$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer File: 5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer (raw, json) Hash identifier: ETKe/5nTbvMooRCnpYwSjEKAbBrDF9iRbICFJiLmcyE= Subject key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 2E15EA21C9ACA7F73A89A8CB18E0E3F9E5B0B3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 08 Jun 2024 09:02:57 +0000 Certificate not after: Sat 07 Jun 2025 09:07:57 +0000 Subordinate resources: IP: 2a0a:6044:ac70::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Jun 2024 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:15:ea:21:c9:ac:a7:f7:3a:89:a8:cb:18:e0:e3:f9:e5:b0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 8 09:02:57 2024 GMT Not After : Jun 7 09:07:57 2025 GMT Subject: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:05:9c:17:ff:b1:87:86:16:bf:20:e2:0c: c7:c7:c6:67:72:ca:4d:b0:0a:da:b6:fe:e6:fa:ae: 9d:7c:fb:db:41:a1:70:8b:ed:d0:43:e1:40:0f:73: 69:bd:64:2e:0c:bd:2d:7f:26:55:fa:37:98:a2:6d: 80:1c:6d:00:84:e0:f9:0c:13:d2:ca:a5:08:66:4c: 5c:b1:5c:f2:63:c5:60:1e:5c:ea:b7:15:43:1b:f4: d0:44:cd:09:d1:4a:d0:ed:60:cb:71:c1:37:56:55: 5b:21:3b:4e:b7:a0:77:31:ee:e0:d0:c1:7c:ab:76: e9:ce:f5:9e:ac:bc:ef:4e:f2:e2:82:85:36:0a:48: 24:8d:0e:88:89:8f:6f:bd:97:09:f3:d5:cf:a8:78: 43:66:7a:33:de:32:81:f7:1f:60:4e:6b:89:31:18: 11:dc:bd:12:6f:b0:1f:b4:83:c2:3d:49:66:22:cf: 95:96:60:3e:60:e9:84:6a:d3:d1:79:9a:73:87:34: 3d:41:f7:80:aa:47:2a:75:b3:8e:59:86:8d:d0:5c: 2a:96:db:cf:74:30:ee:54:ab:f5:b7:ba:ce:af:e9: e2:cc:0a:18:5f:d4:23:bb:bb:7d:1a:51:1d:60:2a: c8:ea:45:6a:95:28:84:d9:61:7f:b0:7d:50:71:d6: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ac70::/44 Signature Algorithm: sha256WithRSAEncryption 23:69:3a:0c:52:7c:6a:5e:2a:87:53:a2:aa:52:bc:5a:18:a2: 30:2f:7a:8e:f6:bf:94:35:8d:66:92:9a:48:32:69:e8:3e:51: 81:e0:54:d0:46:d7:32:c1:28:09:dd:35:69:29:ed:97:8a:c4: 99:dc:87:d1:09:a8:6a:ce:fd:68:3b:09:0c:5f:e6:c0:1f:c2: 32:96:04:87:31:72:80:46:9b:3e:25:ef:4d:ae:17:fb:65:d7: 8e:eb:fc:82:57:fa:d2:cb:9c:79:47:63:b4:a5:f1:ad:c6:cd: a2:b0:0a:18:69:89:86:e4:83:30:cb:e6:eb:ba:4a:84:76:3e: 2f:bc:20:67:44:5f:23:58:6d:15:55:29:dd:79:ba:e1:a3:c2: 08:dc:dc:9d:e6:d3:67:d7:19:d4:1d:4f:9a:a6:e9:da:fd:3a: 11:62:07:bc:c3:a6:8e:10:c9:f9:80:d4:84:a3:19:92:35:43: 87:88:bc:45:1d:b3:52:ff:09:27:c1:41:99:8a:fe:38:2e:e6: 43:65:a9:ff:a4:87:a6:13:03:7e:7b:4d:a3:90:b2:4d:78:78: 94:95:ca:0f:31:de:48:56:c2:8f:65:5c:c6:66:35:0d:df:31: f5:dd:e1:89:f6:29:8c:b7:ce:66:71:a1:84:a9:f3:25:6d:b8: f0:fb:6c:39 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgITLhXqIcmsp/c6iajLGODj+eWwszANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0MjQ0QzkzRkM4 OEY4NTAzMB4XDTI0MDYwODA5MDI1N1oXDTI1MDYwNzA5MDc1N1owMzExMC8GA1UE AxMoNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdBMzQzNkMxQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcQBZwX/7GHhha/IOIMx8fGZ3LK TbAK2rb+5vqunXz720GhcIvt0EPhQA9zab1kLgy9LX8mVfo3mKJtgBxtAITg+QwT 0sqlCGZMXLFc8mPFYB5c6rcVQxv00ETNCdFK0O1gy3HBN1ZVWyE7TregdzHu4NDB fKt26c71nqy8707y4oKFNgpIJI0OiImPb72XCfPVz6h4Q2Z6M94ygfcfYE5riTEY Edy9Em+wH7SDwj1JZiLPlZZgPmDphGrT0Xmac4c0PUH3gKpHKnWzjlmGjdBcKpbb z3Qw7lSr9be6zq/p4swKGF/UI7u7fRpRHWAqyOpFapUohNlhf7B9UHHWX3ECAwEA AaOCAxQwggMQMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFF2w42KvvJACstVS EC2hHaejQ2wcMB8GA1UdIwQYMBaAFFepdG/lQ+s+oNRJU0JEyT/Ij4UDMA4GA1Ud DwEB/wQEAwIBBjCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0 MS1iY2MxLTI3NjU0M2EyNWM3ZC8wLzU3QTk3NDZGRTU0M0VCM0VBMEQ0NDk1MzQy NDRDOTNGQzg4Rjg1MDMuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUH MAKGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk Zjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yLzU3QTk3NDZGRTU0M0VCM0VBMEQ0 NDk1MzQyNDRDOTNGQzg4Rjg1MDMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBf BggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS9mZDE0ZWVkNi00OGJmLTQxNjctODFiYi1mNjc1ZDZmMTlhM2EvMS8w gYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L2ZkMTRlZWQ2LTQ4YmYtNDE2Ny04MWJiLWY2NzVkNmYxOWEzYS8x LzVEQjBFMzYyQUZCQzkwMDJCMkQ1NTIxMDJEQTExREE3QTM0MzZDMUMubWZ0MDwG CCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoKYESscDANBgkqhkiG9w0BAQsFAAOCAQEAI2k6 DFJ8al4qh1OiqlK8WhiiMC96jva/lDWNZpKaSDJp6D5RgeBU0EbXMsEoCd01aSnt l4rEmdyH0Qmoas79aDsJDF/mwB/CMpYEhzFygEabPiXvTa4X+2XXjuv8glf60suc eUdjtKXxrcbNorAKGGmJhuSDMMvm67pKhHY+L7wgZ0RfI1htFVUp3Xm64aPCCNzc nebTZ9cZ1B1Pmqbp2v06EWIHvMOmjhDJ+YDUhKMZkjVDh4i8RR2zUv8JJ8FBmYr+ OC7mQ2Wp/6SHphMDfntNo5CyTXh4lJXKDzHeSFbCj2VcxmY1Dd8x9d3hifYpjLfO ZnGhhKnzJW248PtsOQ== -----END CERTIFICATE-----Generated at Wed Jun 19 21:35:07 2024 by rpki-client on console.sobornost.net