$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/3B7184989F76A03708039261134F384B50D011BB.cer File: 3B7184989F76A03708039261134F384B50D011BB.cer (raw, json) Hash identifier: pyWlM3MePAh4KaaZOKeKWkF5fV0gcfRAeh/G/Uiq3fA= Subject key identifier: 3B:71:84:98:9F:76:A0:37:08:03:92:61:13:4F:38:4B:50:D0:11:BB Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 5BD689936DDB2438B01986DC853445A5D09D456B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Manifest: rsync://krill.immarket.space/repo/imh/0/3B7184989F76A03708039261134F384B50D011BB.mft caRepository: rsync://krill.immarket.space/repo/imh/0/ Notify URL: https://krill.immarket.space/rrdp/notification.xml Certificate not before: Sat 07 Dec 2024 13:25:21 +0000 Certificate not after: Sat 06 Dec 2025 13:30:21 +0000 Subordinate resources: IP: 2a0b:4e07:5000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d6:89:93:6d:db:24:38:b0:19:86:dc:85:34:45:a5:d0:9d:45:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Dec 7 13:25:21 2024 GMT Not After : Dec 6 13:30:21 2025 GMT Subject: CN=3B7184989F76A03708039261134F384B50D011BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:ab:ab:18:f0:94:1c:4a:3f:14:a3:47:d3: 4d:8a:6c:6f:ac:37:8e:94:1b:a0:f2:f1:63:81:83: 7a:57:22:e6:ea:90:0d:6c:ee:bb:7c:b8:1a:b8:d7: c2:0e:0e:52:1b:f0:47:12:ed:3f:28:ac:8b:e4:cf: ce:1e:88:c6:ab:5e:e2:d8:02:83:dc:bb:df:61:2f: f7:7f:56:55:4a:b4:6a:53:cd:96:80:da:01:14:48: 21:75:0f:2b:6c:ad:71:6b:65:59:24:86:69:c9:29: a4:d1:be:ec:fd:6d:a9:b1:66:35:87:0d:96:c6:37: a6:03:a9:71:ed:8d:c9:53:21:17:75:a0:a7:27:4a: 52:09:5f:5e:b7:d1:ad:63:84:1f:67:3a:3e:b9:94: 8d:ba:71:5d:ab:4e:8a:f8:6f:97:0c:a0:d5:c1:f3: a1:f5:f0:c2:49:bd:ef:c9:b5:dc:c4:e7:f5:24:d2: 23:ff:04:dd:a7:4a:7a:66:5b:0b:f4:ce:84:de:d8: 6f:a4:20:2c:1b:0f:38:e9:34:18:38:97:5c:02:16: ae:f8:96:8e:f1:6d:b7:c8:e1:34:87:48:58:28:b7: 40:c1:6c:08:63:d8:b6:70:3d:1f:93:30:59:2b:e8: 6d:73:b1:ec:be:25:94:ce:cd:e2:c9:bf:86:24:41: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:71:84:98:9F:76:A0:37:08:03:92:61:13:4F:38:4B:50:D0:11:BB X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: CA Repository - URI:rsync://krill.immarket.space/repo/imh/0/ RPKI Manifest - URI:rsync://krill.immarket.space/repo/imh/0/3B7184989F76A03708039261134F384B50D011BB.mft RPKI Notify - URI:https://krill.immarket.space/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5000::/36 Signature Algorithm: sha256WithRSAEncryption 8e:53:1a:88:6c:d5:e3:e1:28:ee:2c:be:a1:05:22:d5:ff:9c: