$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer File: F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer (raw, json) Hash identifier: g7Oj7en8Nt4yaIXvafMCNVaGHzfH2c6BXP7wJqOL4Lo= Subject key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 38CC6D2BB222903989FB5902A664CE913527FF7E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 21 Aug 2024 09:16:47 +0000 Certificate not after: Wed 20 Aug 2025 09:21:47 +0000 Subordinate resources: IP: 2a06:1281:9000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:6d:2b:b2:22:90:39:89:fb:59:02:a6:64:ce:91:35:27:ff:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 21 09:16:47 2024 GMT Not After : Aug 20 09:21:47 2025 GMT Subject: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:d6:ce:11:db:96:bd:d4:b6:95:cd:1f:49: 2c:af:18:c7:cb:75:3b:9a:03:81:1f:75:42:ec:5f: 4f:a0:5c:10:ab:47:2a:7e:d3:86:30:a4:88:ca:b0: 78:70:33:3e:0c:50:52:a0:c6:79:bf:4a:d7:ae:eb: 92:7b:c7:0e:2f:37:28:b7:ec:cc:f2:05:4d:32:e9: 6b:3d:4c:ec:9c:e1:27:c9:73:48:d7:a3:6e:95:48: 05:a4:93:7e:a0:7e:b2:09:93:50:88:25:7b:46:eb: c9:22:f6:a4:59:2c:a4:63:6a:1b:c4:ae:28:b1:5b: b0:e8:6c:ce:9e:56:94:2f:c4:72:e4:c4:16:7c:7c: 69:96:e2:f8:57:f9:06:b0:54:c8:cc:68:7c:52:cb: 53:20:3c:79:21:ed:25:a6:94:8a:7f:48:88:f9:f7: ac:0c:ab:4f:6c:39:99:7f:d9:77:bb:a4:0e:56:e7: 73:f7:18:75:1d:c9:b8:27:6f:fb:15:d1:26:4d:02: 28:73:06:79:65:2b:f2:8c:37:37:10:77:d9:5b:f4: 0a:59:13:db:db:70:04:25:ad:38:6a:10:fb:7c:f2: a5:06:bc:a0:2e:a9:64:60:6a:ee:81:20:06:90:81: 4a:48:3c:c8:09:df:46:b2:a6:43:47:01:1f:4f:07: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:9000::/36 Signature Algorithm: sha256WithRSAEncryption 88:5f:cb:37:57:41:2d:10:92:9c:26:58:a4:9c:a2:63:be:97: ee:f4:6f:70:80:76:6c:0c:b0:f2:fb:5e:c0:c3:eb:e0:e6:49: 02:95:6d:04:e3:65:9a:d3:3a:f4:ff:6d:02:a5:4f:4d:01:4f: 96:a1:ff:1f:30:f0:a8:05:f3:45:aa:9c:1b:6d:25:51:8d:73: a3:8f:b8:d1:12:e8:09:2b:e8:ce:05:11:a0:47:72:f6:b0:30: 21:ea:48:ad:6e:41:3e:0d:2a:86:22:b6:8e:ef:50:5f:07:08: a7:d4:2b:78:b4:aa:66:3a:91:af:88:99:3f:d9:7c:63:ee:19: 22:18:2b:3f:13:7c:a3:49:89:21:de:71:8c:99:30:da:7f:e4: 8a:4d:e4:92:34:66:ad:58:9b:4e:0d:ac:1b:54:c3:15:0e:7c: f3:7e:60:71:d7:54:b5:a7:2f:a0:25:c7:14:06:82:bb:2a:ee: 64:bf:8f:c3:9a:92:21:5f:d1:1f:61:46:10:d1:ce:0a:5d:93: 6e:b1:4a:72:ea:f4:9a:d4:aa:65:ea:79:a8:df:df:be:7a:05: 4e:30:e4:34:bb:6f:31:f7:65:02:ec:67:84:0a:b5:ab:da:b9: 3b:71:c6:bb:d3:7f:3f:28:82:38:ac:ef:cb:0c:22:bf:56:8b: 31:31:cf:49 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUOMxtK7IikDmJ+1kCpmTOkTUn/34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjEwOTE2NDdaFw0yNTA4MjAwOTIxNDdaMDMxMTAvBgNV BAMTKEY4QjJERDk0OEM4ODFCNTE3QTIwQjg1NjY3NThBQjRBQkM3QjcyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvNbOEduWvdS2lc0fSSyvGMfL dTuaA4EfdULsX0+gXBCrRyp+04YwpIjKsHhwMz4MUFKgxnm/Steu65J7xw4vNyi3 7MzyBU0y6Ws9TOyc4SfJc0jXo26VSAWkk36gfrIJk1CIJXtG68ki9qRZLKRjahvE riixW7DobM6eVpQvxHLkxBZ8fGmW4vhX+QawVMjMaHxSy1MgPHkh7SWmlIp/SIj5 96wMq09sOZl/2Xe7pA5W53P3GHUdybgnb/sV0SZNAihzBnllK/KMNzcQd9lb9ApZ E9vbcAQlrThqEPt88qUGvKAuqWRgau6BIAaQgUpIPMgJ30aypkNHAR9PBxMvAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4st2UjIgbUXog uFZnWKtKvHty0DAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5M2U2LzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYv MC9GOEIyREQ5NDhDODgxQjUxN0EyMEI4NTY2NzU4QUI0QUJDN0I3MkQwLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqBhKBkDANBgkqhkiG9w0BAQsFAAOCAQEAiF/L N1dBLRCSnCZYpJyiY76X7vRvcIB2bAyw8vtewMPr4OZJApVtBONlmtM69P9tAqVP TQFPlqH/HzDwqAXzRaqcG20lUY1zo4+40RLoCSvozgURoEdy9rAwIepIrW5BPg0q hiK2ju9QXwcIp9QreLSqZjqRr4iZP9l8Y+4ZIhgrPxN8o0mJId5xjJkw2n/kik3k kjRmrVibTg2sG1TDFQ58835gcddUtacvoCXHFAaCuyruZL+Pw5qSIV/RH2FGENHO Cl2TbrFKcur0mtSqZep5qN/fvnoFTjDkNLtvMfdlAuxnhAq1q9q5O3HGu9N/PyiC OKzvywwiv1aLMTHPSQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org