1aI7MFjGTvg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org