$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer File: 5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer (raw, json) Hash identifier: Vp4SuNr+p7tp8xNyjLiGHn7itiUYDy27QKJMavnq6iA= Subject key identifier: 53:44:A7:14:7C:3B:DF:12:8B:91:CB:0E:4B:65:9E:3D:A3:04:61:21 Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Certificate issuer: /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Certificate serial: 7BC9972C28663E08D5F882E7555894437763F6C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer Manifest: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft caRepository: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/ Notify URL: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml Certificate not before: Fri 25 Oct 2024 19:00:24 +0000 Certificate not after: Fri 24 Oct 2025 19:05:24 +0000 Subordinate resources: IP: 23.145.57.0/24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c9:97:2c:28:66:3e:08:d5:f8:82:e7:55:58:94:43:77:63:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Validity Not Before: Oct 25 19:00:24 2024 GMT Not After : Oct 24 19:05:24 2025 GMT Subject: CN=5344A7147C3BDF128B91CB0E4B659E3DA3046121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:6d:4f:e7:f5:ce:f0:8b:d1:f4:00:b9:88: 5a:87:2d:c6:d2:55:a7:6a:d0:5c:03:e4:46:16:89: 64:0a:f1:d2:ad:af:d4:c5:6f:23:1e:66:f3:26:b4: 9c:5a:4a:a2:3a:27:61:f1:af:c1:3c:4b:cf:a3:49: 0c:cd:c3:9a:c3:47:4b:91:93:cd:48:d2:86:40:4f: da:58:2a:f5:a8:f1:41:c3:73:6f:d0:be:30:2a:09: f7:e1:0c:9a:e3:11:e6:9c:3a:79:ea:ae:1b:00:b3: 90:af:1c:6d:5e:b1:56:d5:15:7c:57:8e:a9:6d:95: b4:5a:2f:ae:10:d2:fa:6c:c1:7a:00:aa:75:a8:a8: a7:25:f0:2e:38:14:55:1e:86:48:99:41:79:81:7f: 15:14:20:30:8a:1b:d3:33:b2:2b:ff:0b:b0:fc:27: 89:5a:ac:87:f6:60:7d:70:5a:8a:df:0f:16:a7:43: 37:91:02:ae:23:45:16:98:8b:24:fe:0c:e5:3c:2f: 1c:15:2d:4c:65:da:b2:57:2f:12:81:d5:cd:9c:80: 62:d8:7c:63:54:22:23:c6:86:86:f0:c2:7a:97:bf: 74:16:a0:ef:5f:a4:62:50:e9:57:b8:93:18:21:bf: c3:aa:4c:43:67:09:e6:ea:91:6f:1c:22:7e:c5:4f: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:44:A7:14:7C:3B:DF:12:8B:91:CB:0E:4B:65:9E:3D:A3:04:61:21 X509v3 Authority Key Identifier: keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer Subject Information Access: CA Repository - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/ RPKI Manifest - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft RPKI Notify - URI:https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.145.57.0/24 Signature Algorithm: sha256WithRSAEncryption 20:de:37:2e:6e:ec:16:39:57:0e:95:25:56:9d:a4:08:48:ea: c2:7e:d9:56:51:7d:4a:96:2a:b7:a8:4d:af:8d:0c:d7:f9:68: 76:52:6b:6b:a1:fc:45:9e:b7:2f:ac:34:3b:50:57:74:ce:53: 38:93:a8:4e:62:a7:44:e7:7c:e6:1c:a5:e0:8e:92:c8:d6:4b: 03:79:c1:d0:df:08:25:b3:81:eb:7d:fd:ad:c5:3f:13:e1:c6: 