$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer File: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer (raw, json) Hash identifier: JrP9Yj9+GylzB9vk0aiJi9Dd+braOBZrvEH4EsNnbUc= Subject key identifier: 8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Certificate serial: 2F4D9D420ECF0CABFCF8BB2DF4690E189AC1C001 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 23 Oct 2024 19:07:52 +0000 Certificate not after: Wed 22 Oct 2025 19:12:52 +0000 Subordinate resources: IP: 2a05:dfc1:91b9::/48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Oct 2024 01:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4d:9d:42:0e:cf:0c:ab:fc:f8:bb:2d:f4:69:0e:18:9a:c1:c0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Validity Not Before: Oct 23 19:07:52 2024 GMT Not After : Oct 22 19:12:52 2025 GMT Subject: CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ab:30:12:2e:e5:16:44:3e:0c:2d:a0:94:18: 1b:ac:f4:77:35:5a:6c:5e:f9:ad:52:a7:09:90:d3: 84:d0:6c:df:7e:6f:c7:74:eb:d7:09:d4:a4:23:23: 82:b2:6c:b5:3c:a5:21:b6:56:0a:3e:d2:35:a6:55: d8:01:4c:92:9c:57:65:aa:c0:c5:7d:2d:14:da:e7: 7f:fa:80:87:63:ef:a2:f4:6c:80:61:52:ad:4e:a0: bd:d6:f9:bd:84:25:62:fe:46:4d:0b:0b:a1:dd:fa: 4e:65:df:8e:bd:f1:d6:0e:c3:d1:d6:97:33:d5:ae: 99:73:0b:13:0e:ec:71:55:81:96:ef:c9:bf:67:c6: a3:23:85:7c:d5:c6:5c:ff:e9:96:69:f3:2e:41:54: f2:f7:96:49:60:bd:64:20:34:fc:1b:bd:18:bb:f1: d8:72:30:80:47:e8:b0:2c:46:32:07:ab:53:47:d2: ea:23:84:3a:6e:5f:4c:55:94:18:4a:ff:3e:fb:7d: f2:65:8e:fb:96:4e:c0:23:d4:3c:ce:03:5f:63:fc: b0:a0:00:14:1a:4b:72:8f:5d:90:ac:aa:20:f5:54: de:06:87:c9:db:2e:31:90:b5:69:de:ea:44:bf:2f: 5e:60:73:e8:4c:8e:ea:57:df:b4:44:c2:32:95:1c: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB X509v3 Authority Key Identifier: keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:91b9::/48 Signature Algorithm: sha256WithRSAEncryption 36:b5:5c:5e:22:a2:32:f2:f8:ab:b7:b5:9b:c3:d2:6b:e1:2c: 52:0c:af:2a:2b:8f:34:b8:92:99:4a:15:cf:fd:0e:51:3b:5a: af:28:3b:ce:24:60:d7:0c:86:27:40:3e:37:93:01:4b:b8:b9: 87:be:d5:50:0e:5e:46:33:f7:60:13:12:d7:81:9d:f1:8b:1f: 16:83:86:b1:9b:82:b5:ee:7d:02:7c:d8:2c:78:6a:39:8a:b4: d9:1d:ff:b1:79:26:4b:de:32:8a:f4:30:5c:29:81:b1:ac:29: d7:f0:b0:62:1a:82:58:30:32:95:ce:93:a0:e8:d2:51:cd:03: 75:06:2a:2b:83:23:63:49:5f:19:3c:9c:26:ac:6a:20:57:d4: d3:04:97:29:c1:ce:20:95:6c:8a:90:88:11:4b:af:0a:9d:c3: c3:b6:0d:b7:8d:54:12:06:71:d7:3d:c3:37:83:11:55:91:ca: da:33:e3:d6:c9:64:d8:4e:91:f3:de:bc:4f:c2:9e:70:ba:c0: 02:13:03:9a:11:58:bd:33:42:f5:05:21:33:fd:b6:3e:d5:e1: 80:66:ee:ac:8e:a3:7d:89:0d:dc:2e:b7:6c:2b:50:ec:fb:52: 19:94:9c:51:61:d2:44:35:bb:37:8a:15:86:ea:6c:97:64:67: d2:d0:a7:9e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUL02dQg7PDKv8+Lst9GkOGJrBwAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF MDVFN0I3NjAeFw0yNDEwMjMxOTA3NTJaFw0yNTEwMjIxOTEyNTJaMDMxMTAvBgNV BAMTKDhDQjg5Q0YzODIxQjJDMjUzMUU0Q0EzMjlBQkE1MTE0QjJDOTZFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqzASLuUWRD4MLaCUGBus9Hc1 Wmxe+a1SpwmQ04TQbN9+b8d069cJ1KQjI4KybLU8pSG2Vgo+0jWmVdgBTJKcV2Wq wMV9LRTa53/6gIdj76L0bIBhUq1OoL3W+b2EJWL+Rk0LC6Hd+k5l34698dYOw9HW lzPVrplzCxMO7HFVgZbvyb9nxqMjhXzVxlz/6ZZp8y5BVPL3lklgvWQgNPwbvRi7 8dhyMIBH6LAsRjIHq1NH0uojhDpuX0xVlBhK/z77ffJljvuWTsAj1DzOA19j/LCg ABQaS3KPXZCsqiD1VN4Gh8nbLjGQtWne6kS/L15gc+hMjupX37REwjKVHHGxAgMB AAGjggLeMIIC2jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMuJzzghssJTHk yjKaulEUsslu2zAfBgNVHSMEGDAWgBT3N9gb++/97snsMre4ZBEt4F57djAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMS9GNzM3RDgxQkZCRUZGREVFQzlFQzMyQjdC ODY0MTEyREUwNUU3Qjc2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKG XnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJ LzAvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5jZXIw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJiYWNi N2FiYjdhMjgvMi8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJiYWNiN2FiYjdhMjgv Mi84Q0I4OUNGMzgyMUIyQzI1MzFFNENBMzI5QUJBNTExNEIyQzk2RURCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAqBd/BkbkwDQYJKoZIhvcNAQELBQADggEBADa1XF4iojLy +Ku3tZvD0mvhLFIMryorjzS4kplKFc/9DlE7Wq8oO84kYNcMhidAPjeTAUu4uYe+ 1VAOXkYz92ATEteBnfGLHxaDhrGbgrXufQJ82Cx4ajmKtNkd/7F5JkveMor0MFwp gbGsKdfwsGIaglgwMpXOk6Do0lHNA3UGKiuDI2NJXxk8nCasaiBX1NMElynBziCV bIqQiBFLrwqdw8O2DbeNVBIGcdc9wzeDEVWRytoz49bJZNhOkfPevE/CnnC6wAIT A5oRWL0zQvUFITP9tj7V4YBm7qyOo32JDdwut2wrUOz7UhmUnFFh0kQ1uzeKFYbq bJdkZ9LQp54= -----END CERTIFICATE-----Generated at Tue Oct 29 14:50:16 2024 by rpki-client on console-fra.rpki-client.org