$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer File: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer (raw, json) Hash identifier: nlildcOVWgecdIgcR8/tmqH0U0xfdJuhJdtlqnLnLyw= Subject key identifier: 9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 4A9B1E2543857A2AE05ACD98435498F111F6F4EB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 22 Jun 2024 15:40:48 +0000 Certificate not after: Sat 21 Jun 2025 15:45:48 +0000 Subordinate resources: IP: 2a0a:6044:ba00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9b:1e:25:43:85:7a:2a:e0:5a:cd:98:43:54:98:f1:11:f6:f4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 22 15:40:48 2024 GMT Not After : Jun 21 15:45:48 2025 GMT Subject: CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:25:c1:8e:b4:41:a3:3c:d2:4e:6a:63:0f: 6a:68:88:cf:b4:71:62:30:3b:25:ff:80:2d:16:7e: 5d:67:cb:b8:16:ec:e6:2d:2b:25:24:5d:87:8e:b2: f1:39:86:df:14:22:18:32:6e:e8:a1:2e:a7:09:2e: a5:12:c4:96:53:09:87:d5:d6:df:0a:69:48:80:f0: 56:fa:8d:a8:21:81:e4:ae:d4:9b:b3:94:bc:75:50: f1:80:10:8c:7a:d4:ac:8c:23:12:05:ea:f3:41:79: 27:2f:75:33:0f:77:9e:42:b1:8c:9a:7e:d9:2e:e4: 07:5e:24:4f:7a:cc:76:63:71:1b:05:ae:19:30:ae: 16:52:dc:eb:12:71:86:48:79:7a:1a:4a:28:21:85: b8:03:39:0d:8e:bf:52:ba:91:72:60:42:27:1b:13: a6:f8:bf:91:f8:9f:eb:07:88:88:c5:e8:98:72:7c: 6f:4d:12:a3:89:63:a3:07:c9:4b:f7:b3:5b:fc:57: e0:f6:5b:55:e6:42:40:6f:6a:74:78:e6:96:8c:37: 61:e1:90:59:14:d7:0c:04:f3:50:50:eb:11:cf:bb: d3:81:03:a3:93:28:35:4f:4a:d7:5c:3c:7c:3b:03: 11:d5:6b:12:11:d6:9c:4e:d9:5b:0e:7b:9e:3b:d5: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 48:d7:7e:91:e5:c0:24:fa:5d:08:9d:a4:e0:c4:fc:77:2a:31: 85:26:61:f6:c6:ca:14:09:9b:42:30:e3:e1:8b:ba:b8:db:89: 9e:69:34:7c:f9:48:de:0a:47:8d:03:81:da:ac:ff:60:c3:f7: f3:c7:c7:82:e9:a0:93:36:49:23:41:37:a5:e4:6b:ec:3e:6d: b1:e0:10:54:79:5b:ad:aa:f9:a7:c7:bd:13:92:07:d9:5c:58: de:ed:3e:aa:20:6c:e9:0f:73:d4:f5:e3:30:49:40:df:32:98: 94:81:0a:95:3f:89:80:39:cf:12:3a:aa:f2:ad:3e:c3:9d:3c: fe:78:90:d6:8b:85:d0:6c:60:3f:8f:81:71:8a:e3:a6:f4:f2: 72:3b:5b:43:e9:17:45:84:e6:1c:04:40:b6:65:43:cd:a5:2a: 1c:0f:7a:16:e0:03:58:b1:85:80:f6:54:9a:af:cc:f5:d8:0d: 01:d3:75:a5:a6:c3:98:e6:e1:5c:81:05:af:ef:e8:a2:83:4f: 9a:c7:d6:1d:49:a9:ef:fc:f9:d0:2e:aa:67:df:1b:c4:ae:7f: ac:e3:20:d5:98:54:7e:c9:a8:ec:3a:78:d7:6e:a9:89:d7:aa: 29:72:c2:ea:64:a5:4b:06:3a:87:5f:d1:87:a1:57:5e:73:ba: a5:f5:f9:88 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUSpseJUOFeirgWs2YQ1SY8RH29OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA2MjIxNTQwNDhaFw0yNTA2MjExNTQ1NDhaMDMxMTAvBgNV BAMTKDlEMjM4NTRCMUY2MUJBMzNBNDI5MzY3QkYwQTg5OEQ0RTRBOUEyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSCXBjrRBozzSTmpjD2poiM+0 cWIwOyX/gC0Wfl1ny7gW7OYtKyUkXYeOsvE5ht8UIhgybuihLqcJLqUSxJZTCYfV 1t8KaUiA8Fb6jaghgeSu1JuzlLx1UPGAEIx61KyMIxIF6vNBeScvdTMPd55CsYya ftku5AdeJE96zHZjcRsFrhkwrhZS3OsScYZIeXoaSighhbgDOQ2Ov1K6kXJgQicb E6b4v5H4n+sHiIjF6JhyfG9NEqOJY6MHyUv3s1v8V+D2W1XmQkBvanR45paMN2Hh kFkU1wwE81BQ6xHPu9OBA6OTKDVPStdcPHw7AxHVaxIR1pxO2VsOe5471enzAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdI4VLH2G6M6Qp NnvwqJjU5KmiTDAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv MS85RDIzODU0QjFGNjFCQTMzQTQyOTM2N0JGMEE4OThENEU0QTlBMjRDLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEujANBgkqhkiG9w0BAQsFAAOCAQEASNd+ keXAJPpdCJ2k4MT8dyoxhSZh9sbKFAmbQjDj4Yu6uNuJnmk0fPlI3gpHjQOB2qz/ YMP388fHgumgkzZJI0E3peRr7D5tseAQVHlbrar5p8e9E5IH2VxY3u0+qiBs6Q9z 1PXjMElA3zKYlIEKlT+JgDnPEjqq8q0+w508/niQ1ouF0GxgP4+BcYrjpvTycjtb Q+kXRYTmHARAtmVDzaUqHA96FuADWLGFgPZUmq/M9dgNAdN1pabDmObhXIEFr+/o ooNPmsfWHUmp7/z50C6qZ98bxK5/rOMg1ZhUfsmo7Dp4126pideqKXLC6mSlSwY6 h1/Rh6FXXnO6pfX5iA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org