$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer File: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer (raw, json) Hash identifier: ZJbI3ZnphRPkT3kz9vDYehNZelEZxdHzzL0ce+aHx/4= Subject key identifier: ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 013D5E10FE0C847EB37B67A41CF454A1C2DE3961 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 08 Feb 2025 18:48:40 +0000 Certificate not after: Sat 07 Feb 2026 18:53:40 +0000 Subordinate resources: IP: 2a0a:6044:a300::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3d:5e:10:fe:0c:84:7e:b3:7b:67:a4:1c:f4:54:a1:c2:de:39:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 8 18:48:40 2025 GMT Not After : Feb 7 18:53:40 2026 GMT Subject: CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:aa:46:7d:53:28:7d:1c:c6:28:b9:00:dd: 35:4f:a3:03:ca:41:55:31:0d:4d:a9:79:4d:d1:7f: d2:3e:05:c6:f5:09:19:25:5c:7e:26:a9:d1:56:cd: ef:e8:5e:ec:83:f6:fd:07:cc:06:cb:fc:36:a0:b4: 50:71:fe:8c:85:f8:74:1f:cf:f1:e4:a9:57:2c:65: e2:12:97:a0:6c:20:cb:f3:b5:76:14:ed:cb:24:63: 2d:f4:13:01:02:5b:7d:d7:67:bb:7d:04:d8:c0:f8: f8:2e:bd:3c:eb:8c:e8:be:0c:19:88:35:13:6f:93: 79:65:4f:f8:55:ad:87:16:64:5a:d3:4d:0b:6a:21: fc:53:cf:c0:16:31:af:7a:e1:5f:c5:f3:4b:d7:b6: 16:7e:37:12:2b:6b:48:73:c0:76:e6:3e:07:c4:1e: e6:9f:37:4f:88:f9:a1:b5:9d:f0:ee:fe:2c:e5:73: 10:77:89:b8:72:f6:84:68:5c:18:57:e6:58:99:8d: 13:b0:37:01:ed:98:b7:21:59:a3:05:1e:d3:f4:97: c7:70:27:02:ae:26:f8:5c:72:56:8a:01:4f:f2:1b: d6:e2:94:68:7e:28:d8:fe:99:c6:e3:38:49:7c:46: 4b:90:d6:27:09:30:55:38:66:1a:23:09:71:1f:7c: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a300::/40 Signature Algorithm: sha256WithRSAEncryption 61:f2:de:ee:9c:38:9c:fe:bf:0e:bb:cc:c8:eb:dd:df:72:7d: 73:ea:42:14:53:30:fc:6c:56:4c:6f:7c:bc:1f:92:68:16:57: e0:24:84:b0:a3:c0:d3:17:44:5b:78:46:3f:10:68:f4:37:75: b3:a7:ad:d8:90:db:23:0c:d0:f1:84:0b:a2:c3:92:97:95:cd: c9:f5:c4:62:98:9f:27:e5:4d:b7:7a:87:64:56:a0:e9:4d:28: 0b:e7:ff:2f:d3:b3:bc:27:b0:06:e8:eb:89:05:ee:ef:93:5a: ca:1b:a3:f9:f1:a6:1b:f8:c1:2c:c4:d9:fc:75:e3:98:42:00: 38:b0:ef:f8:4a:7b:d6:50:2f:70:13:24:1d:ea:51:b8:81:d1: 93:90:21:5b:b4:df:0b:26:98:40:62:c7:ba:cb:2c:08:5d:80: e0:1e:21:c9:a7:ac:48:6a:c9:c0:47:e5:8f:80:12:9c:60:4e: 49:a7:6b:30:0d:d7:aa:a3:66:c6:ea:d3:73:a6:f9:ea:5b:31: aa:af:1f:44:fd:6c:cd:fa:39:57:a3:4c:21:2c:23:75:39:bd: 4f:c5:19:99:1c:e1:c0:e1:7f:3f:f1:e8:55:0d:72:ce:62:e8: 93:89:3a:63:2d:e3:c5:b6:5e:ef:84:dd:49:ab:38:99:32:01: f4:00:99:2f -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUAT1eEP4MhH6ze2ekHPRUocLeOWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDgxODQ4NDBaFw0yNjAyMDcxODUzNDBaMDMxMTAvBgNV BAMTKEVEQjJEQ0I5MjM1MjEzMTNFNDZDRUREN0U1MDVDMUU2NzE0QzlDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zapGfVMofRzGKLkA3TVPowPK QVUxDU2peU3Rf9I+Bcb1CRklXH4mqdFWze/oXuyD9v0HzAbL/DagtFBx/oyF+HQf z/HkqVcsZeISl6BsIMvztXYU7cskYy30EwECW33XZ7t9BNjA+PguvTzrjOi+DBmI NRNvk3llT/hVrYcWZFrTTQtqIfxTz8AWMa964V/F80vXthZ+NxIra0hzwHbmPgfE HuafN0+I+aG1nfDu/izlcxB3ibhy9oRoXBhX5liZjROwNwHtmLchWaMFHtP0l8dw JwKuJvhcclaKAU/yG9bilGh+KNj+mcbjOEl8RkuQ1icJMFU4ZhojCXEffH8LAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtsty5I1ITE+Rs 7dflBcHmcUycHTAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4Lzgv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgv OC9FREIyRENCOTIzNTIxMzEzRTQ2Q0VERDdFNTA1QzFFNjcxNEM5QzFELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEozANBgkqhkiG9w0BAQsFAAOCAQEAYfLe 7pw4nP6/DrvMyOvd33J9c+pCFFMw/GxWTG98vB+SaBZX4CSEsKPA0xdEW3hGPxBo 9Dd1s6et2JDbIwzQ8YQLosOSl5XNyfXEYpifJ+VNt3qHZFag6U0oC+f/L9OzvCew BujriQXu75Nayhuj+fGmG/jBLMTZ/HXjmEIAOLDv+Ep71lAvcBMkHepRuIHRk5Ah W7TfCyaYQGLHusssCF2A4B4hyaesSGrJwEflj4ASnGBOSadrMA3XqqNmxurTc6b5 6lsxqq8fRP1szfo5V6NMISwjdTm9T8UZmRzhwOF/P/HoVQ1yzmLok4k6Yy3jxbZe 74TdSas4mTIB9ACZLw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:14 2025 by rpki-client