$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer File: A6E0BBA193794B8146B360D50420A9C4DC77C845.cer (raw, json) Hash identifier: zNMeSnqCTb/c5SNRXG/WBioQMUedJ0WadAuUDDLcFqY= Subject key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6D86BF308926BFC9DD29DAE186B3787EABE1D2CA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 12 Feb 2025 06:26:33 +0000 Certificate not after: Wed 11 Feb 2026 06:31:33 +0000 Subordinate resources: IP: 2a0a:6044:a500::/40 IP: 2a0a:6044:bb00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 09:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:86:bf:30:89:26:bf:c9:dd:29:da:e1:86:b3:78:7e:ab:e1:d2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 12 06:26:33 2025 GMT Not After : Feb 11 06:31:33 2026 GMT Subject: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:4d:ce:b5:ea:37:8f:9b:c7:4b:17:0c:ed: 11:a8:14:42:f8:56:b4:45:e4:c5:08:6f:56:e4:e6: 85:c6:57:f0:23:c5:38:50:98:91:43:bf:22:35:19: b3:82:6d:95:fb:b6:aa:0c:4e:2a:98:cb:4b:1a:2a: 06:83:9a:ab:84:b9:df:03:f6:4f:8b:84:1d:99:89: 46:6e:6c:7f:e3:d1:47:fb:20:10:74:a8:b6:bd:86: 0b:3e:a5:20:27:05:e7:6a:bf:52:f6:f8:62:6f:1f: b4:0b:a8:b3:a6:dc:62:53:09:5f:81:04:43:70:5c: 9b:9f:59:59:08:d1:62:6b:fa:e1:0f:00:13:c2:b8: 7d:b6:12:4d:b9:53:a1:c7:af:28:79:fe:b0:88:53: 0d:7e:0f:6e:1a:8e:4d:74:86:68:3f:f5:0e:1d:b6: 1c:f4:20:8e:c6:04:2f:45:74:9f:bb:b9:2a:a4:44: f9:2a:24:c9:32:7b:ad:a7:1e:76:1c:94:94:88:a8: 5f:0b:b2:87:1f:de:35:7b:3a:b3:1c:e2:ff:78:dc: ee:ba:5f:44:6c:a6:b6:3e:20:2f:1e:f5:ec:a7:95: c8:a5:39:58:c5:2b:04:88:a8:ee:b2:6b:eb:03:ab: 7d:7b:7d:eb:a9:3d:04:50:53:8d:04:90:51:a4:cc: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a500::/40 2a0a:6044:bb00::/40 Signature Algorithm: sha256WithRSAEncryption 31:df:e1:c5:c2:b7:c8:56:ca:76:28:26:29:d8:d7:a0:98:73: 97:4a:04:43:0e:9d:8e:ce:6a:96:bd:0d:47:0b:83:7a:cd:b6: f4:1b:96:11:26:eb:b7:95:16:dd:92:ba:cb:de:e6:d7:de:ba: 46:53:76:4c:41:28:ab:3e:8a:80:8d:dd:8b:3e:ad:f9:27:ea: af:2a:67:fc:54:32:20:e1:00:73:a1:6f:80:5e:e1:33:c4:84: 2c:2b:7b:75:2d:5b:e7:47:6a:86:11:ba:46:ed:d3:14:df:2e: f0:17:9b:8e:c3:99:ae:88:d9:20:bb:79:f4:f7:5a:69:6e:4b: be:10:d9:35:fc:99:b7:4d:d5:77:1e:19:3a:23:2d:29:5d:3a: 7a:65:0e:7c:fb:d1:18:ba:a6:d6:38:a2:1a:8f:02:b7:20:09: 98:3a:ae:d8:00:b8:d8:99:93:7e:c7:7c:44:f2:13:43:99:f2: 57:96:86:0e:3e:d4:18:d1:33:de:9e:3a:fd:a3:fe:a8:bf:44: c4:16:e9:80:48:fa:b5:69:23:9f:9c:26:99:d4:64:28:69:35: e5:1b:82:4e:4f:ff:1b:2f:f1:b6:76:f5:32:ce:d3:5d:59:e4: 63:91:eb:72:aa:88:8e:b3:6b:f8:92:f8:e6:56:a4:74:2b:c9: cb:f7:9f:bf -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIUbYa/MIkmv8ndKdrhhrN4fqvh0sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTIwNjI2MzNaFw0yNjAyMTEwNjMxMzNaMDMxMTAvBgNV BAMTKEE2RTBCQkExOTM3OTRCODE0NkIzNjBENTA0MjBBOUM0REM3N0M4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOVE3Oteo3j5vHSxcM7RGoFEL4 VrRF5MUIb1bk5oXGV/AjxThQmJFDvyI1GbOCbZX7tqoMTiqYy0saKgaDmquEud8D 9k+LhB2ZiUZubH/j0Uf7IBB0qLa9hgs+pSAnBedqv1L2+GJvH7QLqLOm3GJTCV+B BENwXJufWVkI0WJr+uEPABPCuH22Ek25U6HHryh5/rCIUw1+D24ajk10hmg/9Q4d thz0II7GBC9FdJ+7uSqkRPkqJMkye62nHnYclJSIqF8Lsocf3jV7OrMc4v943O66 X0RsprY+IC8e9eynlcilOVjFKwSIqO6ya+sDq317feupPQRQU40EkFGkzLsjAgMB AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSm4Luhk3lLgUaz YNUEIKnE3HfIRTAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFjOTEyLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIv Mi9BNkUwQkJBMTkzNzk0QjgxNDZCMzYwRDUwNDIwQTlDNERDNzdDODQ1Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqCmBEpQMGACoKYES7MA0GCSqGSIb3DQEBCwUA A4IBAQAx3+HFwrfIVsp2KCYp2NegmHOXSgRDDp2OzmqWvQ1HC4N6zbb0G5YRJuu3 lRbdkrrL3ubX3rpGU3ZMQSirPoqAjd2LPq35J+qvKmf8VDIg4QBzoW+AXuEzxIQs K3t1LVvnR2qGEbpG7dMU3y7wF5uOw5muiNkgu3n091ppbku+ENk1/Jm3TdV3Hhk6 Iy0pXTp6ZQ58+9EYuqbWOKIajwK3IAmYOq7YALjYmZN+x3xE8hNDmfJXloYOPtQY 0TPenjr9o/6ov0TEFumASPq1aSOfnCaZ1GQoaTXlG4JOT/8bL/G2dvUyztNdWeRj ketyqoiOs2v4kvjmVqR0K8nL95+/ -----END CERTIFICATE-----Generated at Tue Apr 29 19:19:48 2025 by rpki-client