fd:af:8c:cf:f1:a3:36:26:a8:cf:f8:4b:b4:99:6e:51:89:a8: ff:f2:c5:75:ae:3c:ab:6a:0b:a8:61:b2:42:00:ff:0d:b8:70: ad:1e:23:08:a0:b0:68:5c:6b:fd:9c:34:eb:dc:5a:f5:28:df: f2:a0:46:2a:a3:67:38:0a:c4:de:09:9d:cd:f4:01:47:1b:14: 24:26:98:e8:d3:17:81:4e:14:2e:31:3e:1b:51:f7:f0:e5:b3: 45:60:a9:5d:0f:aa:8e:11:73:a4:12:af:de:c4:cc:24:0d:7a: c4:d8:ab:74:d6:c2:89:a8:d5:1f:ab:84:dd:07:dd:b4:62:48: 17:7c:20:e9:8a:4b:ea:07:68:15:30:2d:76:dd:15:a1:e7:27: e1:68:22:8c:b7:18:e5:a5:9d:66:94:69:86:13:c0:c7:7e:91: 53:58:1c:20:ba:9e:1b:cd:50:45:b8:e4:f2:0d:b1:d3:fc:66: ee:f5:56:56:a1:ee:8e:ee:17:b2:55:62:42:1d:a1:83:63:32: b4:16:1a:a9:dc:4b:86:65:7b:3d:f1:0a:10:00:b0:9f:24:c4: 47:ec:48:3d:46:cd:31:4e:49:9a:ab:53:07:8e:6d:10:c4:0b: 2a:ef:3a:7f -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUW9aJk23bJDiwGYbchTRFpdCdRWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNDEyMDcxMzI1MjFaFw0yNTEyMDYxMzMwMjFaMDMxMTAvBgNV BAMTKDNCNzE4NDk4OUY3NkEwMzcwODAzOTI2MTEzNEYzODRCNTBEMDExQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pqurGPCUHEo/FKNH002KbG+s N46UG6Dy8WOBg3pXIubqkA1s7rt8uBq418IODlIb8EcS7T8orIvkz84eiMarXuLY AoPcu99hL/d/VlVKtGpTzZaA2gEUSCF1DytsrXFrZVkkhmnJKaTRvuz9bamxZjWH DZbGN6YDqXHtjclTIRd1oKcnSlIJX1630a1jhB9nOj65lI26cV2rTor4b5cMoNXB 86H18MJJve/JtdzE5/Uk0iP/BN2nSnpmWwv0zoTe2G+kICwbDzjpNBg4l1wCFq74 lo7xbbfI4TSHSFgot0DBbAhj2LZwPR+TMFkr6G1zsey+JZTOzeLJv4YkQQWBAgMB AAGjggLGMIICwjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7cYSYn3agNwgD kmETTzhLUNARuzAfBgNVHSMEGDAWgBTRggdGarCn19HvPHzQLoC+1YNAvDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8wL0QxODIwNzQ2 NkFCMEE3RDdEMUVGM0M3Q0QwMkU4MEJFRDU4MzQwQkMuY2VyMIHoBggrBgEFBQcB CwSB2zCB2DA0BggrBgEFBQcwBYYocnN5bmM6Ly9rcmlsbC5pbW1hcmtldC5zcGFj ZS9yZXBvL2ltaC8wLzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9rcmlsbC5pbW1hcmtl dC5zcGFjZS9yZXBvL2ltaC8wLzNCNzE4NDk4OUY3NkEwMzcwODAzOTI2MTEzNEYz ODRCNTBEMDExQkIubWZ0MD4GCCsGAQUFBzANhjJodHRwczovL2tyaWxsLmltbWFy a2V0LnNwYWNlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgtOB1AwDQYJ KoZIhvcNAQELBQADggEBAI5TGohs1ePhKO4svqEFItX/nP2vjM/xozYmqM/4S7SZ blGJqP/yxXWuPKtqC6hhskIA/w24cK0eIwigsGhca/2cNOvcWvUo3/KgRiqjZzgK xN4Jnc30AUcbFCQmmOjTF4FOFC4xPhtR9/Dls0VgqV0Pqo4Rc6QSr97EzCQNesTY q3TWwomo1R+rhN0H3bRiSBd8IOmKS+oHaBUwLXbdFaHnJ+FoIoy3GOWlnWaUaYYT wMd+kVNYHCC6nhvNUEW45PINsdP8Zu71Vlah7o7uF7JVYkIdoYNjMrQWGqncS4Zl ez3xChAAsJ8kxEfsSD1GzTFOSZqrUweObRDECyrvOn8= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:12 2025 by rpki-client