6b:5e:6f:7a:6d:01:2d:c2:d9:4d:24:4d:17:51:21:cf:b9:48: a4:a4:62:21:ba:aa:42:59:bc:c6:53:e7:54:b3:1c:c8:ec:5d: e6:3d:c7:72:a9:40:84:55:09:1d:fe:45:d5:50:f5:54:df:71: 40:1f:59:45:ef:d7:44:ed:7f:a7:bf:f2:e9:01:8c:c4:00:f2: 5a:be:6b:4d:c3:30:2b:9d:63:87:eb:04:07:fc:dd:ed:71:d2: 93:1c:5d:18:20:e7:1c:80:3d:68:85:22:e4:df:50:89:71:cd: f9:64:a0:93:36:65:6a:19:61:48:0c:54:bc:e2:d0:22:38:21: a5:3a:88:39:6e:e0:c2:bc:9e:f3:2b:3d:86:7a:9e:a1:69:f9: b0:6c:c1:02:0c:a0:dd:f8:2d:ec:c3:b3:e9:53:b8:ea:e6:7f: c8:bc:3b:7f -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIUe8mXLChmPgjV+ILnVViUQ3dj9sIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4 Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjQxMDI1MTkwMDI0WhcNMjUxMDI0MTkwNTI0 WjAzMTEwLwYDVQQDEyg1MzQ0QTcxNDdDM0JERjEyOEI5MUNCMEU0QjY1OUUzREEz MDQ2MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CptT+f1zvCL 0fQAuYhahy3G0lWnatBcA+RGFolkCvHSra/UxW8jHmbzJrScWkqiOidh8a/BPEvP o0kMzcOaw0dLkZPNSNKGQE/aWCr1qPFBw3Nv0L4wKgn34Qya4xHmnDp56q4bALOQ rxxtXrFW1RV8V46pbZW0Wi+uENL6bMF6AKp1qKinJfAuOBRVHoZImUF5gX8VFCAw ihvTM7Ir/wuw/CeJWqyH9mB9cFqK3w8Wp0M3kQKuI0UWmIsk/gzlPC8cFS1MZdqy Vy8SgdXNnIBi2HxjVCIjxoaG8MJ6l790FqDvX6RiUOlXuJMYIb/DqkxDZwnm6pFv HCJ+xU+zbQIDAQABo4IDOjCCAzYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU U0SnFHw73xKLkcsOS2WePaMEYSEwHwYDVR0jBBgwFoAUk7ApbDF4d4D+hBMxj9DS cIODTMUwDgYDVR0PAQH/BAQDAgEGMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDky ZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzgvOTNCMDI5NkMzMTc4Nzc4 MEZFODQxMzMxOEZEMEQyNzA4MzgzNENDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHj MIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5 L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3 ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU1NjNlMmY5 LTRkOWItNDBjMy1hZmEyLWNlNzA0NWZmZDIzYS8xODIyZmU5YzhhMWQ4YTAyMTc3 ODkzNGUzNzgxNTlmZjhmNzk0ZGYzMmJmZTllZDA3MS5jZXIwggEIBggrBgEFBQcB CwSB+zCB+DBBBggrBgEFBQcwBYY1cnN5bmM6Ly9rcmlsbC5jYS1iYy0wMS5zc21p ZGdlLnh5ei9yZXBvL1NzbWlkZ2VMTEMvMy8wbQYIKwYBBQUHMAqGYXJzeW5jOi8v a3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXovcmVwby9Tc21pZGdlTExDLzMvNTM0 NEE3MTQ3QzNCREYxMjhCOTFDQjBFNEI2NTlFM0RBMzA0NjEyMS5tZnQwRAYIKwYB BQUHMA2GOGh0dHBzOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXovcnJkcC9u b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXkTkwDQYJKoZIhvcNAQELBQADggEBACDe Ny5u7BY5Vw6VJVadpAhI6sJ+2VZRfUqWKreoTa+NDNf5aHZSa2uh/EWety+sNDtQ V3TOUziTqE5ip0TnfOYcpeCOksjWSwN5wdDfCCWzget9/a3FPxPhxmteb3ptAS3C 2U0kTRdRIc+5SKSkYiG6qkJZvMZT51SzHMjsXeY9x3KpQIRVCR3+RdVQ9VTfcUAf WUXv10Ttf6e/8ukBjMQA8lq+a03DMCudY4frBAf83e1x0pMcXRgg5xyAPWiFIuTf UIlxzflkoJM2ZWoZYUgMVLzi0CI4IaU6iDlu4MK8nvMrPYZ6nqFp+bBswQIMoN34 LezDs+lTuOrmf8i8O38= -----END CERTIFICATE-----Generated at Mon Apr 28 19:54:18 2025 by rpki-client