$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer File: F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer (raw, json) Hash identifier: OS5A5NvsRwxzTh1Z78LR6c85CPv2H0NCMKxvuVzF2oI= Subject key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 7B88F584C46D215D9612BE1FEBD59DD95CE93AA3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 11:02:20 +0000 Certificate not after: Wed 07 Jan 2026 11:07:20 +0000 Subordinate resources: IP: 2a0a:6044:a800::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 20:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:88:f5:84:c4:6d:21:5d:96:12:be:1f:eb:d5:9d:d9:5c:e9:3a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jan 8 11:02:20 2025 GMT Not After : Jan 7 11:07:20 2026 GMT Subject: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:5c:e3:94:a1:09:e1:f4:46:26:c1:d5:9e: 3c:9f:87:49:c6:e7:0f:b1:e7:30:31:1c:8b:e0:4d: 25:6c:d9:4a:04:b1:b1:63:f7:9f:4a:e4:2e:03:ac: 4c:cc:c4:63:5f:af:a4:56:1e:64:1f:5e:d9:ab:5d: 7d:bc:82:2e:40:58:ac:49:dd:e8:f2:ec:ff:c2:0a: e5:9d:5f:2e:d8:f8:17:6f:4b:d9:fe:67:ef:02:e5: 9e:a6:73:c2:27:33:b2:61:e2:21:1f:3c:5e:9c:3c: 9f:12:b3:fb:6d:28:80:54:5f:70:23:9b:c8:44:b9: 83:0d:8f:41:95:b9:28:b1:cd:3a:7f:82:bf:31:da: 1f:c0:8f:c2:45:05:67:25:28:fb:49:05:d0:21:e0: 07:17:76:ce:f9:31:d9:89:69:1f:48:dc:7e:a8:95: b4:39:56:61:0b:9d:4e:1d:3d:7d:cd:d4:cc:5d:dc: 6a:2c:61:e9:14:47:22:87:70:62:93:4e:5f:45:e6: c4:71:af:fb:1d:66:61:ad:73:99:07:da:e0:b9:50: de:3a:22:5d:e7:14:f5:0d:c0:a8:95:df:92:25:91: 43:34:07:a5:52:39:29:b6:9d:fe:a5:e7:5d:ce:d4: 78:73:22:a9:67:ca:20:f3:65:a3:3b:d7:01:48:7b: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/40 Signature Algorithm: sha256WithRSAEncryption 7f:15:93:9a:fc:32:8e:a4:f7:62:d0:e7:cf:70:6d:2d:8d:36: 79:1c:1a:20:57:f6:ff:db:f6:45:15:29:23:c3:e4:cb:35:62: 1e:23:f4:ce:74:c7:5a:7d:db:e6:5a:6f:6b:4d:53:65:b7:f7: bd:f9:dd:0d:20:dd:06:fc:e3:eb:da:d8:59:51:c3:75:5c:ae: 3e:e6:18:e9:72:a1:63:d2:d9:0c:a1:a8:12:77:03:43:a5:9f: 12:25:ca:e2:14:cd:7e:83:37:2b:15:71:d1:46:f7:52:3b:c1: 3c:9d:f8:8f:31:30:e6:87:d7:56:71:c0:b5:bc:9a:27:15:bc: e1:a1:f7:46:98:73:a4:f4:6d:92:5b:2a:f7:28:34:a5:39:ae: 1b:6e:51:eb:61:62:d9:3c:b3:c4:3e:27:bf:2d:d1:54:22:43: 20:52:8a:c9:8e:41:10:ee:9c:48:12:86:c6:53:46:24:7a:ac: 80:a3:a4:73:55:d9:19:f4:fe:3d:5f:f7:2c:ea:45:9b:fa:bc: 4e:10:1c:c3:cb:15:81:22:25:2b:29:1b:34:30:46:b4:36:fa: f2:7e:04:83:4f:79:d5:9e:47:a5:45:01:5e:66:a2:25:ce:4e: aa:a7:c3:32:63:4e:6b:99:7c:c9:9d:5a:97:a8:ce:26:6d:66: ee:89:e1:5e -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUe4j1hMRtIV2WEr4f69Wd2VzpOqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNTAxMDgxMTAyMjBaFw0yNjAxMDcxMTA3MjBaMDMxMTAvBgNV BAMTKEYyQjgzOEYwQ0FERUZFMTJCM0NEQjNGNkRGNERCMzZFRkRGQzY4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNtlzjlKEJ4fRGJsHVnjyfh0nG 5w+x5zAxHIvgTSVs2UoEsbFj959K5C4DrEzMxGNfr6RWHmQfXtmrXX28gi5AWKxJ 3ejy7P/CCuWdXy7Y+BdvS9n+Z+8C5Z6mc8InM7Jh4iEfPF6cPJ8Ss/ttKIBUX3Aj m8hEuYMNj0GVuSixzTp/gr8x2h/Aj8JFBWclKPtJBdAh4AcXds75MdmJaR9I3H6o lbQ5VmELnU4dPX3N1Mxd3GosYekURyKHcGKTTl9F5sRxr/sdZmGtc5kH2uC5UN46 Il3nFPUNwKiV35IlkUM0B6VSOSm2nf6l513O1HhzIqlnyiDzZaM71wFIexjJAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyuDjwyt7+ErPN s/bfTbNu/fxoOTAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNkNTgzNmZmMWIyOS8yLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk ZjkyZWU0ZDg0MDE5NDNkNTgzNmZmMWIyOS8yL0YyQjgzOEYwQ0FERUZFMTJCM0NE QjNGNkRGNERCMzZFRkRGQzY4MzkubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoKYESoMA0G CSqGSIb3DQEBCwUAA4IBAQB/FZOa/DKOpPdi0OfPcG0tjTZ5HBogV/b/2/ZFFSkj w+TLNWIeI/TOdMdafdvmWm9rTVNlt/e9+d0NIN0G/OPr2thZUcN1XK4+5hjpcqFj 0tkMoagSdwNDpZ8SJcriFM1+gzcrFXHRRvdSO8E8nfiPMTDmh9dWccC1vJonFbzh ofdGmHOk9G2SWyr3KDSlOa4bblHrYWLZPLPEPie/LdFUIkMgUorJjkEQ7pxIEobG U0YkeqyAo6RzVdkZ9P49X/cs6kWb+rxOEBzDyxWBIiUrKRs0MEa0NvryfgSDT3nV nkelRQFeZqIlzk6qp8MyY05rmXzJnVqXqM4mbWbuieFe -----END CERTIFICATE-----Generated at Wed Feb 5 08:49:16 2025 by rpki-client