$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer File: 6003354361AF66B2F37153B9A7365EE572F6822E.cer (raw, json) Hash identifier: vBEimAsHWmN3evCzYOdYGs2f5nfHczlg+6MY0FCURNg= Subject key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 59BE4F63ED1925232B7313E4076638309CE890F3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 03 Jul 2025 19:08:28 +0000 Certificate not after: Thu 02 Jul 2026 19:13:28 +0000 Subordinate resources: IP: 2a0a:6044:ba00::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:be:4f:63:ed:19:25:23:2b:73:13:e4:07:66:38:30:9c:e8:90:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 19:08:28 2025 GMT Not After : Jul 2 19:13:28 2026 GMT Subject: CN=6003354361AF66B2F37153B9A7365EE572F6822E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:49:da:69:c8:aa:7a:44:d8:d8:62:6f:d9: 7b:8d:35:d3:2d:6e:b7:a1:06:63:0f:f0:53:cf:16: 3c:3f:fd:cb:72:85:32:26:19:6e:58:f7:9b:56:6a: f8:81:a8:6e:5b:58:43:82:e6:61:c8:73:25:e5:a0: db:13:73:0a:85:d8:18:2b:89:dd:79:0f:68:9d:4d: 30:8e:4f:25:6b:71:bf:e6:b7:10:47:1c:58:18:4d: 07:93:76:ba:0e:ea:6d:06:e7:9d:16:bc:b7:61:56: 0f:48:dd:46:f1:e2:18:ee:6f:98:4f:01:b1:bf:a1: 2e:4a:ed:b4:d7:b2:30:e4:b9:f2:2b:d3:81:4f:f2: 8f:9d:da:43:15:18:81:81:73:d1:15:91:92:4f:89: ed:ae:b0:66:2d:0f:30:f0:1f:ad:91:d9:67:38:93: 68:8a:0a:a1:f8:d2:9d:6e:65:ef:d8:40:38:91:f5: cb:4e:64:f3:d0:b2:b7:e6:6e:c5:81:63:e5:6e:0f: ce:33:88:a2:a2:a0:41:66:7a:63:ed:ca:aa:7c:b8: 70:73:47:16:32:ec:0d:39:61:3d:ae:0a:42:24:9c: 8f:46:f9:25:47:15:8d:2e:1f:6b:b8:42:02:72:7e: 79:d5:8f:19:b4:eb:ae:fd:8e:b5:af:8b:9b:77:52: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 0d:0b:4c:7a:d3:28:96:54:68:9d:2d:30:17:29:93:88:9e:10: 5d:32:5d:95:66:53:39:70:d2:91:ce:cd:70:8d:1d:63:79:cf: e3:da:39:4d:a4:0a:b6:7d:1b:a9:c9:d3:6d:67:2d:60:8a:5e: 38:8c:e2:b8:55:92:7e:f8:bb:68:65:07:cc:5f:4c:b1:46:24: f3:64:6b:bc:4b:12:35:f7:7e:75:c9:d0:1f:0e:eb:10:af:a5: e7:ea:9c:45:25:c2:b4:9f:ef:07:62:45:8c:cd:fb:11:23:eb: 82:59:76:3b:49:c9:3a:dc:77:e9:9f:b3:ad:2d:db:2c:0b:e3: 19:ee:b3:7e:4e:a8:89:c3:ae:48:94:05:15:2a:03:40:ba:18: a7:5c:ee:28:50:a9:80:7c:bc:1b:f2:82:81:4e:70:ca:8c:ef: 99:67:94:70:95:41:e7:b9:03:25:9e:bf:56:53:37:58:3a:7b: ff:c2:c9:d3:9f:9c:c4:88:62:38:43:49:23:05:4e:74:7b:b3: 57:09:3e:86:ca:14:5d:27:c2:81:b8:de:98:73:eb:b2:88:04: 2f:4d:c5:dc:8c:17:bf:7d:60:8a:1c:1b:74:7d:2f:04:37:8f: 7e:d2:43:cf:ea:21:0d:43:23:cb:8a:d6:67:1b:84:8c:4b:89: 80:62:61:1b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUWb5PY+0ZJSMrcxPkB2Y4MJzokPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxOTA4MjhaFw0yNjA3MDIxOTEzMjhaMDMxMTAvBgNV BAMTKDYwMDMzNTQzNjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMb0naaciqekTY2GJv2XuNNdMt brehBmMP8FPPFjw//ctyhTImGW5Y95tWaviBqG5bWEOC5mHIcyXloNsTcwqF2Bgr id15D2idTTCOTyVrcb/mtxBHHFgYTQeTdroO6m0G550WvLdhVg9I3Ubx4hjub5hP AbG/oS5K7bTXsjDkufIr04FP8o+d2kMVGIGBc9EVkZJPie2usGYtDzDwH62R2Wc4 k2iKCqH40p1uZe/YQDiR9ctOZPPQsrfmbsWBY+VuD84ziKKioEFmemPtyqp8uHBz RxYy7A05YT2uCkIknI9G+SVHFY0uH2u4QgJyfnnVjxm06679jrWvi5t3UkavAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgAzVDYa9msvNx U7mnNl7lcvaCLjAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzYv NjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRLowDQYJKoZIhvcNAQELBQADggEBAA0LTHrT KJZUaJ0tMBcpk4ieEF0yXZVmUzlw0pHOzXCNHWN5z+PaOU2kCrZ9G6nJ021nLWCK XjiM4rhVkn74u2hlB8xfTLFGJPNka7xLEjX3fnXJ0B8O6xCvpefqnEUlwrSf7wdi RYzN+xEj64JZdjtJyTrcd+mfs60t2ywL4xnus35OqInDrkiUBRUqA0C6GKdc7ihQ qYB8vBvygoFOcMqM75lnlHCVQee5AyWev1ZTN1g6e//CydOfnMSIYjhDSSMFTnR7 s1cJPobKFF0nwoG43phz67KIBC9NxdyMF799YIocG3R9LwQ3j37SQ8/qIQ1DI8uK 1mcbhIxLiYBiYRs= -----END CERTIFICATE-----Generated at Sat Jul 5 03:25:06 2025 by rpki-client