$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer File: 2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer (raw, json) Hash identifier: ApasHCnK4O94pKxUVeRmj/iAtV0o1qYiV4Rk7M5fe3U= Subject key identifier: 26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1 Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Certificate serial: 0D9774A0E9317C4171A014C5395CBD4C2B415CD4 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 30 Jan 2024 06:07:53 +0000 Certificate not after: Tue 28 Jan 2025 06:12:53 +0000 Subordinate resources: IP: 2a05:dfc1:91b9::/48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Jun 2024 10:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:97:74:a0:e9:31:7c:41:71:a0:14:c5:39:5c:bd:4c:2b:41:5c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Validity Not Before: Jan 30 06:07:53 2024 GMT Not After : Jan 28 06:12:53 2025 GMT Subject: CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:44:0e:83:12:6e:29:fc:3e:76:cd:8f:ed: 30:dc:f1:3f:ab:ce:a5:46:55:af:a9:95:ba:00:ca: 1c:2f:cf:02:ac:36:34:83:30:2d:81:d2:36:8e:e3: 2a:77:ff:d3:6f:d8:84:8b:79:2b:21:03:68:ea:38: a3:a9:dd:38:60:d2:d7:96:4f:34:9c:c2:00:8b:df: 56:f6:84:ee:58:02:80:c3:49:80:65:08:9f:7b:08: e5:82:a1:3f:25:0a:c4:fc:fd:f5:25:fe:39:0f:1c: 6d:76:b9:6c:11:a4:bf:c5:31:16:e5:2f:f9:cc:d1: e4:d5:c5:86:93:7c:2c:fc:89:e5:ee:bd:92:b9:2a: a5:e8:2e:04:83:b0:50:c1:30:2f:03:ec:8e:e4:e8: dc:33:31:d2:4c:f9:a2:bd:5e:22:9e:ca:27:be:ca: 97:39:bf:f1:3c:79:6a:c7:83:28:84:b9:d1:a8:bf: a3:b4:59:54:c6:77:71:94:a4:02:60:7e:bf:99:aa: 50:74:cc:b2:65:60:67:dc:cd:42:7c:16:63:b2:e4: 96:5a:2a:5b:89:5d:f2:28:e8:64:6d:63:c5:d4:be: 64:d5:ab:20:fc:dc:80:ea:37:7c:cc:33:90:56:4a: 12:73:33:96:5e:ea:5c:2b:cd:42:35:5a:8e:b4:aa: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1 X509v3 Authority Key Identifier: keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:91b9::/48 Signature Algorithm: sha256WithRSAEncryption 25:be:19:89:d6:b3:d6:07:62:a7:d5:8b:24:65:63:c7:44:0e: 0d:21:46:02:af:e1:41:4b:bc:4c:fe:2c:64:d5:1a:9a:44:c8: c5:0f:a5:48:e8:c2:90:df:0f:7c:76:69:e8:c2:6d:10:c4:b2: a2:90:11:d7:57:11:85:45:13:d5:9c:d0:17:14:bd:dc:53:fe: b1:e2:35:80:7b:cc:e9:19:46:8f:9c:b6:85:2f:d3:40:03:92: 65:ad:3c:24:bb:b8:3c:36:dd:75:12:5e:e4:7b:44:d5:e4:8b: 3b:f3:1a:23:a7:83:5e:af:de:fc:4e:5b:2b:b2:29:97:3b:92: 48:3f:0f:6a:af:e3:f1:d9:71:cd:fc:d0:ac:57:55:cf:e5:3f: 80:46:39:c6:05:cc:f8:27:50:23:78:9a:a5:e8:a1:52:f8:e8: f4:a4:92:fe:e8:81:28:dd:19:2a:0d:04:10:42:f0:db:d2:79: 9d:c4:8c:bf:37:3c:ea:60:b1:54:f7:ea:76:f5:35:66:22:3c: 27:87:72:03:f7:04:10:67:a0:77:0b:3b:8f:a6:74:c5:8f:50: 49:6c:dd:df:75:b8:31:f6:80:c5:dc:a7:b0:c0:39:f2:51:a0: 4e:ad:8f:78:2b:16:93:90:16:92:89:18:61:07:14:ce:aa:e1: f8:e0:cd:73 -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgIUDZd0oOkxfEFxoBTFOVy9TCtBXNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF MDVFN0I3NjAeFw0yNDAxMzAwNjA3NTNaFw0yNTAxMjgwNjEyNTNaMDMxMTAvBgNV BAMTKDI2OTlEMzFFQTcxQjk2RTFBOTlDMzVCMUY1NjI2QUNDNTE3RUUyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4EQOgxJuKfw+ds2P7TDc8T+r zqVGVa+plboAyhwvzwKsNjSDMC2B0jaO4yp3/9Nv2ISLeSshA2jqOKOp3Thg0teW TzScwgCL31b2hO5YAoDDSYBlCJ97COWCoT8lCsT8/fUl/jkPHG12uWwRpL/FMRbl L/nM0eTVxYaTfCz8ieXuvZK5KqXoLgSDsFDBMC8D7I7k6NwzMdJM+aK9XiKeyie+ ypc5v/E8eWrHgyiEudGov6O0WVTGd3GUpAJgfr+ZqlB0zLJlYGfczUJ8FmOy5JZa KluJXfIo6GRtY8XUvmTVqyD83IDqN3zMM5BWShJzM5Ze6lwrzUI1Wo60qjktAgMB AAGjggL6MIIC9jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQmmdMepxuW4amc NbH1YmrMUX7i4TAfBgNVHSMEGDAWgBT3N9gb++/97snsMre4ZBEt4F57djAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMS9GNzM3RDgxQkZCRUZGREVFQzlFQzMyQjdC ODY0MTEyREUwNUU3Qjc2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKG XnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJ LzAvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5jZXIw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhh Mi1iOWMzLTdlZjBhODM5Y2UxOS8yLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyZjg1YmMtM2Q2OS00 OGEyLWI5YzMtN2VmMGE4MzljZTE5LzIvMjY5OUQzMUVBNzFCOTZFMUE5OUMzNUIx RjU2MjZBQ0M1MTdFRTJFMS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwZG5 MA0GCSqGSIb3DQEBCwUAA4IBAQAlvhmJ1rPWB2Kn1YskZWPHRA4NIUYCr+FBS7xM /ixk1RqaRMjFD6VI6MKQ3w98dmnowm0QxLKikBHXVxGFRRPVnNAXFL3cU/6x4jWA e8zpGUaPnLaFL9NAA5JlrTwku7g8Nt11El7ke0TV5Is78xojp4Ner978TlsrsimX O5JIPw9qr+Px2XHN/NCsV1XP5T+ARjnGBcz4J1AjeJql6KFS+Oj0pJL+6IEo3Rkq DQQQQvDb0nmdxIy/NzzqYLFU9+p29TVmIjwnh3ID9wQQZ6B3CzuPpnTFj1BJbN3f dbgx9oDF3KewwDnyUaBOrY94KxaTkBaSiRhhBxTOquH44M1z -----END CERTIFICATE-----Generated at Sat Jun 22 21:00:43 2024 by rpki-client on console-ams.rpki-client.org