$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer File: F163E1EE74384430F7A75E7448A376D89DBBE730.cer (raw, json) Hash identifier: AyhSac2tV5sHoil5pz3vqMdWDOMnqM5H3bhEtQRSUtA= Subject key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 5722DFCCC38FD1F5F86ECF86AE5022ABF1872803 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 30 Sep 2024 16:50:35 +0000 Certificate not after: Mon 29 Sep 2025 16:55:35 +0000 Subordinate resources: IP: 2a09:54c6:d000::/36 IP: 2a0a:6044:ac70::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:22:df:cc:c3:8f:d1:f5:f8:6e:cf:86:ae:50:22:ab:f1:87:28:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Sep 30 16:50:35 2024 GMT Not After : Sep 29 16:55:35 2025 GMT Subject: CN=F163E1EE74384430F7A75E7448A376D89DBBE730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:96:e3:4a:9d:cb:ed:7c:16:55:cd:28:7c: d2:29:04:42:56:f4:aa:52:d6:1f:fd:81:0b:0c:be: 70:f1:f2:46:cf:f9:6c:8a:93:1a:7e:0d:04:4c:bf: 89:b0:7f:c2:f7:d9:61:11:e2:bd:95:50:26:d6:32: df:3f:34:d4:69:37:5a:84:af:4d:42:ed:20:a9:0d: 5f:2b:b3:1e:bb:90:b4:2d:21:bc:5f:80:39:e0:ea: 26:d3:3e:9a:1d:e4:e3:06:36:78:dd:58:b1:08:02: dc:a5:80:b0:95:64:90:4d:cc:f1:91:07:53:95:9b: ce:97:fb:8e:6e:02:7e:95:da:db:95:55:f9:9f:95: 59:38:09:40:83:ba:61:9a:3a:80:40:a6:18:58:d8: 5f:3b:83:fd:ce:82:53:b9:2c:9a:dc:9e:db:f0:3f: 10:61:9c:4b:f8:35:36:f2:ff:e6:cf:7c:a1:fa:7e: 6a:46:c9:d7:ee:2a:e6:bd:1f:b1:d8:6a:42:5e:9b: ec:1e:14:02:b4:f7:e5:31:fd:80:0e:9c:87:c0:86: 53:13:ba:fb:d7:0e:7e:88:f7:9f:63:68:08:b8:7e: f4:7a:73:31:6a:bb:e8:92:1a:54:2e:39:b6:62:26: 46:43:10:6d:37:a7:94:4d:f6:85:5f:54:01:2a:d7: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:d000::/36 2a0a:6044:ac70::/44 Signature Algorithm: sha256WithRSAEncryption 9c:bc:54:d5:34:62:5d:57:4f:fa:10:25:6b:d7:43:ea:08:e5: 84:c1:40:b8:3a:9b:79:46:b0:bb:73:34:2d:34:96:97:b2:e9: ca:ab:fe:f7:b2:16:3c:29:8f:4e:13:96:8c:e1:bd:c6:fa:27: 6c:cc:77:0c:fa:66:a1:3a:e4:a6:69:f6:f3:3e:4c:0a:e3:4b: 9e:05:bf:5d:68:bc:0c:6a:1a:68:80:8e:50:c5:ad:c4:da:37: d5:64:97:b2:c3:dc:60:45:49:d3:a5:37:a1:86:d1:1a:ea:45: a1:1a:38:b5:55:14:11:6a:76:af:9e:a4:f3:96:f1:3f:d5:c6: 05:58:ab:69:aa:ca:2d:66:0a:19:12:4b:c0:cf:29:31:5a:8a: 61:70:64:71:53:01:69:f5:9f:24:0c:78:53:a3:08:f2:88:4e: 73:62:1f:f5:6c:27:dc:63:0e:83:bb:6a:fc:48:34:80:7d:3e: 80:0b:83:8d:10:de:97:a3:da:d9:ca:77:a9:63:e5:d5:cb:4f: 36:2e:ca:12:98:c0:cd:45:d1:8e:38:c0:b1:56:6d:f6:dd:f8: d3:b2:07:67:8f:18:69:71:b0:66:83:31:30:33:09:22:61:18: dd:bd:c8:24:b1:f7:e5:3d:df:6f:7a:3a:3a:db:7e:88:63:7b: 76:94:de:06 -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgIUVyLfzMOP0fX4bs+GrlAiq/GHKAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA5MzAxNjUwMzVaFw0yNTA5MjkxNjU1MzVaMDMxMTAvBgNV BAMTKEYxNjNFMUVFNzQzODQ0MzBGN0E3NUU3NDQ4QTM3NkQ4OURCQkU3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6ZbjSp3L7XwWVc0ofNIpBEJW 9KpS1h/9gQsMvnDx8kbP+WyKkxp+DQRMv4mwf8L32WER4r2VUCbWMt8/NNRpN1qE r01C7SCpDV8rsx67kLQtIbxfgDng6ibTPpod5OMGNnjdWLEIAtylgLCVZJBNzPGR B1OVm86X+45uAn6V2tuVVfmflVk4CUCDumGaOoBAphhY2F87g/3OglO5LJrcntvw PxBhnEv4NTby/+bPfKH6fmpGydfuKua9H7HYakJem+weFAK09+Ux/YAOnIfAhlMT uvvXDn6I959jaAi4fvR6czFqu+iSGlQuObZiJkZDEG03p5RN9oVfVAEq19RVAgMB AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxY+HudDhEMPen XnRIo3bYnbvnMDAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2NjZjE0LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82YmU0M2Q5ZS1lNDQwLTQ3YWUtYTdiYy0xOWI3OTkzY2NmMTQv MS9GMTYzRTFFRTc0Mzg0NDMwRjdBNzVFNzQ0OEEzNzZEODlEQkJFNzMwLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBgQqCVTG0AMHBCoKYESscDANBgkqhkiG9w0BAQsF AAOCAQEAnLxU1TRiXVdP+hAla9dD6gjlhMFAuDqbeUawu3M0LTSWl7Lpyqv+97IW PCmPThOWjOG9xvonbMx3DPpmoTrkpmn28z5MCuNLngW/XWi8DGoaaICOUMWtxNo3 1WSXssPcYEVJ06U3oYbRGupFoRo4tVUUEWp2r56k85bxP9XGBViraarKLWYKGRJL wM8pMVqKYXBkcVMBafWfJAx4U6MI8ohOc2If9Wwn3GMOg7tq/Eg0gH0+gAuDjRDe l6Pa2cp3qWPl1ctPNi7KEpjAzUXRjjjAsVZt9t3407IHZ48YaXGwZoMxMDMJImEY 3b3IJLH35T3fb3o6Ott+iGN7dpTeBg== -----END CERTIFICATE-----Generated at Thu Nov 21 18:06:09 2024 by rpki-client on console-fra.rpki-client.org