$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer File: 92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer (raw, json) Hash identifier: H13hcP/r4wxGw08Jc5sOHEEMFksM7Dg89XlhlYKqWC0= Subject key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02 Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Certificate serial: 5FA8136040A9563DB22A63093B0BFFA068249184 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 22 Aug 2024 23:25:14 +0000 Certificate not after: Thu 21 Aug 2025 23:30:14 +0000 Subordinate resources: IP: 2a0a:6044:8ff0::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a8:13:60:40:a9:56:3d:b2:2a:63:09:3b:0b:ff:a0:68:24:91:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Validity Not Before: Aug 22 23:25:14 2024 GMT Not After : Aug 21 23:30:14 2025 GMT Subject: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:da:a0:87:eb:85:de:b2:de:20:4d:9a:58:30: 1e:26:8d:76:c0:0d:67:6c:c2:d1:a0:b9:c5:b2:78: c4:84:ac:3a:90:a1:dd:1e:75:3e:fb:33:2b:8c:42: 12:d7:7b:15:b0:48:08:ea:57:c6:f3:7c:d5:d3:ad: 8f:86:2e:91:2e:fc:8d:94:b6:89:15:90:83:50:4e: 75:e1:82:4d:b9:fd:36:8b:e6:1b:b1:8d:87:10:f9: 4e:a4:46:35:52:9c:9f:7e:80:07:e8:14:7c:ee:c3: 3e:44:14:9e:34:ff:4f:6a:30:72:7e:4e:91:c7:87: ad:61:cb:6d:cc:f3:18:76:87:5d:e2:2b:c4:d6:23: 38:96:d8:8a:c9:33:5d:a9:bc:06:af:73:de:9c:9d: 1b:86:cd:49:1c:aa:fb:51:06:a7:5b:0a:e4:29:85: 86:c5:7d:72:13:95:fc:fe:0b:bc:10:57:53:dd:14: a4:06:0d:d6:60:a7:14:ba:e1:43:8b:1a:9a:14:43: 31:53:0d:49:5d:ab:45:f0:cd:6f:98:3c:ed:0a:ad: 62:96:95:cc:db:d4:dc:01:84:bf:fb:ab:fe:0c:2b: 9e:14:a6:f2:ad:4b:88:04:3e:bf:98:8c:a3:95:27: f1:d0:07:bc:3f:72:28:64:8c:c1:72:b2:2a:7b:2a: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02 X509v3 Authority Key Identifier: keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8ff0::/44 Signature Algorithm: sha256WithRSAEncryption 09:a6:aa:ca:e4:e9:08:84:22:2e:42:55:5e:10:f1:e9:66:65: 61:46:4f:a7:30:35:1f:d5:dc:21:0f:6e:0d:2f:b1:0c:5c:c9: bb:1d:07:8b:c1:6f:a0:53:ef:70:b0:b1:e8:c8:3f:83:38:9e: fc:98:f2:c9:7f:a2:fe:12:95:55:d8:e4:5d:8a:ea:4e:67:e4: a4:67:bb:46:d0:9a:97:2d:48:4b:02:36:39:cd:b1:75:af:56: 65:40:18:be:6a:20:02:85:5a:3a:eb:11:8f:99:14:66:93:50: 4b:78:7a:a5:cb:db:8b:bd:7c:4b:04:5e:df:b2:fc:65:80:d1: ec:77:0d:51:17:d1:53:af:52:94:5a:2d:ec:e2:be:7d:a5:42: e3:b8:82:55:4c:c7:5c:fc:a9:8c:57:d8:68:35:3c:ef:af:5d: e3:6d:22:bb:80:5c:90:7d:1e:3a:10:c7:9e:d3:26:bf:4b:0d: 4d:8b:e4:f0:34:0d:bc:43:24:14:d7:73:18:fb:5d:ec:ab:9e: 55:cc:46:0b:24:bc:a1:16:17:e9:b7:92:88:0f:36:98:fb:75: fa:b8:2a:a8:a3:c9:49:9d:60:b6:70:8b:f8:2b:18:d8:e5:f1: 39:48:50:14:3f:52:21:d8:66:45:f9:c9:bc:b2:ed:66:f9:4e: f5:40:d0:70 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUX6gTYECpVj2yKmMJOwv/oGgkkYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy RkM5MEQwOTAeFw0yNDA4MjIyMzI1MTRaFw0yNTA4MjEyMzMwMTRaMDMxMTAvBgNV BAMTKDkyRTk4M0Y3NjZDMTQ0QTBDRUFDMEI2RkM1QzIwOTM0MDkxRDdFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2qCH64Xest4gTZpYMB4mjXbA DWdswtGgucWyeMSErDqQod0edT77MyuMQhLXexWwSAjqV8bzfNXTrY+GLpEu/I2U tokVkINQTnXhgk25/TaL5huxjYcQ+U6kRjVSnJ9+gAfoFHzuwz5EFJ40/09qMHJ+ TpHHh61hy23M8xh2h13iK8TWIziW2IrJM12pvAavc96cnRuGzUkcqvtRBqdbCuQp hYbFfXITlfz+C7wQV1PdFKQGDdZgpxS64UOLGpoUQzFTDUldq0XwzW+YPO0KrWKW lczb1NwBhL/7q/4MK54UpvKtS4gEPr+YjKOVJ/HQB7w/cihkjMFysip7KsS1AgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSS6YP3ZsFEoM6s C2/Fwgk0CR1+AjAfBgNVHSMEGDAWgBS4m/qE3Fr+BQdqCAC5YP6iL8kNCTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRh YmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC OTYwRkVBMjJGQzkwRDA5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0I4OUJGQTg0 REM1QUZFMDUwNzZBMDgwMEI5NjBGRUEyMkZDOTBEMDkuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kODhiODU0ZS0wOTJjLTRkNzktYWMwNi1hZjM4 MGIwOGQxMmIvMC8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q4OGI4NTRlLTA5MmMtNGQ3OS1hYzA2LWFm MzgwYjA4ZDEyYi8wLzkyRTk4M0Y3NjZDMTQ0QTBDRUFDMEI2RkM1QzIwOTM0MDkx RDdFMDIubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKYESP8DANBgkqhkiG9w0B AQsFAAOCAQEACaaqyuTpCIQiLkJVXhDx6WZlYUZPpzA1H9XcIQ9uDS+xDFzJux0H i8FvoFPvcLCx6Mg/gzie/JjyyX+i/hKVVdjkXYrqTmfkpGe7RtCaly1ISwI2Oc2x da9WZUAYvmogAoVaOusRj5kUZpNQS3h6pcvbi718SwRe37L8ZYDR7HcNURfRU69S lFot7OK+faVC47iCVUzHXPypjFfYaDU8769d420iu4BckH0eOhDHntMmv0sNTYvk 8DQNvEMkFNdzGPtd7KueVcxGCyS8oRYX6beSiA82mPt1+rgqqKPJSZ1gtnCL+CsY 2OXxOUhQFD9SIdhmRfnJvLLtZvlO9UDQcA== -----END CERTIFICATE-----Generated at Thu Sep 19 13:12:07 2024 by rpki-client on console-ams.rpki-client.org