$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer File: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer (raw, json) Hash identifier: 6EpJxZJ+iLOK2pFtSfwguGUFM61AJ0bSKsrYVhskdFQ= Subject key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 7BA83BBAF5D76D16DB0439413FD036C4F8EE4121 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 20 May 2024 08:52:46 +0000 Certificate not after: Mon 19 May 2025 08:57:46 +0000 Subordinate resources: IP: 2a0a:6044:b000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a8:3b:ba:f5:d7:6d:16:db:04:39:41:3f:d0:36:c4:f8:ee:41:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: May 20 08:52:46 2024 GMT Not After : May 19 08:57:46 2025 GMT Subject: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:50:1f:6c:13:28:18:af:2e:8e:d7:8f:6a: 1c:9d:07:db:f0:49:f1:ce:46:e9:8e:bc:45:ba:b3: 3b:d6:a4:94:f6:84:70:db:6e:7c:98:35:ee:0e:6e: 97:a1:da:52:b6:fc:fa:59:51:2e:2a:51:68:3f:fe: 77:5a:83:85:c0:8e:71:82:e5:fe:cd:20:b5:df:23: 63:47:dd:46:de:b4:79:16:fb:21:70:43:6d:32:55: 47:9b:f5:fe:30:c6:98:d5:56:d1:13:fc:fa:d7:a2: 35:ed:da:3b:72:a7:a5:28:7a:bd:d2:97:c5:0c:f7: c9:12:c0:0d:e3:31:3e:a9:d6:ef:4e:e6:75:3a:33: d0:0d:9d:ac:15:f2:d9:4a:8d:63:e5:ca:62:d3:ea: 89:d8:ec:d7:6f:e2:cd:e9:3c:70:8c:0a:94:2d:a3: d1:92:c5:66:64:44:6a:56:3a:2f:45:52:e5:12:3b: 27:a7:f7:d4:b6:e9:92:b5:c4:af:a5:10:9a:be:25: 81:c3:31:fb:ad:7f:80:c7:04:52:e6:bd:06:44:da: f4:6d:e0:a6:b3:e7:17:61:2e:da:95:c5:e6:79:fc: 2c:9a:e6:bd:f6:bd:25:aa:79:83:37:ba:95:82:40: 96:ed:6d:27:38:cb:31:18:3d:28:05:02:4e:de:ea: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b000::/40 Signature Algorithm: sha256WithRSAEncryption 88:db:82:0a:71:23:69:b0:67:69:1d:aa:fc:24:eb:b9:a0:93: c4:b6:18:c4:28:72:2c:4e:7a:4d:af:17:63:f2:d2:00:18:6a: e6:d8:35:2c:f2:f2:d6:0f:60:24:38:dc:f4:14:1b:67:66:dd: ae:8b:91:7b:3f:b5:e6:5b:b3:06:3d:55:a8:07:05:22:c3:57: d6:77:8b:cb:fd:39:7a:4f:da:f8:3e:2d:08:dc:d1:52:e2:3e: 19:b2:75:c4:94:f4:16:5b:ba:4b:a2:32:9b:02:63:28:15:da: 2d:80:ad:af:68:05:a7:88:06:e0:65:50:78:2e:82:8d:57:cf: 70:d5:f2:97:80:a8:2e:64:3c:ae:9c:2a:32:21:51:9c:de:f8: 56:1b:80:97:49:05:f3:09:99:76:dd:15:04:34:71:c1:e5:3c: 09:28:07:38:3d:c3:ee:05:3b:0a:88:e3:97:51:fa:7e:50:8d: 09:5c:f8:59:e8:0c:1b:eb:03:ae:ff:97:aa:84:5a:19:15:9e: 1d:2e:f1:19:a6:4f:d6:01:1a:9b:7e:06:a5:0f:d0:f3:fd:f3: 2f:49:00:e7:b2:8b:c2:f5:83:53:4e:75:7e:5a:8d:14:10:0d: 1a:92:05:ac:cc:d7:07:3d:f7:d8:34:c7:79:e3:ae:87:8d:e6: 15:ec:ca:c3 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUe6g7uvXXbRbbBDlBP9A2xPjuQSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA1MjAwODUyNDZaFw0yNTA1MTkwODU3NDZaMDMxMTAvBgNV BAMTKEJEMUMxOUNFRUIwQzNGNkY4NDc0MDQ4QUVEQzhDRDAyQzU2RkM2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZlAfbBMoGK8ujtePahydB9vw SfHORumOvEW6szvWpJT2hHDbbnyYNe4Obpeh2lK2/PpZUS4qUWg//ndag4XAjnGC 5f7NILXfI2NH3UbetHkW+yFwQ20yVUeb9f4wxpjVVtET/PrXojXt2jtyp6Uoer3S l8UM98kSwA3jMT6p1u9O5nU6M9ANnawV8tlKjWPlymLT6onY7Ndv4s3pPHCMCpQt o9GSxWZkRGpWOi9FUuUSOyen99S26ZK1xK+lEJq+JYHDMfutf4DHBFLmvQZE2vRt 4Kaz5xdhLtqVxeZ5/Cya5r32vSWqeYM3upWCQJbtbSc4yzEYPSgFAk7e6sXxAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9HBnO6ww/b4R0 BIrtyM0CxW/GqzAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAwYWY1LzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8yNGRiNmUwZS02OTZjLTRmODktOGQ0OC0yNzQ1NTk3MDBhZjUv MC9CRDFDMTlDRUVCMEMzRjZGODQ3NDA0OEFFREM4Q0QwMkM1NkZDNkFCLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEsDANBgkqhkiG9w0BAQsFAAOCAQEAiNuC CnEjabBnaR2q/CTruaCTxLYYxChyLE56Ta8XY/LSABhq5tg1LPLy1g9gJDjc9BQb Z2bdrouRez+15luzBj1VqAcFIsNX1neLy/05ek/a+D4tCNzRUuI+GbJ1xJT0Flu6 S6IymwJjKBXaLYCtr2gFp4gG4GVQeC6CjVfPcNXyl4CoLmQ8rpwqMiFRnN74VhuA l0kF8wmZdt0VBDRxweU8CSgHOD3D7gU7Cojjl1H6flCNCVz4WegMG+sDrv+XqoRa GRWeHS7xGaZP1gEam34GpQ/Q8/3zL0kA57KLwvWDU051flqNFBANGpIFrMzXBz33 2DTHeeOuh43mFezKww== -----END CERTIFICATE-----Generated at Sat Sep 28 23:09:22 2024 by rpki-client on console-fra.rpki-client.org