$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer (raw, json) Hash identifier: ACTQaQSWdUgPhSDs47QiZSCgU6rFrRr/WfiwZrTcP5o= Subject key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 4CB7E85F02B9D328AF42B9E2FF24E290E0280AAA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 11 Apr 2025 01:16:08 +0000 Certificate not after: Fri 10 Apr 2026 01:21:08 +0000 Subordinate resources: IP: 2a0a:6044:7c00::/40 IP: 2a0a:6044:8000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 19:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b7:e8:5f:02:b9:d3:28:af:42:b9:e2:ff:24:e2:90:e0:28:0a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 11 01:16:08 2025 GMT Not After : Apr 10 01:21:08 2026 GMT Subject: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:97:07:06:45:33:24:dc:59:c0:5c:60:1d: 25:4c:08:41:79:bd:08:6f:67:ad:04:2d:eb:56:10: 12:ef:a2:6c:a9:56:a3:f1:30:fa:ab:4a:a4:03:79: 55:8d:60:55:2f:26:ca:11:01:6d:d3:6c:39:d6:39: 9d:c9:7e:53:5c:50:b0:d4:ae:43:57:86:42:a3:72: aa:b3:80:ba:0f:49:7a:9c:f8:8b:1e:c5:4b:ef:c6: 84:85:df:94:97:12:d0:bd:55:17:58:72:c6:3e:d6: a1:72:f9:d5:e7:d9:62:46:71:95:2f:0d:e8:82:a4: 1b:88:00:e3:29:da:98:24:51:0c:a8:ab:2a:01:60: e2:74:8f:0f:e4:6d:2b:53:9a:2c:65:8c:c6:ba:7c: 38:7a:92:b0:87:3e:b5:d9:be:02:e2:56:cc:8b:9f: 80:5c:1f:f7:94:42:36:09:3d:94:67:1b:c5:c5:bf: bf:fe:13:7b:23:b1:c4:15:bd:12:79:1a:1e:af:9c: 09:13:c9:a5:ef:6e:91:d0:74:0b:06:ef:fd:95:b3: 4e:5f:53:56:35:3b:b2:70:e3:4d:1e:19:d2:34:96: c9:6d:7b:0c:6b:82:0b:6b:51:b6:3b:d1:60:33:2c: cc:e8:36:07:2b:ea:4c:8e:42:45:9b:a1:cb:3b:9f: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7c00::/40 2a0a:6044:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8b:3f:a6:e1:55:bc:41:88:da:74:c8:7b:09:9c:68:b4:bc:d5: 3c:4c:86:f6:44:95:c3:db:97:ff:c4:04:ff:86:49:b3:b6:60: 25:24:c0:8e:9a:cf:83:77:99:d0:cb:b1:69:2b:4c:63:16:b9: a6:d2:15:24:bc:fb:e5:fa:e4:d4:49:da:e3:7d:0d:67:0f:b1: 36:3c:15:30:cb:12:71:16:63:0d:7f:45:d1:b0:ee:94:3f:57: 4f:3c:62:f1:bd:42:f7:ed:54:2a:66:bf:16:dd:8a:d7:41:b5: 1a:63:26:d0:7c:33:73:2e:83:23:69:60:e1:8f:46:f3:fc:7a: 59:96:4f:c0:fd:c1:72:83:a0:fd:25:24:4d:79:a5:ac:e7:b0: 50:de:d4:c2:bd:73:6c:cd:18:71:16:14:0f:98:29:9b:bd:35: e7:cb:60:6a:fa:3a:a1:7a:6f:4b:db:55:20:fc:cc:1f:86:9f: f6:d1:80:fa:d2:68:9d:8b:7a:cd:5a:b6:2f:25:40:f7:7c:0a: de:65:96:f7:3b:30:fc:95:d1:a5:60:49:18:22:c3:f3:93:97: 19:41:77:c8:53:64:25:33:35:39:4d:bb:3d:cf:a0:cc:8a:e5: a6:d4:26:94:90:18:55:d7:72:3a:04:08:58:17:c9:51:b9:f6: 02:74:ae:93 -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIUTLfoXwK50yivQrni/yTikOAoCqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MTEwMTE2MDhaFw0yNjA0MTAwMTIxMDhaMDMxMTAvBgNV BAMTKDQzODhBRjYyOUM3MDJEREE4OEZBNkJCMkE5NTVEQjhGMjRFRDJCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUypcHBkUzJNxZwFxgHSVMCEF5 vQhvZ60ELetWEBLvomypVqPxMPqrSqQDeVWNYFUvJsoRAW3TbDnWOZ3JflNcULDU rkNXhkKjcqqzgLoPSXqc+IsexUvvxoSF35SXEtC9VRdYcsY+1qFy+dXn2WJGcZUv DeiCpBuIAOMp2pgkUQyoqyoBYOJ0jw/kbStTmixljMa6fDh6krCHPrXZvgLiVsyL n4BcH/eUQjYJPZRnG8XFv7/+E3sjscQVvRJ5Gh6vnAkTyaXvbpHQdAsG7/2Vs05f U1Y1O7Jw400eGdI0lsltewxrggtrUbY70WAzLMzoNgcr6kyOQkWbocs7n5SJAgMB AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDiK9inHAt2oj6 a7KpVduPJO0rvDAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2MmNiLzQv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2Iv NC80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJBOTU1REI4RjI0RUQyQkJDLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqCmBEfAMGBCoKYESAMA0GCSqGSIb3DQEBCwUA A4IBAQCLP6bhVbxBiNp0yHsJnGi0vNU8TIb2RJXD25f/xAT/hkmztmAlJMCOms+D d5nQy7FpK0xjFrmm0hUkvPvl+uTUSdrjfQ1nD7E2PBUwyxJxFmMNf0XRsO6UP1dP PGLxvUL37VQqZr8W3YrXQbUaYybQfDNzLoMjaWDhj0bz/HpZlk/A/cFyg6D9JSRN eaWs57BQ3tTCvXNszRhxFhQPmCmbvTXny2Bq+jqhem9L21Ug/Mwfhp/20YD60mid i3rNWrYvJUD3fAreZZb3OzD8ldGlYEkYIsPzk5cZQXfIU2QlMzU5Tbs9z6DMiuWm 1CaUkBhV13I6BAhYF8lRufYCdK6T -----END CERTIFICATE-----Generated at Thu May 8 02:14:12 2025 by rpki-client