Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/EEF3EC40152A747D52835AE8973E7DC8C193A840.cer
File:                     EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (raw, json)
Hash identifier:          30f/YQnfJ9umO6VmQfhCcDH6J8ylCgwjtJuTLsTRhXw=
Subject key identifier:   EE:F3:EC:40:15:2A:74:7D:52:83:5A:E8:97:3E:7D:C8:C1:93:A8:40
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       25D87CE5A1FA85170BF9E5D7A3CD9ED1A63CD25F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Manifest:                 rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft
caRepository:             rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/
Notify URL:               https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml
Certificate not before:   Sun 12 Nov 2023 18:13:44 +0000
Certificate not after:    Sun 10 Nov 2024 18:18:44 +0000
Subordinate resources:    IP: 2602:fa6e:100::/40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 11:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d8:7c:e5:a1:fa:85:17:0b:f9:e5:d7:a3:cd:9e:d1:a6:3c:d2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Nov 12 18:13:44 2023 GMT
            Not After : Nov 10 18:18:44 2024 GMT
        Subject: CN=EEF3EC40152A747D52835AE8973E7DC8C193A840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:39:6d:78:24:e3:fa:b9:54:5d:b5:7d:66:
                    b1:27:94:8e:6e:22:7e:38:58:99:82:fc:69:ed:18:
                    5a:9d:ee:dc:f7:4a:4f:5d:9d:f5:04:c3:e3:12:8d:
                    2f:d1:07:43:e1:40:ee:a4:2b:f4:e1:4d:b4:6f:32:
                    48:50:b3:a5:d3:b4:e0:51:53:6b:1a:d9:a8:8b:b0:
                    67:db:d2:00:da:62:72:ee:db:90:0a:84:58:f6:02:
                    a9:a3:0c:b3:db:30:a2:04:5b:30:ab:fb:ed:23:f0:
                    bd:87:1d:69:5c:57:80:0c:5a:4f:e8:2a:6b:22:c6:
                    31:1b:4a:eb:f8:cb:00:14:77:af:4e:97:dc:45:df:
                    77:3b:b9:93:53:b7:51:a9:c9:d0:79:68:a4:ed:82:
                    7e:1f:0b:4b:eb:71:52:a6:15:a4:84:c4:c0:21:17:
                    5f:ed:4e:88:fd:2c:2d:ea:b9:be:dc:8f:f2:7b:42:
                    ff:de:81:44:0b:f8:56:e5:43:dc:93:fb:43:ef:b3:
                    ba:6a:1c:7a:f7:76:7b:18:9b:56:8b:21:d5:54:3a:
                    11:d1:f9:24:41:d0:ee:6d:b2:3c:ac:53:43:59:00:
                    7e:25:0d:cb:4a:37:29:14:e5:21:06:8b:55:92:70:
                    48:8e:1b:b4:e8:c3:b5:30:31:d3:45:32:a5:0b:4e:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:F3:EC:40:15:2A:74:7D:52:83:5A:E8:97:3E:7D:C8:C1:93:A8:40
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/
                RPKI Manifest - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft
                RPKI Notify - URI:https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:03:02:2b:89:98:40:bb:69:ea:ab:cf:93:dd:1d:5a:b3:
         85:ea:be:7a:3e:d2:ac:35:9e:2f:2f:9b:fc:85:80:9b:c0:1e:
         60:2c:de:8f:66:5c:8a:3d:aa:ef:05:99:52:0b:8c:7a:5d:05:
         5c:98:b0:62:11:ee:be:00:a4:90:d4:a8:c0:86:f0:37:79:46:
         17:90:17:a2:c1:9f:16:26:c3:9f:ac:0b:ef:f7:80:f9:8b:c1:
         39:58:98:1d:d7:ca:15:6b:91:7f:96:a3:ad:f2:6e:4b:62:71:
         c5:79:a3:3b:c3:35:5a:fd:d4:7b:12:fe:e5:0b:18:96:46:6a:
         cb:de:6d:3e:ca:eb:f3:b7:c0:35:07:8b:c1:3b:19:0e:a4:1f:
         d3:2f:2b:5f:46:ba:13:41:6e:dd:f0:99:09:2f:b1:b5:a3:34:
         0f:bf:65:45:3d:44:46:2c:54:56:5d:c3:16:d8:fb:fd:60:a4:
         ea:e2:fb:23:e2:cc:d8:5d:ff:23:4a:e7:a0:d9:6c:8d:c4:ae:
         71:7f:80:0f:9d:f0:d2:c5:bb:b1:99:9c:d2:9d:c5:3c:7b:27:
         f8:bc:3f:13:7f:cb:5d:c7:d4:58:6c:da:05:32:54:23:92:69:
         3c:26:30:f3:11:11:e5:01:a3:09:f8:b0:37:a4:bd:62:88:3a:
         50:83:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:07:52 2024 by rpki-client on console-fra.rpki-client.org