$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer File: D7D838DED871774D2E875C9CB99B810DC1B38301.cer (raw, json) Hash identifier: 1AoEX3K5kOm5ZzFVz9DUW2y1vX3KyGCIGc8WiM4iSmA= Subject key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 361E0AB5012A0A556EA5F98577E5574BCCE64029 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 21 Jun 2024 18:15:46 +0000 Certificate not after: Fri 20 Jun 2025 18:20:46 +0000 Subordinate resources: IP: 2a0a:6044:a500::/40 IP: 2a0a:6044:bb00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jul 2024 16:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1e:0a:b5:01:2a:0a:55:6e:a5:f9:85:77:e5:57:4b:cc:e6:40:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 21 18:15:46 2024 GMT Not After : Jun 20 18:20:46 2025 GMT Subject: CN=D7D838DED871774D2E875C9CB99B810DC1B38301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:80:9e:f3:d9:f4:ba:0e:58:db:fe:e7:5c: 1e:35:97:31:08:d9:fa:d0:35:f5:e5:9e:96:be:59: a2:81:59:13:0d:0b:6d:98:f8:68:3d:b7:d1:54:4d: bc:48:80:9b:0b:93:e0:74:de:fb:5d:cb:a2:96:6f: c0:74:b3:73:d3:c1:ac:8e:14:53:98:45:61:f5:1f: 01:0c:ec:be:ee:02:40:ec:3b:65:27:89:d8:87:65: ea:1b:ba:74:88:79:d5:71:f1:8a:13:00:a8:37:62: 02:8f:8d:a1:9a:5d:d1:34:c1:df:98:04:2c:68:05: 29:57:a6:a3:db:36:ef:9f:4a:19:1d:8f:d7:58:d1: fa:34:18:32:d8:3a:b7:15:59:7f:4c:40:f8:4b:d5: 68:01:3c:75:88:3e:f0:45:36:90:f0:ee:21:9a:77: be:80:48:77:75:65:8e:14:e3:95:fb:19:80:eb:4b: bd:02:90:b8:eb:55:c9:51:a2:a0:42:13:be:3c:c4: 62:17:59:51:a3:9d:68:54:74:22:ee:d2:9b:fe:86: 1c:21:f6:aa:c3:52:ab:37:35:69:7e:fd:3c:06:5c: 51:70:9d:96:3f:66:a1:af:ea:c0:1f:0f:16:19:2f: 2a:75:27:6d:09:a3:a8:4b:ce:63:1b:66:e7:52:ee: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a500::/40 2a0a:6044:bb00::/40 Signature Algorithm: sha256WithRSAEncryption 10:fa:8b:eb:a4:0f:e5:0a:1c:83:e4:e9:b7:3b:20:af:9e:73: 2e:3d:39:4b:82:5e:54:87:01:45:c7:6f:92:3a:e7:41:ab:75: 2b:5e:22:d2:a9:1c:5e:c5:5d:ed:e1:70:51:ab:01:c9:2e:a2: 31:07:0b:de:71:f6:a4:1a:2b:0b:4c:4b:98:22:8d:6f:fe:71: a5:e0:ef:6e:86:61:f2:e5:13:e6:9f:8e:d4:d5:3e:78:81:ec: 6e:a9:a0:43:f9:f9:53:19:4b:cc:ce:90:65:62:be:a5:8f:35: 31:cf:a9:6a:fe:96:19:f9:87:1c:6f:70:62:bd:2a:6a:8b:33: fe:07:da:1a:66:d5:52:75:f1:e5:4c:b5:ef:fc:2a:7b:eb:95: fe:05:42:5c:a0:20:76:2d:a0:a9:d9:04:b8:b3:a7:cf:07:af: 42:4f:cc:7e:57:66:f2:f6:b9:96:6b:60:79:20:1d:68:03:17: 28:a9:2d:54:32:01:76:0b:a8:d2:d9:dd:8d:f9:56:83:a3:8f: 43:68:2e:2a:cc:a0:78:a7:6f:c6:ad:42:d3:62:19:18:36:9c: 4a:9d:17:a7:ff:4f:82:6d:da:48:15:b9:97:38:92:56:e8:6e: 1c:1e:40:4d:20:3b:e3:64:9e:81:a3:b9:90:ac:59:e0:57:70: 6a:c2:94:af -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIUNh4KtQEqClVupfmFd+VXS8zmQCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA2MjExODE1NDZaFw0yNTA2MjAxODIwNDZaMDMxMTAvBgNV BAMTKEQ3RDgzOERFRDg3MTc3NEQyRTg3NUM5Q0I5OUI4MTBEQzFCMzgzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0oCe89n0ug5Y2/7nXB41lzEI 2frQNfXlnpa+WaKBWRMNC22Y+Gg9t9FUTbxIgJsLk+B03vtdy6KWb8B0s3PTwayO FFOYRWH1HwEM7L7uAkDsO2UnidiHZeobunSIedVx8YoTAKg3YgKPjaGaXdE0wd+Y BCxoBSlXpqPbNu+fShkdj9dY0fo0GDLYOrcVWX9MQPhL1WgBPHWIPvBFNpDw7iGa d76ASHd1ZY4U45X7GYDrS70CkLjrVclRoqBCE748xGIXWVGjnWhUdCLu0pv+hhwh 9qrDUqs3NWl+/TwGXFFwnZY/ZqGv6sAfDxYZLyp1J20Jo6hLzmMbZudS7vdDAgMB AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX2Dje2HF3TS6H XJy5m4ENwbODATAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZkYzhjLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMv MC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNCOTlCODEwREMxQjM4MzAxLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqCmBEpQMGACoKYES7MA0GCSqGSIb3DQEBCwUA A4IBAQAQ+ovrpA/lChyD5Om3OyCvnnMuPTlLgl5UhwFFx2+SOudBq3UrXiLSqRxe xV3t4XBRqwHJLqIxBwvecfakGisLTEuYIo1v/nGl4O9uhmHy5RPmn47U1T54gexu qaBD+flTGUvMzpBlYr6ljzUxz6lq/pYZ+Yccb3BivSpqizP+B9oaZtVSdfHlTLXv /Cp765X+BUJcoCB2LaCp2QS4s6fPB69CT8x+V2by9rmWa2B5IB1oAxcoqS1UMgF2 C6jS2d2N+VaDo49DaC4qzKB4p2/GrULTYhkYNpxKnRen/0+CbdpIFbmXOJJW6G4c HkBNIDvjZJ6Bo7mQrFngV3BqwpSv -----END CERTIFICATE-----Generated at Thu Jul 4 03:51:52 2024 by rpki-client on console.sobornost.net