Certificate

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
File:                     716ED138312A679CA1B1F88B3EF7301163F16356.cer (raw, json)
Hash identifier:          KYQdjfqmeascR+c/6m2lO4KkFmXRHVGFmkuJmPuHTQ4=
Subject key identifier:   71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       02CB76B8B2A35D515BFE2A8B52711EEE19229B4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Sun 20 Apr 2025 00:03:52 +0000
Certificate not after:    Sun 19 Apr 2026 00:08:52 +0000
Subordinate resources:    IP: 172.99.233.0/24
                          IP: 192.67.32.0/23
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 09:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cb:76:b8:b2:a3:5d:51:5b:fe:2a:8b:52:71:1e:ee:19:22:9b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 20 00:03:52 2025 GMT
            Not After : Apr 19 00:08:52 2026 GMT
        Subject: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:3c:46:29:9d:b2:b9:be:12:53:30:93:06:
                    f3:b6:22:13:b8:67:48:8d:f4:f4:f9:33:35:41:ec:
                    e4:b7:f2:7a:e3:fd:97:1d:03:37:1b:2e:7d:d4:26:
                    6a:67:4d:ae:47:0a:f6:b4:41:60:74:60:ab:63:26:
                    c1:e1:89:40:f1:8e:d7:70:95:1f:7c:c2:83:c8:e3:
                    8b:97:07:90:a8:c8:0b:db:7e:e8:b4:ac:75:d6:88:
                    27:e8:35:a1:fe:1c:1d:3e:b7:12:75:7e:fc:7a:1d:
                    64:f3:e6:3d:14:b1:05:bd:75:32:ba:f7:07:2e:66:
                    89:58:c1:ea:03:4f:89:ab:fb:cd:27:f2:48:c7:43:
                    d9:53:eb:eb:de:7c:34:02:38:82:6c:a1:a5:b3:fb:
                    23:84:2f:d9:65:be:46:fa:29:be:bc:1f:d6:f0:70:
                    f8:c3:ed:54:96:34:89:e4:ea:70:f4:fc:be:9e:44:
                    19:3a:8f:6e:21:05:9c:6a:f4:69:58:09:d8:7f:48:
                    a8:5f:ae:af:30:e4:eb:5b:c9:08:ae:8a:0e:7a:88:
                    cf:b8:7a:18:50:19:90:f7:a7:60:68:ba:13:1b:8a:
                    3c:29:82:84:91:95:3b:21:5d:9a:fe:c0:ec:95:9d:
                    54:56:e5:6e:5f:5f:7a:57:03:e4:a6:78:a7:cc:fb:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24
                  192.67.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:7d:08:5b:ba:12:03:f9:4e:73:de:0c:bb:44:64:5b:25:
         a0:b7:98:54:2d:d9:1b:8c:7c:85:37:dd:a7:35:11:f9:00:53:
         f8:00:cd:11:1c:10:89:d9:23:90:b5:cd:27:f5:fe:b7:0b:4f:
         84:13:a5:ba:f7:4e:a7:e4:15:18:8b:57:a8:1d:98:ff:47:9c:
         3e:a3:d1:dd:29:b9:a6:f7:4f:b8:cd:5a:6e:8a:6d:33:be:ec:
         2c:bd:be:74:d1:71:35:b9:24:9b:09:23:41:6b:61:02:20:c7:
         d5:a0:60:38:6c:1f:8b:33:80:87:b1:9e:ed:08:5a:b3:18:80:
         00:31:11:08:6c:27:3f:75:ce:2d:4b:ea:ab:84:23:2d:d7:42:
         b3:6e:7f:21:ea:09:62:5b:a0:40:27:1a:1f:9c:2b:ba:23:ee:
         4d:be:ce:03:1c:dc:f3:00:8b:c7:fa:5d:90:60:6d:40:3b:07:
         17:ce:2e:ec:38:17:85:cd:af:80:0d:84:be:eb:1b:7e:5c:2b:
         13:c2:51:18:9a:2a:9d:66:32:7f:07:fd:b4:6b:7a:ab:08:8e:
         90:be:2e:fe:d8:75:30:e1:6b:ac:fd:cb:8c:16:a0:58:65:db:
         c8:1d:41:49:51:d1:86:c2:81:d6:5c:b3:ec:6c:d4:4e:b7:35:
         be:f8:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:40:26 2025 by rpki-client