$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer File: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer (raw, json) Hash identifier: nNCiCQGMMffrzjrDSWi3HObkYKZhD0sI0qysFkzmL/Y= Subject key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 7209689C2AC453B068F9D87AD6DC32B8C4A14432 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 07 Feb 2025 18:56:29 +0000 Certificate not after: Fri 06 Feb 2026 19:01:29 +0000 Subordinate resources: IP: 2a0a:6044:7e00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 00:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:09:68:9c:2a:c4:53:b0:68:f9:d8:7a:d6:dc:32:b8:c4:a1:44:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 18:56:29 2025 GMT Not After : Feb 6 19:01:29 2026 GMT Subject: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:6e:f1:ec:35:4e:15:cb:08:27:1e:85:3f: 13:61:65:24:2d:45:36:48:38:97:1d:3d:e8:e1:85: fc:32:e2:5d:09:05:13:4c:63:3c:02:76:b6:74:e3: 32:ef:3c:1b:4b:39:5f:ac:59:cd:8d:6b:25:c8:ce: eb:49:d2:d2:e7:cf:f4:e0:34:81:b4:54:3a:c5:32: c2:db:18:03:95:da:72:92:eb:f7:04:78:39:9a:61: 68:a7:8b:af:c6:80:88:cc:20:6b:93:f7:70:91:54: da:38:78:47:64:8a:33:a7:5b:3b:3e:0e:23:8b:a4: 2c:d6:31:10:d7:5b:5e:2c:ee:7a:b8:c3:68:30:c0: ab:51:ff:97:a4:f0:7a:7f:76:1e:d6:d3:16:3b:d6: f9:a6:5d:d3:84:7a:50:63:df:ba:cb:60:a8:11:5b: 4d:ed:79:9a:57:2f:cc:68:cb:16:75:49:ea:35:c7: 55:e3:85:9d:d8:b1:e7:01:d2:85:36:e1:50:e0:e4: 1e:03:c3:68:c3:fb:bf:45:49:8c:cc:7b:c3:fe:71: c4:b3:65:64:4d:3a:09:84:29:9b:a4:f1:24:1a:ad: e5:97:b8:13:82:74:60:52:30:93:96:ae:30:ee:ac: a1:a2:30:a8:0a:e2:65:3e:3a:12:93:c5:f9:e7:da: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7e00::/40 Signature Algorithm: sha256WithRSAEncryption a8:0b:79:fc:d0:7c:6f:10:f6:56:74:a4:f8:e6:7a:e8:8c:7b: 7f:a9:60:fb:7d:b7:fb:36:53:fd:b8:40:96:c7:fb:c3:25:39: 97:93:a3:e1:c3:96:a9:55:f1:fb:3a:66:2e:52:e3:ca:d1:2d: a3:91:05:0e:7c:84:b9:be:5b:f9:2a:e4:df:ce:50:19:d3:0c: d9:bc:34:ec:bd:c8:d8:fc:06:46:be:7b:65:40:06:3c:4e:7d: 01:ed:1b:e9:6a:61:ae:80:54:13:b6:27:da:af:a8:04:3b:c4: ea:3e:c6:59:f3:dd:a9:65:6d:65:86:3a:97:a2:03:fa:6b:2f: 92:d1:ba:44:34:c6:e0:b2:db:cf:14:8a:c3:6a:7a:bc:51:f4: ba:26:71:cd:33:b6:bb:34:da:c4:03:23:22:a9:9d:22:dd:a1: 1a:e9:9d:af:c0:34:7a:52:dd:d1:f2:5a:81:73:38:b9:2e:45: cf:1e:45:03:68:16:89:d7:a6:f6:ee:63:64:02:bd:ed:05:c7: a2:48:a9:ea:37:62:4e:46:0a:b7:45:04:a1:7b:56:34:f4:b5: ff:08:79:f1:da:c8:d9:57:92:ff:f5:fd:71:de:8c:64:d8:f4: 34:51:b1:12:9b:ea:15:1d:ff:c5:cd:d4:77:0d:8f:93:8d:63: 74:28:27:1d -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUcglonCrEU7Bo+dh61twyuMShRDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxODU2MjlaFw0yNjAyMDYxOTAxMjlaMDMxMTAvBgNV BAMTKDYyMDMzMjdCNkE0QjBBRkI5ODJCNjQwQjhCRkYyQTkyQjFDNzMzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcm7x7DVOFcsIJx6FPxNhZSQt RTZIOJcdPejhhfwy4l0JBRNMYzwCdrZ04zLvPBtLOV+sWc2NayXIzutJ0tLnz/Tg NIG0VDrFMsLbGAOV2nKS6/cEeDmaYWini6/GgIjMIGuT93CRVNo4eEdkijOnWzs+ DiOLpCzWMRDXW14s7nq4w2gwwKtR/5ek8Hp/dh7W0xY71vmmXdOEelBj37rLYKgR W03teZpXL8xoyxZ1Seo1x1XjhZ3YsecB0oU24VDg5B4Dw2jD+79FSYzMe8P+ccSz ZWRNOgmEKZuk8SQareWXuBOCdGBSMJOWrjDurKGiMKgK4mU+OhKTxfnn2oknAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiAzJ7aksK+5gr ZAuL/yqSscczQzAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlhYzQ5LzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mZWNiYzQwNC1hYzQzLTQ0OWItOGM3ZS04ZjFlOTlkOWFjNDkv My82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4QkZGMkE5MkIxQzczMzQzLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEfjANBgkqhkiG9w0BAQsFAAOCAQEAqAt5 /NB8bxD2VnSk+OZ66Ix7f6lg+323+zZT/bhAlsf7wyU5l5Oj4cOWqVXx+zpmLlLj ytEto5EFDnyEub5b+Srk385QGdMM2bw07L3I2PwGRr57ZUAGPE59Ae0b6WphroBU E7Yn2q+oBDvE6j7GWfPdqWVtZYY6l6ID+msvktG6RDTG4LLbzxSKw2p6vFH0uiZx zTO2uzTaxAMjIqmdIt2hGumdr8A0elLd0fJagXM4uS5Fzx5FA2gWidem9u5jZAK9 7QXHokip6jdiTkYKt0UEoXtWNPS1/wh58drI2VeS//X9cd6MZNj0NFGxEpvqFR3/ xc3Udw2Pk41jdCgnHQ== -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:38 2025 by rpki-client