$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer File: E48ABA5D969C9C557913482E3064E3BC626018E3.cer (raw, json) Hash identifier: FFN4RIuUK0BsaquQt4jPTSu55tm6IoBRZhEt8xhu5Is= Subject key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 3426679F5FFF8A319C1131BF5E0AEF97B5E805F3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 22 Aug 2024 12:37:37 +0000 Certificate not after: Thu 21 Aug 2025 12:42:37 +0000 Subordinate resources: IP: 2a0a:6044:7d00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 13:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:26:67:9f:5f:ff:8a:31:9c:11:31:bf:5e:0a:ef:97:b5:e8:05:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 22 12:37:37 2024 GMT Not After : Aug 21 12:42:37 2025 GMT Subject: CN=E48ABA5D969C9C557913482E3064E3BC626018E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:be:15:b3:ca:0c:6b:cb:90:e1:8c:ce:6e: e5:75:3f:59:07:d3:a4:b8:91:da:a5:3f:a2:ab:e8: e6:5b:e5:b0:bf:a8:f0:4f:cc:20:03:90:06:d3:31: 27:03:50:52:50:02:2a:48:d5:2e:a9:17:46:0d:73: 2b:6e:22:2e:41:af:cf:6d:14:79:8a:57:01:97:02: 72:f7:aa:eb:6c:2b:5e:02:e6:44:69:87:28:f0:ab: de:06:32:31:75:ff:6a:79:b8:f2:d3:25:b6:6c:9c: c4:e6:65:44:5e:a4:31:6f:26:1d:57:10:07:27:a0: a6:2f:dc:e4:28:b9:ae:f8:3f:30:74:35:73:83:d0: d3:51:3a:fb:18:2d:52:bd:45:0a:54:a0:cb:b1:34: 5b:75:d3:40:05:e2:29:c1:93:bc:24:b8:28:7b:11: 2a:2b:ba:4d:25:cd:20:ca:05:53:7a:16:dc:76:c7: d7:d4:4b:f4:d3:8c:18:59:7d:65:6d:d5:de:10:06: cb:9e:d5:85:38:59:46:71:f6:65:74:b3:8f:67:bc: bf:09:83:76:ac:67:f1:1e:86:e0:43:90:cf:5b:3f: 3c:94:f9:5b:f7:86:5f:1e:f4:85:a1:84:b5:73:b5: b1:4b:ea:b6:97:b6:64:ef:ff:07:31:ca:a2:ff:1a: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7d00::/40 Signature Algorithm: sha256WithRSAEncryption 1b:e4:b9:a3:c0:bb:2d:be:58:f2:ab:a5:5e:3c:93:9d:cf:35: bd:b9:eb:f4:96:3d:13:da:ed:83:42:e4:dd:87:a3:41:4c:a0: b9:6a:a9:fc:3b:37:f7:54:99:e6:bb:7d:f2:19:2e:7f:a4:c5: 7a:3c:f9:f2:b2:44:2a:3a:da:ee:7c:25:13:3e:12:3e:7e:40: fe:26:4b:13:35:3d:63:d5:76:d0:00:ec:63:22:85:31:63:ff: 4f:af:e7:c0:6b:99:13:4b:97:99:d0:1b:c7:e5:59:c8:50:2c: bb:07:54:dc:bc:20:dd:1b:72:e4:1d:64:98:e0:05:58:40:0f: 86:07:d2:9d:88:0b:7f:24:ad:f7:e8:ae:ac:5d:ef:9d:87:41: 75:b8:4e:b9:03:e9:6d:2d:bc:1a:c3:3e:51:ac:6d:32:a6:8a: 35:b4:3e:00:85:a2:3d:ef:b1:bb:4a:fd:41:11:53:f3:b4:6f: e2:2d:2a:35:c8:e6:97:92:2f:e1:71:b2:3c:49:40:15:a2:4d: cc:9d:32:e1:bf:16:5d:0f:8d:cd:30:c3:b6:d5:94:e2:b2:76: dd:c9:70:8d:a5:2b:f4:c3:e6:e7:12:3f:95:34:f4:33:ed:50: 5b:96:3f:da:cc:1f:22:ca:48:19:31:b9:82:3e:6a:a3:42:a6: 8c:6d:30:35 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUNCZnn1//ijGcETG/Xgrvl7XoBfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjIxMjM3MzdaFw0yNTA4MjExMjQyMzdaMDMxMTAvBgNV BAMTKEU0OEFCQTVEOTY5QzlDNTU3OTEzNDgyRTMwNjRFM0JDNjI2MDE4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZr4Vs8oMa8uQ4YzObuV1P1kH 06S4kdqlP6Kr6OZb5bC/qPBPzCADkAbTMScDUFJQAipI1S6pF0YNcytuIi5Br89t FHmKVwGXAnL3qutsK14C5kRphyjwq94GMjF1/2p5uPLTJbZsnMTmZURepDFvJh1X EAcnoKYv3OQoua74PzB0NXOD0NNROvsYLVK9RQpUoMuxNFt100AF4inBk7wkuCh7 ESoruk0lzSDKBVN6Ftx2x9fUS/TTjBhZfWVt1d4QBsue1YU4WUZx9mV0s49nvL8J g3asZ/EehuBDkM9bPzyU+Vv3hl8e9IWhhLVztbFL6raXtmTv/wcxyqL/GqUzAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkirpdlpycVXkT SC4wZOO8YmAY4zAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlMzAyZTYtODgxZS00ZDkzLWFlM2UtOWI3Yzk3YTliOWQwLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2UzMDJlNi04ODFlLTRkOTMtYWUzZS05YjdjOTdhOWI5ZDAv MS9FNDhBQkE1RDk2OUM5QzU1NzkxMzQ4MkUzMDY0RTNCQzYyNjAxOEUzLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEfTANBgkqhkiG9w0BAQsFAAOCAQEAG+S5 o8C7Lb5Y8qulXjyTnc81vbnr9JY9E9rtg0Lk3YejQUyguWqp/Ds391SZ5rt98hku f6TFejz58rJEKjra7nwlEz4SPn5A/iZLEzU9Y9V20ADsYyKFMWP/T6/nwGuZE0uX mdAbx+VZyFAsuwdU3Lwg3Rty5B1kmOAFWEAPhgfSnYgLfySt9+iurF3vnYdBdbhO uQPpbS28GsM+UaxtMqaKNbQ+AIWiPe+xu0r9QRFT87Rv4i0qNcjml5Iv4XGyPElA FaJNzJ0y4b8WXQ+NzTDDttWU4rJ23clwjaUr9MPm5xI/lTT0M+1QW5Y/2swfIspI GTG5gj5qo0KmjG0wNQ== -----END CERTIFICATE-----Generated at Fri Sep 20 00:00:19 2024 by rpki-client on console-ams.rpki-client.org