$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer File: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer (raw, json) Hash identifier: 52XGL5lwTxPgOjSczpDW7ve1A97ibTaIJ9Kverg3qsU= Subject key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 5B633DA30D452FEE9B9EBE8B888F98B4CC1D2354 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 11 Feb 2025 16:39:52 +0000 Certificate not after: Tue 10 Feb 2026 16:44:52 +0000 Subordinate resources: IP: 2a09:54c7::/32 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0a:6044:c110::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 11:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:63:3d:a3:0d:45:2f:ee:9b:9e:be:8b:88:8f:98:b4:cc:1d:23:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 11 16:39:52 2025 GMT Not After : Feb 10 16:44:52 2026 GMT Subject: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:34:f5:ce:aa:18:0b:61:d0:ae:eb:69:62: 21:21:8f:9b:21:41:cb:77:67:3d:72:bc:63:60:4f: 3d:21:97:ee:2a:b8:bb:8d:e9:05:5a:d4:57:16:7a: 43:00:7e:c4:79:52:c0:e5:63:80:7f:97:9a:d6:a9: dc:8a:80:4e:d3:20:35:e0:0d:d2:3c:1f:a3:de:63: fc:4b:72:33:d4:04:83:f5:0b:b8:9d:ea:81:3b:8d: db:63:29:77:40:c2:16:ee:e8:03:c7:e9:71:2f:8d: 92:14:62:e1:ae:f4:dd:85:0a:4e:f6:f2:7f:48:9b: 5b:ea:b9:1d:18:ed:10:fb:7c:34:69:39:a0:c3:eb: 5f:c0:b9:78:67:fd:b3:16:9e:e2:96:0e:7b:ea:da: 6b:12:9c:c2:02:de:af:37:af:54:cd:0d:e7:a4:2a: 30:0a:3e:2a:c9:90:f5:63:cf:8a:97:c1:d5:7d:d2: 97:7d:d8:84:fd:6d:1e:d5:bc:b2:e2:ab:00:62:ef: ae:1a:0b:a9:88:6f:56:4f:b0:dc:e2:2a:c7:e1:ac: aa:c2:85:a9:c0:03:66:17:6f:5e:eb:1a:be:64:3e: b2:15:d4:fc:27:5b:8a:2c:f3:7b:5e:e1:4c:ca:b4: 10:78:2b:77:3c:ee:80:26:3d:a0:e4:f7:6d:d6:0f: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7::/32 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0a:6044:c110::/44 Signature Algorithm: sha256WithRSAEncryption 98:9d:9c:3d:a3:ad:05:96:50:b8:06:d0:c8:90:25:74:06:b6: dd:f8:73:d5:c8:3f:6e:85:99:2d:73:ed:18:6a:05:f5:14:ec: aa:a4:2b:57:e7:ba:0d:93:53:48:50:42:04:26:6c:ed:50:a0: 96:f3:b9:fe:71:5b:52:42:86:b7:f5:a4:4c:d9:44:77:c4:65: f0:d9:5e:f2:61:c9:6f:e3:ec:ac:53:b8:7a:00:fa:e6:85:d1: 81:88:a4:d5:79:16:94:67:9d:aa:93:57:90:a0:3e:e1:03:28: 3f:c8:cc:fb:9e:ef:58:87:dd:1d:da:8b:d7:d2:ce:36:76:6c: 7b:09:09:56:0e:3c:68:41:a6:f6:30:e7:1d:b2:23:b4:12:c9: 66:db:08:49:45:32:b8:82:4c:7b:ef:3b:a0:34:f8:23:72:9e: dd:f6:cd:a4:e1:10:a7:c5:93:45:a4:63:24:d8:bb:49:39:7b: 3c:83:9b:46:71:20:85:4a:da:cc:a3:a0:75:85:3d:fb:ca:6d: b7:f1:e6:43:91:57:55:f1:12:3e:31:cb:9d:14:26:17:3b:82: 61:11:29:c0:f5:cc:cb:ce:93:f6:8d:eb:ad:c7:79:a7:7a:19: 20:1d:7c:a4:a4:41:b4:6a:cc:af:73:56:49:a7:3d:56:c6:2c: 2c:96:f0:e0 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUW2M9ow1FL+6bnr6LiI+YtMwdI1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTExNjM5NTJaFw0yNjAyMTAxNjQ0NTJaMDMxMTAvBgNV BAMTKEVEMEI4QUUwM0Q2MjUwRDU5RUY4RTdCRTU1NkQ5NEVCNDk0MTU0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7jT1zqoYC2HQrutpYiEhj5sh Qct3Zz1yvGNgTz0hl+4quLuN6QVa1FcWekMAfsR5UsDlY4B/l5rWqdyKgE7TIDXg DdI8H6PeY/xLcjPUBIP1C7id6oE7jdtjKXdAwhbu6APH6XEvjZIUYuGu9N2FCk72 8n9Im1vquR0Y7RD7fDRpOaDD61/AuXhn/bMWnuKWDnvq2msSnMIC3q83r1TNDeek KjAKPirJkPVjz4qXwdV90pd92IT9bR7VvLLiqwBi764aC6mIb1ZPsNziKsfhrKrC hanAA2YXb17rGr5kPrIV1PwnW4os83te4UzKtBB4K3c87oAmPaDk923WD9P/AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtC4rgPWJQ1Z74 575VbZTrSUFUKTAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRiZTA0LzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQv My9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1NTZEOTRFQjQ5NDE1NDI5Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMCcEAgACMCEDBQAqCVTHAwYAKgpgRGQDBwAqCmBEqhADBwQqCmBE wRAwDQYJKoZIhvcNAQELBQADggEBAJidnD2jrQWWULgG0MiQJXQGtt34c9XIP26F mS1z7RhqBfUU7KqkK1fnug2TU0hQQgQmbO1QoJbzuf5xW1JChrf1pEzZRHfEZfDZ XvJhyW/j7KxTuHoA+uaF0YGIpNV5FpRnnaqTV5CgPuEDKD/IzPue71iH3R3ai9fS zjZ2bHsJCVYOPGhBpvYw5x2yI7QSyWbbCElFMriCTHvvO6A0+CNynt32zaThEKfF k0WkYyTYu0k5ezyDm0ZxIIVK2syjoHWFPfvKbbfx5kORV1XxEj4xy50UJhc7gmER KcD1zMvOk/aN663Head6GSAdfKSkQbRqzK9zVkmnPVbGLCyW8OA= -----END CERTIFICATE-----Generated at Thu May 1 04:21:36 2025 by rpki-client