$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer File: E472D821C14C9E0738F632D7A74DF516C446A5E2.cer (raw, json) Hash identifier: 6QzeDJx0F0YovTdZ69xdjv1Kfw9WF9y8ImlHeUjuuGg= Subject key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 48550888B0420E438D3BAD8E9EB4F32970A0288A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 30 Sep 2024 19:29:12 +0000 Certificate not after: Mon 29 Sep 2025 19:34:12 +0000 Subordinate resources: IP: 2a06:1281:7000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:55:08:88:b0:42:0e:43:8d:3b:ad:8e:9e:b4:f3:29:70:a0:28:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Sep 30 19:29:12 2024 GMT Not After : Sep 29 19:34:12 2025 GMT Subject: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:00:e5:09:42:2d:f7:da:cc:64:ff:22:1f: 9d:d5:a1:1d:74:9f:ac:ab:13:45:d0:10:b7:20:c0: 5b:e3:e1:4c:b6:3e:81:72:7d:34:c6:f9:82:1b:ac: 1a:96:05:91:f2:2c:59:ed:99:25:38:64:a3:35:51: 5c:6f:e0:6a:8b:34:21:3b:38:34:39:eb:f6:cb:67: 83:d0:81:6c:48:13:ce:78:ee:16:49:a3:b7:06:4d: 5b:d2:bd:89:08:f1:fd:ce:a4:d7:8e:eb:4f:c2:e3: e0:7e:95:7e:97:ae:0a:fc:7f:ab:75:0b:2b:44:c0: ce:f2:95:40:56:b0:92:99:74:fb:fa:a9:29:5c:03: a3:23:1f:32:52:f1:5f:3f:75:03:36:2c:3f:f7:02: c6:77:cb:c9:21:88:18:84:03:55:d1:47:2a:1f:24: a5:23:53:b6:1f:08:f3:b4:43:49:3c:bd:aa:32:83: 0a:3a:fd:8a:a2:2a:52:a3:52:6b:29:86:5e:f2:1a: ff:34:d6:ff:1d:93:6c:25:60:a5:a0:ef:22:1d:6d: 68:bd:d3:52:56:96:35:49:7d:b7:f3:05:3a:34:11: d9:e0:c9:f9:16:24:d3:55:f3:11:bb:09:d7:fb:eb: e6:ec:61:fa:23:6c:4e:ff:8b:ee:f7:be:b0:92:04: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:7000::/36 Signature Algorithm: sha256WithRSAEncryption 52:5f:c6:87:f1:9f:f8:ff:4f:39:85:0e:89:aa:66:1b:39:2c: 9a:38:35:fc:93:11:6d:90:b9:36:35:88:10:20:af:26:d5:7b: 61:14:f4:a3:97:89:ac:1b:1e:fe:76:f0:12:29:c3:85:1f:54: a8:68:92:16:c5:0d:ae:b4:b7:50:e5:c7:4b:48:ec:8e:86:87: e0:f9:d7:44:da:ad:ab:6a:94:89:51:31:ed:6d:fb:ae:65:46: ed:99:03:8b:cf:9c:b9:c4:54:c0:e6:d2:3d:78:27:6d:af:38: 53:e8:06:84:ae:0e:56:55:5a:12:31:3f:b2:78:29:10:62:48: 8f:1e:d5:03:b9:e7:e1:96:49:2e:3f:90:e9:cc:20:fd:91:2e: d2:83:c2:c6:84:2f:23:5e:9a:d0:2a:6c:29:aa:b8:8c:81:e0: 2d:f3:0d:7c:36:88:27:c9:1f:1e:37:68:2d:23:b4:47:2f:99: 2c:cf:9a:4f:1b:d1:3d:df:e6:86:64:17:ea:a9:2e:f7:ca:49: 9c:88:60:aa:fa:a3:54:1b:83:1a:ee:f9:87:98:6d:d1:b0:28: 00:de:f4:9f:fd:f6:96:db:c4:0f:7e:47:4e:ba:6f:c1:6a:e0: 88:94:4d:b1:ec:5c:c0:9d:60:0a:18:3d:20:4e:02:ae:ea:f8: fa:4e:e8:07 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUSFUIiLBCDkONO62OnrTzKXCgKIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA5MzAxOTI5MTJaFw0yNTA5MjkxOTM0MTJaMDMxMTAvBgNV BAMTKEU0NzJEODIxQzE0QzlFMDczOEY2MzJEN0E3NERGNTE2QzQ0NkE1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuQDlCUIt99rMZP8iH53VoR10 n6yrE0XQELcgwFvj4Uy2PoFyfTTG+YIbrBqWBZHyLFntmSU4ZKM1UVxv4GqLNCE7 ODQ56/bLZ4PQgWxIE8547hZJo7cGTVvSvYkI8f3OpNeO60/C4+B+lX6Xrgr8f6t1 CytEwM7ylUBWsJKZdPv6qSlcA6MjHzJS8V8/dQM2LD/3AsZ3y8khiBiEA1XRRyof JKUjU7YfCPO0Q0k8vaoygwo6/YqiKlKjUmsphl7yGv801v8dk2wlYKWg7yIdbWi9 01JWljVJfbfzBTo0EdngyfkWJNNV8xG7Cdf76+bsYfojbE7/i+73vrCSBIIZAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkctghwUyeBzj2 MtenTfUWxEal4jAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMjdlNThlNDItMjQ4ZS00ZDg4LWE1NzUtMGI0Njk2NTEzMDAxLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8yN2U1OGU0Mi0yNDhlLTRkODgtYTU3NS0wYjQ2OTY1MTMwMDEv MC9FNDcyRDgyMUMxNEM5RTA3MzhGNjMyRDdBNzRERjUxNkM0NDZBNUUyLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqBhKBcDANBgkqhkiG9w0BAQsFAAOCAQEAUl/G h/Gf+P9POYUOiapmGzksmjg1/JMRbZC5NjWIECCvJtV7YRT0o5eJrBse/nbwEinD hR9UqGiSFsUNrrS3UOXHS0jsjoaH4PnXRNqtq2qUiVEx7W37rmVG7ZkDi8+cucRU wObSPXgnba84U+gGhK4OVlVaEjE/sngpEGJIjx7VA7nn4ZZJLj+Q6cwg/ZEu0oPC xoQvI16a0CpsKaq4jIHgLfMNfDaIJ8kfHjdoLSO0Ry+ZLM+aTxvRPd/mhmQX6qku 98pJnIhgqvqjVBuDGu75h5ht0bAoAN70n/32ltvED35HTrpvwWrgiJRNsexcwJ1g Chg9IE4Crur4+k7oBw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org