$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer (raw, json) Hash identifier: uD6ik/pDPVIzWzxYbppjAeqECv6Qm0VPv5HXQ0GEUaQ= Subject key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6E51EAABB310553F59CCE5067370213880520839 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 27 May 2025 19:32:36 +0000 Certificate not after: Tue 26 May 2026 19:37:36 +0000 Subordinate resources: IP: 2a05:dfc3:fd40::/44 IP: 2a09:54c7:1000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:51:ea:ab:b3:10:55:3f:59:cc:e5:06:73:70:21:38:80:52:08:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 27 19:32:36 2025 GMT Not After : May 26 19:37:36 2026 GMT Subject: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:36:94:9b:d0:8b:3f:1a:23:b4:c8:e4:c5: 11:ff:f9:e9:55:8e:4d:37:3a:1a:de:51:e5:73:e0: db:7d:17:63:2c:34:f0:f8:af:26:b3:4a:32:36:03: c4:68:80:80:08:b6:7e:76:8d:68:93:c2:c2:f9:cc: 75:39:6b:ac:74:1b:44:41:c2:ab:ee:8b:8e:d3:d3: 07:81:d4:20:77:de:ac:ea:bd:69:f5:39:a6:9a:0f: 26:3c:ad:12:96:3b:c1:c8:e4:64:da:af:1f:08:62: 54:55:07:78:1a:f6:21:67:79:ce:6f:b2:26:28:74: d0:5c:76:aa:cd:fa:d0:04:9d:74:52:c2:4a:f5:64: 37:1a:f4:a2:5e:ea:1a:67:f7:d9:28:91:64:45:ec: 81:d7:b9:08:3a:18:0d:47:f0:d8:92:b4:3c:8f:fe: 95:a9:56:18:df:f7:0d:71:11:ee:8c:04:c3:4a:db: a8:8d:49:86:2c:0e:fb:85:e7:0a:96:3b:b1:29:6b: 9b:04:3b:e4:b0:22:0f:b1:ad:06:fd:7c:f7:57:58: b3:e1:ca:86:3c:1f:34:96:cf:35:05:3a:2f:23:16: f7:a4:e4:64:e9:cb:17:4a:8f:7d:10:64:d7:dc:3e: 6f:2e:87:a7:5b:d4:f3:e5:5d:05:03:dc:15:54:c1: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 2a09:54c7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 41:2c:89:a8:cf:cb:3e:f9:58:98:14:94:0b:57:2b:c6:25:fc: bb:7a:45:da:ce:3b:95:c6:80:94:06:4f:77:09:f5:bb:c3:12: 50:06:b1:80:aa:50:7b:9b:84:9a:01:f7:33:1f:2d:be:f0:b1: 59:77:22:9a:38:5b:c1:13:a6:fe:8d:8b:8a:0a:20:34:76:fb: 79:d3:17:4c:dc:51:b8:61:ae:82:ef:7b:b9:92:12:a3:65:8f: cd:48:83:4d:42:5d:b3:7a:f9:96:d0:de:a9:92:ad:72:a5:a9: c0:41:7e:f9:71:2d:1c:66:77:dd:5a:23:2c:1d:58:fc:03:64: 86:97:53:93:a2:3f:3e:4a:6f:e0:f6:4e:5d:92:b0:79:02:88: 74:99:8c:88:a1:5d:b9:c5:cc:1d:06:d4:5f:41:07:42:a9:da: 56:76:02:ad:3f:16:75:ef:94:2a:6f:5c:08:96:d0:00:76:2b: ff:52:96:77:a9:9f:3f:ac:fb:fc:b4:ca:fe:a4:90:6c:6b:56: 37:72:cd:49:74:dd:db:6b:70:87:28:d4:ba:34:d6:40:67:07: eb:26:be:6d:c6:a1:32:d1:ea:c4:40:45:9c:9b:ce:54:af:5c: dc:5f:7b:ec:49:8c:d7:cd:32:39:11:c2:8a:9a:27:25:42:26: 0c:7d:2d:ea -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgIUblHqq7MQVT9ZzOUGc3AhOIBSCDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MjcxOTMyMzZaFw0yNjA1MjYxOTM3MzZaMDMxMTAvBgNV BAMTKDNGMEQ1Qzk4OUQwNkRFRTRDRUY3M0I3NjQyM0Y3RDFCMjQ4MzA1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvTaUm9CLPxojtMjkxRH/+elV jk03OhreUeVz4Nt9F2MsNPD4ryazSjI2A8RogIAItn52jWiTwsL5zHU5a6x0G0RB wqvui47T0weB1CB33qzqvWn1OaaaDyY8rRKWO8HI5GTarx8IYlRVB3ga9iFnec5v siYodNBcdqrN+tAEnXRSwkr1ZDca9KJe6hpn99kokWRF7IHXuQg6GA1H8NiStDyP /pWpVhjf9w1xEe6MBMNK26iNSYYsDvuF5wqWO7Epa5sEO+SwIg+xrQb9fPdXWLPh yoY8HzSWzzUFOi8jFvek5GTpyxdKj30QZNfcPm8uh6db1PPlXQUD3BVUwVCxAgMB AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/DVyYnQbe5M73 O3ZCP30bJIMFyjAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1N2EyLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIv MS8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0MjNGN0QxQjI0ODMwNUNBLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBwQqBd/D/UADBgQqCVTHEDANBgkqhkiG9w0BAQsF AAOCAQEAQSyJqM/LPvlYmBSUC1crxiX8u3pF2s47lcaAlAZPdwn1u8MSUAaxgKpQ e5uEmgH3Mx8tvvCxWXcimjhbwROm/o2LigogNHb7edMXTNxRuGGugu97uZISo2WP zUiDTUJds3r5ltDeqZKtcqWpwEF++XEtHGZ33VojLB1Y/ANkhpdTk6I/Pkpv4PZO XZKweQKIdJmMiKFducXMHQbUX0EHQqnaVnYCrT8Wde+UKm9cCJbQAHYr/1KWd6mf P6z7/LTK/qSQbGtWN3LNSXTd22twhyjUujTWQGcH6ya+bcahMtHqxEBFnJvOVK9c 3F977EmM180yORHCiponJUImDH0t6g== -----END CERTIFICATE-----Generated at Tue Jun 3 10:13:08 2025 by rpki-client