$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer File: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer (raw, json) Hash identifier: T6FK79TxX+nuLPjN0fIuqM0DSySEHc/Bi42E1Ytu5jU= Subject key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 7D8CCFCE5977C5F643A82D5F7EBC1B6EFB651502 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 11 May 2025 16:08:17 +0000 Certificate not after: Sun 10 May 2026 16:13:17 +0000 Subordinate resources: IP: 2a05:dfc3:fa00::/40 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0a:6044:c110::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8c:cf:ce:59:77:c5:f6:43:a8:2d:5f:7e:bc:1b:6e:fb:65:15:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 11 16:08:17 2025 GMT Not After : May 10 16:13:17 2026 GMT Subject: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:34:f5:ce:aa:18:0b:61:d0:ae:eb:69:62: 21:21:8f:9b:21:41:cb:77:67:3d:72:bc:63:60:4f: 3d:21:97:ee:2a:b8:bb:8d:e9:05:5a:d4:57:16:7a: 43:00:7e:c4:79:52:c0:e5:63:80:7f:97:9a:d6:a9: dc:8a:80:4e:d3:20:35:e0:0d:d2:3c:1f:a3:de:63: fc:4b:72:33:d4:04:83:f5:0b:b8:9d:ea:81:3b:8d: db:63:29:77:40:c2:16:ee:e8:03:c7:e9:71:2f:8d: 92:14:62:e1:ae:f4:dd:85:0a:4e:f6:f2:7f:48:9b: 5b:ea:b9:1d:18:ed:10:fb:7c:34:69:39:a0:c3:eb: 5f:c0:b9:78:67:fd:b3:16:9e:e2:96:0e:7b:ea:da: 6b:12:9c:c2:02:de:af:37:af:54:cd:0d:e7:a4:2a: 30:0a:3e:2a:c9:90:f5:63:cf:8a:97:c1:d5:7d:d2: 97:7d:d8:84:fd:6d:1e:d5:bc:b2:e2:ab:00:62:ef: ae:1a:0b:a9:88:6f:56:4f:b0:dc:e2:2a:c7:e1:ac: aa:c2:85:a9:c0:03:66:17:6f:5e:eb:1a:be:64:3e: b2:15:d4:fc:27:5b:8a:2c:f3:7b:5e:e1:4c:ca:b4: 10:78:2b:77:3c:ee:80:26:3d:a0:e4:f7:6d:d6:0f: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0a:6044:c110::/44 Signature Algorithm: sha256WithRSAEncryption 13:40:f1:aa:c7:a3:56:f8:8c:49:e5:c1:58:85:4b:61:8b:3a: 2a:1a:15:f4:7b:10:47:46:e7:ba:c9:57:44:c5:a0:7d:10:ba: e9:11:d4:7e:9c:71:6e:59:95:ff:30:85:59:e5:4f:7b:4b:f3: c4:ed:80:32:2f:9f:52:20:9b:8d:c5:31:29:f3:3f:e4:39:30: 3e:ac:c8:c0:6f:c1:a5:46:ea:1b:e6:a6:82:2b:b2:b4:20:8d: e2:2a:56:94:2c:c4:4c:6a:06:d0:48:7d:ad:17:00:16:34:47: 1b:46:e6:77:dc:f1:b0:41:0f:ea:9f:d9:34:d2:b7:7e:7f:f1: e7:0d:d5:30:1d:93:24:ee:21:34:31:ab:58:36:73:fb:97:1b: 2e:50:ab:9c:ca:3a:3d:d1:15:57:99:e5:ab:32:2d:2d:23:b5: 4a:2f:59:3d:ea:12:9c:04:50:5c:57:5d:fc:17:92:54:b0:bc: e4:ba:ec:18:49:f9:ff:d5:71:01:42:00:f4:83:d6:d5:1f:96: ad:74:2b:2b:b9:49:77:2e:ae:c3:11:ed:24:1b:bd:de:42:01: 8d:e9:82:5e:9e:81:bd:28:14:37:bb:d1:2e:0c:a7:71:3a:67: ba:8b:64:ff:57:3d:c3:6c:d4:5e:39:78:16:86:ab:f1:db:e7: fa:00:2f:ba -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIUfYzPzll3xfZDqC1ffrwbbvtlFQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MTExNjA4MTdaFw0yNjA1MTAxNjEzMTdaMDMxMTAvBgNV BAMTKEVEMEI4QUUwM0Q2MjUwRDU5RUY4RTdCRTU1NkQ5NEVCNDk0MTU0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7jT1zqoYC2HQrutpYiEhj5sh Qct3Zz1yvGNgTz0hl+4quLuN6QVa1FcWekMAfsR5UsDlY4B/l5rWqdyKgE7TIDXg DdI8H6PeY/xLcjPUBIP1C7id6oE7jdtjKXdAwhbu6APH6XEvjZIUYuGu9N2FCk72 8n9Im1vquR0Y7RD7fDRpOaDD61/AuXhn/bMWnuKWDnvq2msSnMIC3q83r1TNDeek KjAKPirJkPVjz4qXwdV90pd92IT9bR7VvLLiqwBi764aC6mIb1ZPsNziKsfhrKrC hanAA2YXb17rGr5kPrIV1PwnW4os83te4UzKtBB4K3c87oAmPaDk923WD9P/AgMB AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtC4rgPWJQ1Z74 575VbZTrSUFUKTAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRiZTA0LzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQv My9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1NTZEOTRFQjQ5NDE1NDI5Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUH AQcBAf8ELDAqMCgEAgACMCIDBgAqBd/D+gMGACoKYERkAwcAKgpgRKoQAwcEKgpg RMEQMA0GCSqGSIb3DQEBCwUAA4IBAQATQPGqx6NW+IxJ5cFYhUthizoqGhX0exBH Rue6yVdExaB9ELrpEdR+nHFuWZX/MIVZ5U97S/PE7YAyL59SIJuNxTEp8z/kOTA+ rMjAb8GlRuob5qaCK7K0II3iKlaULMRMagbQSH2tFwAWNEcbRuZ33PGwQQ/qn9k0 0rd+f/HnDdUwHZMk7iE0MatYNnP7lxsuUKucyjo90RVXmeWrMi0tI7VKL1k96hKc BFBcV138F5JUsLzkuuwYSfn/1XEBQgD0g9bVH5atdCsruUl3Lq7DEe0kG73eQgGN 6YJenoG9KBQ3u9EuDKdxOme6i2T/Vz3DbNReOXgWhqvx2+f6AC+6 -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:19 2025 by rpki-client