$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.cer File: 8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.cer (raw, json) Hash identifier: jeHRKAFMmEmPu0goMGNR1T9k3OP2DYLjskD8a4cB00E= Subject key identifier: 8C:CE:4E:EB:C2:B6:B0:AE:EB:31:E8:91:0C:C5:56:07:95:7B:54:00 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: CA2D54CD739F9D430FA9D806E4FF153B1280B9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 03 Jul 2025 18:41:43 +0000 Certificate not after: Thu 02 Jul 2026 18:46:43 +0000 Subordinate resources: IP: 2a0a:6044:7e00::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ca:2d:54:cd:73:9f:9d:43:0f:a9:d8:06:e4:ff:15:3b:12:80:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 18:41:43 2025 GMT Not After : Jul 2 18:46:43 2026 GMT Subject: CN=8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:3d:6e:f9:07:92:a6:0b:b0:61:2d:28:ce: 08:96:e7:10:cb:30:ed:40:af:2a:5a:aa:a8:c1:ae: c1:14:c6:0b:5c:2e:38:c5:fc:0e:bd:8c:e7:94:a6: 73:fa:17:44:b2:d8:50:be:ab:f2:45:f1:9f:57:fc: 39:a7:35:d9:c1:d7:72:27:30:ff:f3:8f:a0:ef:5d: a2:3c:f1:57:51:e4:f4:bd:0e:55:1a:f8:0c:2c:a3: 0f:31:2f:b1:de:c8:98:50:7c:b1:97:22:61:5c:32: aa:fa:b0:f4:95:41:81:81:6b:c3:1c:b7:a1:6e:66: a3:7e:79:f8:1b:54:81:a4:5c:2b:f4:e7:62:5e:94: 71:e9:17:17:12:0e:20:27:f8:71:e5:10:12:47:6f: 4c:c0:2f:a6:f5:19:aa:f8:35:d7:17:84:43:98:b5: d8:01:17:2e:99:dc:ad:71:65:f4:17:b0:94:97:81: a2:d2:c9:af:d7:d6:1b:aa:cb:b6:3d:eb:ac:a7:90: 33:53:6c:13:8c:a6:41:fa:c2:eb:31:62:2c:24:a4: 69:b3:37:16:66:d1:85:0b:a6:8a:9a:8a:a5:f4:3c: ca:32:6c:62:4e:b9:b2:ca:74:c8:79:27:db:31:f0: 82:cc:ab:3d:5b:d1:2a:b2:a0:5b:80:e4:00:73:af: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:CE:4E:EB:C2:B6:B0:AE:EB:31:E8:91:0C:C5:56:07:95:7B:54:00 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 1f:37:5a:3c:6b:34:b8:b5:75:15:67:ac:6b:eb:9e:89:55:e0: 49:ea:30:40:c0:fd:de:95:e2:6c:5a:6f:1e:f8:94:55:e8:5e: 08:13:50:f8:75:40:91:87:a6:f4:e4:ff:2e:71:89:99:e8:cb: 8c:7f:c4:d4:b5:7f:f8:43:44:7b:7e:e6:9d:15:fa:03:64:19: 40:b7:9d:3b:ce:5e:6f:01:ea:69:be:c6:f6:26:5a:07:d0:e4: 8e:ed:ee:9d:1e:06:73:27:21:e2:80:0d:67:d3:08:91:0a:af: dc:66:e8:36:28:a4:39:ee:5e:de:f2:7d:63:b7:9d:95:c9:f5: 38:6f:02:fa:c2:29:bb:93:59:ed:dc:bd:f7:06:fa:7f:ea:d8: fc:92:f8:50:07:29:74:a3:55:40:d8:5e:24:97:0b:6a:cc:8f: 8e:c3:1f:fc:74:cc:48:2d:61:1b:ee:96:7e:67:95:a1:12:4f: 2f:fe:16:63:ab:73:c3:a8:4f:3e:27:a5:82:3b:77:e5:f1:a8: 39:ac:1c:06:0b:eb:24:3c:86:ff:1c:ee:f3:b3:ca:e7:54:98: 21:9e:dd:71:54:7b:d0:c5:df:c9:5d:ed:3e:67:41:60:a3:cc: 98:8b:41:10:ff:f6:60:11:95:4d:f8:dc:a7:dd:e2:f7:09:e3: 28:7f:90:53 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUAMotVM1zn51DD6nYBuT/FTsSgLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxODQxNDNaFw0yNjA3MDIxODQ2NDNaMDMxMTAvBgNV BAMTKDhDQ0U0RUVCQzJCNkIwQUVFQjMxRTg5MTBDQzU1NjA3OTU3QjU0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCj1u+QeSpguwYS0ozgiW5xDL MO1ArypaqqjBrsEUxgtcLjjF/A69jOeUpnP6F0Sy2FC+q/JF8Z9X/DmnNdnB13In MP/zj6DvXaI88VdR5PS9DlUa+Awsow8xL7HeyJhQfLGXImFcMqr6sPSVQYGBa8Mc t6FuZqN+efgbVIGkXCv052JelHHpFxcSDiAn+HHlEBJHb0zAL6b1Gar4NdcXhEOY tdgBFy6Z3K1xZfQXsJSXgaLSya/X1huqy7Y966ynkDNTbBOMpkH6wusxYiwkpGmz NxZm0YULpoqaiqX0PMoybGJOubLKdMh5J9sx8ILMqz1b0SqyoFuA5ABzr4PdAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMzk7rwrawrusx 6JEMxVYHlXtUADAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS80LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlhYzQ5LzQv OENDRTRFRUJDMkI2QjBBRUVCMzFFODkxMENDNTU2MDc5NTdCNTQwMC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRH4wDQYJKoZIhvcNAQELBQADggEBAB83Wjxr NLi1dRVnrGvrnolV4EnqMEDA/d6V4mxabx74lFXoXggTUPh1QJGHpvTk/y5xiZno y4x/xNS1f/hDRHt+5p0V+gNkGUC3nTvOXm8B6mm+xvYmWgfQ5I7t7p0eBnMnIeKA DWfTCJEKr9xm6DYopDnuXt7yfWO3nZXJ9ThvAvrCKbuTWe3cvfcG+n/q2PyS+FAH KXSjVUDYXiSXC2rMj47DH/x0zEgtYRvuln5nlaESTy/+FmOrc8OoTz4npYI7d+Xx qDmsHAYL6yQ8hv8c7vOzyudUmCGe3XFUe9DF38ld7T5nQWCjzJiLQRD/9mARlU34 3Kfd4vcJ4yh/kFM= -----END CERTIFICATE-----Generated at Sat Jul 5 02:45:34 2025 by rpki-client