$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer File: FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer (raw, json) Hash identifier: Qxnj1YNNfVJOs4fXyapjc6xW4rbLAdQHDna/ylmTxKE= Subject key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 4ECB60BEDAD41D9E824CA61916AF0D08CEDF50E9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 25 May 2025 06:40:37 +0000 Certificate not after: Sun 24 May 2026 06:45:37 +0000 Subordinate resources: IP: 2a0a:6044:bc00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cb:60:be:da:d4:1d:9e:82:4c:a6:19:16:af:0d:08:ce:df:50:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 25 06:40:37 2025 GMT Not After : May 24 06:45:37 2026 GMT Subject: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:c1:bf:1d:fa:10:83:fa:84:93:47:26:70: aa:52:9a:e5:23:02:8b:a6:2a:b2:16:57:6d:ab:49: 03:41:cb:46:ab:19:a2:bc:3f:f7:75:b3:19:b7:e3: 44:fb:cf:1b:39:63:f0:e6:43:f4:8b:bc:81:d9:8a: 00:35:48:94:b0:94:e8:4a:f1:67:27:b4:b0:23:29: 7b:de:bd:55:ab:0f:c4:2d:47:22:d8:95:36:a0:6a: b7:b9:e0:b9:fd:af:27:a5:1a:18:49:8b:f8:d1:24: 2f:12:c6:f8:df:35:fc:42:71:fd:7c:2f:d1:c8:dd: 92:cb:de:41:e1:97:b6:7e:c6:ff:e4:c8:9e:37:03: 89:e9:75:6b:e5:aa:5e:c8:4d:a2:f7:3f:0d:f7:e3: b4:e5:d3:b5:fa:54:d4:20:6b:d3:b8:f8:8d:4e:1d: 7a:dc:27:3c:3c:7b:1e:73:a3:5f:13:84:38:39:eb: b9:04:23:85:fc:b8:f9:c9:bc:ad:7f:79:34:5a:ad: 45:46:40:b5:41:0b:d7:fe:e5:8b:55:df:58:6d:21: e2:fe:97:cf:71:63:fe:ac:1b:96:dc:51:42:1d:42: dc:d2:68:f3:5b:be:a0:2c:d3:37:01:df:14:f8:11: 95:ec:7f:08:98:4f:54:67:6a:75:d4:b3:50:95:63: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bc00::/40 Signature Algorithm: sha256WithRSAEncryption 60:a9:0f:18:82:24:72:f3:23:73:ed:c0:38:9d:4b:99:0a:c9: 86:92:03:85:de:31:3c:45:fe:0e:12:1a:3b:f8:64:7e:7c:ea: b4:74:fa:70:5b:24:df:95:8e:59:93:ca:9d:74:e6:97:e3:c7: 2a:4c:19:9b:07:fa:3c:db:f6:c7:6f:f7:ba:6d:b8:ad:3c:c4: 69:85:b4:0d:0a:63:d3:0c:01:53:7f:29:bc:8b:38:de:f0:99: 14:0a:c1:53:f8:51:b0:27:7b:48:a7:7a:18:b4:93:ba:b3:e5: 84:bb:f6:82:a0:59:99:0d:0d:6e:76:48:a7:bb:22:45:63:12: e5:f6:f7:b5:f2:92:b6:78:a2:7a:8c:a7:5b:bc:da:3f:8d:24: a1:4d:67:aa:cc:30:31:b4:c9:1d:54:04:8c:aa:2c:7c:2e:e5: 29:02:96:8d:28:83:9f:3f:d2:dc:f0:0e:bc:68:49:e6:dc:0a: 8f:fe:dd:6f:e1:d9:66:ef:19:fb:aa:6f:e3:e3:98:9a:fb:1b: af:06:17:07:69:20:f6:9a:5f:22:2b:72:20:c2:34:6d:ee:58: a4:06:76:b4:68:b5:c8:78:22:72:68:36:68:1b:b5:9b:17:0b: 13:97:24:2d:26:27:34:5c:ee:4d:80:41:3a:ee:44:a7:00:5d: c7:94:cc:73 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUTstgvtrUHZ6CTKYZFq8NCM7fUOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MjUwNjQwMzdaFw0yNjA1MjQwNjQ1MzdaMDMxMTAvBgNV BAMTKEZCQjFBNTY1OTIwREE3NTRENzA2MkQ3QTFCNUNBRThGRjVEOTMyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypcG/HfoQg/qEk0cmcKpSmuUj AoumKrIWV22rSQNBy0arGaK8P/d1sxm340T7zxs5Y/DmQ/SLvIHZigA1SJSwlOhK 8WcntLAjKXvevVWrD8QtRyLYlTagare54Ln9ryelGhhJi/jRJC8SxvjfNfxCcf18 L9HI3ZLL3kHhl7Z+xv/kyJ43A4npdWvlql7ITaL3Pw3347Tl07X6VNQga9O4+I1O HXrcJzw8ex5zo18ThDg567kEI4X8uPnJvK1/eTRarUVGQLVBC9f+5YtV31htIeL+ l89xY/6sG5bcUUIdQtzSaPNbvqAs0zcB3xT4EZXsfwiYT1RnanXUs1CVYzdJAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7saVlkg2nVNcG LXobXK6P9dkyZjAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYmJhOTYwZmYtNWYyZi00MDRlLTg3MjYtN2I0ZmFjODlkZjY1LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9iYmE5NjBmZi01ZjJmLTQwNGUtODcyNi03YjRmYWM4OWRmNjUv MS9GQkIxQTU2NTkyMERBNzU0RDcwNjJEN0ExQjVDQUU4RkY1RDkzMjY2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEvDANBgkqhkiG9w0BAQsFAAOCAQEAYKkP GIIkcvMjc+3AOJ1LmQrJhpIDhd4xPEX+DhIaO/hkfnzqtHT6cFsk35WOWZPKnXTm l+PHKkwZmwf6PNv2x2/3um24rTzEaYW0DQpj0wwBU38pvIs43vCZFArBU/hRsCd7 SKd6GLSTurPlhLv2gqBZmQ0NbnZIp7siRWMS5fb3tfKStniieoynW7zaP40koU1n qswwMbTJHVQEjKosfC7lKQKWjSiDnz/S3PAOvGhJ5twKj/7db+HZZu8Z+6pv4+OY mvsbrwYXB2kg9ppfIityIMI0be5YpAZ2tGi1yHgicmg2aBu1mxcLE5ckLSYnNFzu TYBBOu5EpwBdx5TMcw== -----END CERTIFICATE-----Generated at Tue Jun 3 10:16:19 2025 by rpki-client