$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer File: BD36051F9A727996CE309FAF4E5757E504EB2C46.cer (raw, json) Hash identifier: 66ZeKESGRyCTTcCoFixHzwisngra0EqP2Q4iDFYjhIA= Subject key identifier: BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 15A282F42F58D32FB5A9D0BBE66BA14D0C43A881 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 24 Oct 2024 20:34:29 +0000 Certificate not after: Thu 23 Oct 2025 20:39:29 +0000 Subordinate resources: IP: 2a09:54c6:8000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a2:82:f4:2f:58:d3:2f:b5:a9:d0:bb:e6:6b:a1:4d:0c:43:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Oct 24 20:34:29 2024 GMT Not After : Oct 23 20:39:29 2025 GMT Subject: CN=BD36051F9A727996CE309FAF4E5757E504EB2C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:34:34:08:11:a2:72:15:e8:f1:4e:24:33:73: bd:2c:49:7e:76:4d:7f:69:12:9e:9e:37:50:77:09: f2:0c:07:55:99:5d:a7:02:67:75:a1:2e:4d:8c:89: bc:28:ee:c5:d4:f8:a2:3e:a7:33:14:a9:fe:fa:43: ac:fd:91:a4:1b:70:e9:ae:66:ef:23:2b:94:ab:12: 64:e6:f3:f4:81:d1:aa:a4:19:c2:70:56:89:0d:17: 5a:71:72:20:3a:74:7b:a3:68:23:ff:34:6a:5f:2b: 86:a1:20:be:cc:d9:12:d5:28:a3:fb:b9:10:da:9f: 1b:82:36:bf:5d:e1:5e:e7:43:70:8d:f8:2e:99:9f: 23:a5:68:4c:04:27:51:6b:5a:fc:e8:64:cd:78:b3: fe:51:bf:40:f7:d0:98:60:08:a5:70:2e:4b:22:63: 76:ca:a8:1f:7b:83:a0:93:73:24:3f:85:f3:83:01: f5:62:6f:b2:02:71:8c:92:71:50:b1:77:cf:c6:8d: 5a:e7:1d:30:34:86:c6:bf:f5:2a:db:6a:65:8e:e7: 77:a2:f0:5e:ad:8f:1d:2f:f5:20:8c:43:df:d5:31: a6:10:20:d8:f2:64:d9:f7:e8:50:5d:9d:36:c7:5d: 0f:8c:ba:6d:b5:46:0f:85:bd:de:bc:d9:dd:04:10: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:8000::/36 Signature Algorithm: sha256WithRSAEncryption 4f:ae:bc:4b:fa:ce:40:3e:d4:9a:c7:3e:01:2a:86:68:54:4c: e6:10:12:56:e4:8b:5e:39:c7:a3:b7:4e:90:af:39:67:bf:f0: 94:03:f4:d8:70:48:23:d5:d9:3f:5d:b2:b4:5a:70:0e:fb:5e: cb:6f:67:bd:80:46:f3:ae:9d:00:d2:8e:f0:5a:a5:6c:68:01: 91:b8:aa:e4:36:88:02:b3:9d:7f:06:6d:1e:20:64:f6:52:67: ef:4e:ae:7f:2f:e0:ef:f7:ff:9f:60:09:21:96:85:e0:2b:31: 9f:27:63:bf:f5:48:45:bc:19:d7:df:c7:13:bb:d0:4e:f3:db: 5a:73:a9:99:81:f2:bb:da:da:a5:b5:e4:7b:5b:b3:53:1c:88: fa:de:a3:fb:59:cc:cf:ee:78:aa:a6:c0:fe:0b:65:5b:66:0f: a3:08:5e:eb:af:f2:f7:d7:10:82:82:2a:20:22:ef:7d:55:a1: 37:b5:29:5b:b0:82:53:71:24:90:c2:6c:65:ac:12:f3:ca:e5: c8:c7:62:f0:00:97:4b:3c:d4:e1:54:1c:d9:fc:3b:52:f6:a1: 61:6d:96:91:ba:07:4a:e6:5d:e7:ef:ab:ba:dd:63:a5:0f:60: 86:bf:42:3a:bf:3a:2e:f3:f2:24:28:26:c3:53:26:11:a9:98: 5b:e9:6d:54 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUFaKC9C9Y0y+1qdC75muhTQxDqIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDEwMjQyMDM0MjlaFw0yNTEwMjMyMDM5MjlaMDMxMTAvBgNV BAMTKEJEMzYwNTFGOUE3Mjc5OTZDRTMwOUZBRjRFNTc1N0U1MDRFQjJDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtNDQIEaJyFejxTiQzc70sSX52 TX9pEp6eN1B3CfIMB1WZXacCZ3WhLk2Mibwo7sXU+KI+pzMUqf76Q6z9kaQbcOmu Zu8jK5SrEmTm8/SB0aqkGcJwVokNF1pxciA6dHujaCP/NGpfK4ahIL7M2RLVKKP7 uRDanxuCNr9d4V7nQ3CN+C6ZnyOlaEwEJ1FrWvzoZM14s/5Rv0D30JhgCKVwLksi Y3bKqB97g6CTcyQ/hfODAfVib7ICcYyScVCxd8/GjVrnHTA0hsa/9SrbamWO53ei 8F6tjx0v9SCMQ9/VMaYQINjyZNn36FBdnTbHXQ+Mum21Rg+Fvd682d0EEA/9AgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9NgUfmnJ5ls4w n69OV1flBOssRjAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdlOTUwLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8yMmNmOGJhNy1jYjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAv Mi9CRDM2MDUxRjlBNzI3OTk2Q0UzMDlGQUY0RTU3NTdFNTA0RUIyQzQ2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqCVTGgDANBgkqhkiG9w0BAQsFAAOCAQEAT668 S/rOQD7Umsc+ASqGaFRM5hASVuSLXjnHo7dOkK85Z7/wlAP02HBII9XZP12ytFpw Dvtey29nvYBG866dANKO8FqlbGgBkbiq5DaIArOdfwZtHiBk9lJn706ufy/g7/f/ n2AJIZaF4Csxnydjv/VIRbwZ19/HE7vQTvPbWnOpmYHyu9rapbXke1uzUxyI+t6j +1nMz+54qqbA/gtlW2YPowhe66/y99cQgoIqICLvfVWhN7UpW7CCU3EkkMJsZawS 88rlyMdi8ACXSzzU4VQc2fw7UvahYW2WkboHSuZd5++rut1jpQ9ghr9COr86LvPy JCgmw1MmEamYW+ltVA== -----END CERTIFICATE-----Generated at Thu Nov 21 18:06:09 2024 by rpki-client on console-fra.rpki-client.org