$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer File: 178395FF98E8AEA645CFCD7DF742855D46457BAF.cer (raw, json) Hash identifier: /QosX2DDFfV/5UKvuaw4eq15xdtYfOkGGTDc784vVn0= Subject key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 58A1A1B705C7C509D8D15AD70C4ED936ADDFF1C4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 14 Feb 2025 13:52:58 +0000 Certificate not after: Fri 13 Feb 2026 13:57:58 +0000 Subordinate resources: IP: 2a0a:6044:ba00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 00:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a1:a1:b7:05:c7:c5:09:d8:d1:5a:d7:0c:4e:d9:36:ad:df:f1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 14 13:52:58 2025 GMT Not After : Feb 13 13:57:58 2026 GMT Subject: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:c3:64:33:d7:4c:80:5f:61:fe:1d:07:41: 61:1a:9e:78:ca:af:03:1c:8b:09:b9:d3:c6:e1:c1: c9:32:30:c5:75:c0:3a:7d:88:83:5d:2b:2b:9b:af: a2:7c:f5:d0:9d:8e:a7:6e:af:e9:a6:36:dc:3a:c3: d6:87:f3:e8:6e:f5:84:ae:59:95:47:fb:76:67:7a: 48:ca:22:e0:05:38:cd:8e:14:86:c9:b9:c0:d5:8f: 33:19:2f:55:34:3f:12:89:9b:6b:fc:d7:09:02:69: f0:65:c0:c1:ec:d0:b8:c5:3a:7d:68:73:58:05:43: 74:c7:fb:d8:52:11:5e:8a:bd:b3:fb:ca:84:0c:c5: ed:67:fd:33:24:55:3a:64:f5:5a:3e:03:d4:e3:e8: 79:c6:e8:c0:86:38:9c:45:0e:79:a3:2e:04:de:cb: e0:d5:1e:4c:02:2f:79:6f:84:42:d8:e8:45:1f:61: 1c:fe:e3:0c:6e:9a:ae:49:af:0b:02:a1:c9:35:4a: a5:b4:c0:4d:f3:0a:9c:7a:c0:13:7d:9e:3d:6e:e4: 85:ff:af:7d:96:75:05:60:d4:f8:e6:dd:1e:5d:c7: c7:af:45:b4:47:99:75:31:5c:0a:8c:07:6f:de:11: 31:01:6d:08:8a:18:d7:ad:11:c2:6d:01:40:2d:e3: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption b8:29:c1:ed:ee:2e:2f:92:0c:74:67:a1:b0:36:fd:53:e0:d5: 14:8c:62:d4:83:67:a0:49:1d:6c:7d:5a:20:93:a5:98:f0:2a: 6b:e3:ab:e7:85:a5:3e:9f:7e:7b:e7:6e:d1:ab:3f:8e:12:0e: b3:7d:55:26:15:aa:24:ea:2a:62:bc:07:e3:f4:01:d7:7e:5e: 38:71:71:5a:ef:93:7c:de:38:cf:5b:4e:e8:34:04:ef:ed:b9: e8:42:e6:4c:f7:98:5f:25:c4:2b:35:9e:09:54:fc:7b:17:a9: b2:7d:6e:7f:0a:92:93:dd:e9:04:45:41:1d:05:e0:b6:74:13: 2b:de:ac:4c:81:dd:4f:8d:09:ae:7a:c3:e4:56:40:cf:a3:f9: 1f:79:ba:a3:23:ee:9d:62:3f:87:67:aa:99:43:05:b3:ff:4f: cf:0c:72:54:b9:21:ad:ce:d5:70:db:c2:03:cf:bf:88:ca:54: f8:62:53:67:e7:45:ae:c9:5d:2e:70:09:2c:2f:e7:72:e5:7e: 4a:c6:0d:a3:44:77:9b:23:bc:a2:d1:cc:68:f2:33:9f:0e:24: 97:44:98:bc:63:49:d1:3a:9b:34:7c:4d:a4:1d:db:02:d3:01: 88:72:be:db:0f:f1:78:1f:b8:f0:d2:16:11:cd:12:cd:47:76: b9:79:8e:9f -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUWKGhtwXHxQnY0VrXDE7ZNq3f8cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTQxMzUyNThaFw0yNjAyMTMxMzU3NThaMDMxMTAvBgNV BAMTKDE3ODM5NUZGOThFOEFFQTY0NUNGQ0Q3REY3NDI4NTVENDY0NTdCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAsNkM9dMgF9h/h0HQWEannjK rwMciwm508bhwckyMMV1wDp9iINdKyubr6J89dCdjqdur+mmNtw6w9aH8+hu9YSu WZVH+3ZnekjKIuAFOM2OFIbJucDVjzMZL1U0PxKJm2v81wkCafBlwMHs0LjFOn1o c1gFQ3TH+9hSEV6KvbP7yoQMxe1n/TMkVTpk9Vo+A9Tj6HnG6MCGOJxFDnmjLgTe y+DVHkwCL3lvhELY6EUfYRz+4wxumq5JrwsCock1SqW0wE3zCpx6wBN9nj1u5IX/ r32WdQVg1Pjm3R5dx8evRbRHmXUxXAqMB2/eETEBbQiKGNetEcJtAUAt4xRpAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXg5X/mOiupkXP zX33QoVdRkV7rzAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv Mi8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RGNzQyODU1RDQ2NDU3QkFGLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEujANBgkqhkiG9w0BAQsFAAOCAQEAuCnB 7e4uL5IMdGehsDb9U+DVFIxi1INnoEkdbH1aIJOlmPAqa+Or54WlPp9+e+du0as/ jhIOs31VJhWqJOoqYrwH4/QB135eOHFxWu+TfN44z1tO6DQE7+256ELmTPeYXyXE KzWeCVT8exepsn1ufwqSk93pBEVBHQXgtnQTK96sTIHdT40JrnrD5FZAz6P5H3m6 oyPunWI/h2eqmUMFs/9PzwxyVLkhrc7VcNvCA8+/iMpU+GJTZ+dFrsldLnAJLC/n cuV+SsYNo0R3myO8otHMaPIznw4kl0SYvGNJ0TqbNHxNpB3bAtMBiHK+2w/xeB+4 8NIWEc0SzUd2uXmOnw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:43:59 2025 by rpki-client