Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer
File:                     5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer (raw, json)
Hash identifier:          kzCfqV3DmQa/T1Q4cYK4YbSGqsRBr5Cr7kbqoIXCKgA=
Subject key identifier:   53:44:A7:14:7C:3B:DF:12:8B:91:CB:0E:4B:65:9E:3D:A3:04:61:21
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       1333D847D6EF243BDECD1AE782DF0A4203DF0324
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Manifest:                 rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft
caRepository:             rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/
Notify URL:               https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml
Certificate not before:   Sun 12 Nov 2023 18:13:41 +0000
Certificate not after:    Sun 10 Nov 2024 18:18:41 +0000
Subordinate resources:    IP: 23.145.57.0/24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Jun 2024 05:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:33:d8:47:d6:ef:24:3b:de:cd:1a:e7:82:df:0a:42:03:df:03:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Nov 12 18:13:41 2023 GMT
            Not After : Nov 10 18:18:41 2024 GMT
        Subject: CN=5344A7147C3BDF128B91CB0E4B659E3DA3046121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:6d:4f:e7:f5:ce:f0:8b:d1:f4:00:b9:88:
                    5a:87:2d:c6:d2:55:a7:6a:d0:5c:03:e4:46:16:89:
                    64:0a:f1:d2:ad:af:d4:c5:6f:23:1e:66:f3:26:b4:
                    9c:5a:4a:a2:3a:27:61:f1:af:c1:3c:4b:cf:a3:49:
                    0c:cd:c3:9a:c3:47:4b:91:93:cd:48:d2:86:40:4f:
                    da:58:2a:f5:a8:f1:41:c3:73:6f:d0:be:30:2a:09:
                    f7:e1:0c:9a:e3:11:e6:9c:3a:79:ea:ae:1b:00:b3:
                    90:af:1c:6d:5e:b1:56:d5:15:7c:57:8e:a9:6d:95:
                    b4:5a:2f:ae:10:d2:fa:6c:c1:7a:00:aa:75:a8:a8:
                    a7:25:f0:2e:38:14:55:1e:86:48:99:41:79:81:7f:
                    15:14:20:30:8a:1b:d3:33:b2:2b:ff:0b:b0:fc:27:
                    89:5a:ac:87:f6:60:7d:70:5a:8a:df:0f:16:a7:43:
                    37:91:02:ae:23:45:16:98:8b:24:fe:0c:e5:3c:2f:
                    1c:15:2d:4c:65:da:b2:57:2f:12:81:d5:cd:9c:80:
                    62:d8:7c:63:54:22:23:c6:86:86:f0:c2:7a:97:bf:
                    74:16:a0:ef:5f:a4:62:50:e9:57:b8:93:18:21:bf:
                    c3:aa:4c:43:67:09:e6:ea:91:6f:1c:22:7e:c5:4f:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:44:A7:14:7C:3B:DF:12:8B:91:CB:0E:4B:65:9E:3D:A3:04:61:21
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/
                RPKI Manifest - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft
                RPKI Notify - URI:https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:1b:ff:10:de:c3:cf:e9:8b:93:37:43:58:31:11:dd:42:a4:
         87:1a:55:b3:44:0a:c7:e3:a0:b8:45:66:2d:90:9b:7c:a8:d4:
         c2:98:4b:5f:b2:da:88:e6:f2:3f:bc:ff:1f:08:22:fc:9e:63:
         60:b2:83:7c:69:4f:bf:4a:10:62:b3:5e:83:1a:bb:08:01:22:
         93:52:35:c6:cb:3f:96:89:dd:d0:0b:d9:55:8b:3e:59:3a:9d:
         a6:21:e4:bf:ea:36:53:82:bd:fd:55:5e:23:b4:bb:77:f4:cf:
         84:70:a2:51:de:a2:be:16:1c:9a:03:63:f0:05:28:2d:e1:8d:
         74:24:ca:1b:ef:f7:16:ae:ab:5d:a3:aa:32:81:f1:36:f3:0c:
         1a:09:63:61:3c:f4:1c:54:86:6d:01:9a:83:f5:91:6b:ae:ac:
         b1:30:64:f6:66:3a:34:09:bd:48:10:54:0b:8a:b6:41:1b:4a:
         0e:09:3e:02:70:23:35:05:1a:bd:35:c7:a6:f9:68:07:4c:fc:
         db:b0:9f:44:b8:93:8b:c2:5f:fc:9f:a4:6b:99:21:be:02:a9:
         ee:9a:bb:54:02:b2:9b:1a:7e:96:d3:f5:06:12:64:0e:d5:8a:
         61:ae:99:70:d5:42:cd:4e:a0:d7:52:04:d0:f9:a4:d7:ed:a0:
         ab:86:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:57:30 2024 by rpki-client on console-fra.rpki-client.org