$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer File: 558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer (raw, json) Hash identifier: 2qM5jAaiOTKPpDpHeFxmkzKDl5udVZfeofpH12cB5QU= Subject key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 761DF5E7BC29F5FC48054B30A1C74127C38ABE62 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft caRepository: rsync://rpki.cc/repo/MythicalKitten/17/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 11:12:29 +0000 Certificate not after: Fri 03 Jul 2026 11:17:29 +0000 Subordinate resources: IP: 2a07:54c1::/36 IP: 2a07:54c1:3200::/40 IP: 2a07:54c1:6000::/36 IP: 2a07:54c1:8000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1d:f5:e7:bc:29:f5:fc:48:05:4b:30:a1:c7:41:27:c3:8a:be:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 11:12:29 2025 GMT Not After : Jul 3 11:17:29 2026 GMT Subject: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:a0:47:15:16:b6:0f:05:15:7e:be:e6:92: 7d:4e:9c:d2:3e:25:ae:1c:af:4e:9c:eb:58:b7:59: 57:f8:1e:61:df:fc:ab:84:72:03:be:6a:cc:3e:06: f4:5a:fe:f6:13:8e:5e:fd:d6:14:56:b9:7f:c3:bb: c6:30:aa:8b:2a:f8:6d:ce:fd:bc:7e:f0:41:7a:1d: 0e:7f:e5:ec:ec:64:bb:1d:94:11:34:2a:a4:14:22: 92:58:8f:6e:ca:dc:59:e8:b9:76:81:77:e3:33:8f: e9:11:fc:a8:4b:c5:30:88:b1:cf:54:27:5c:89:a3: e0:9b:f9:28:34:a1:c8:83:5e:a9:62:de:be:b8:f1: 97:8a:46:6f:b4:19:22:8a:29:18:ce:8e:47:33:95: 3b:69:62:48:63:bd:1a:63:b7:6a:fc:0d:ae:77:5c: 6b:f4:7c:d5:93:c7:14:d3:e8:d4:cb:c5:b5:ba:e5: a0:53:e2:c7:2e:0e:d9:fb:aa:0b:04:f8:d3:d8:67: 31:b0:b0:5a:db:87:e8:80:5c:31:f5:39:b5:94:22: 5f:64:96:51:22:ca:25:80:08:39:96:ff:24:0f:45: a7:1f:cf:52:41:4c:0f:cf:ac:88:65:cb:41:2a:a3: 2f:3a:85:f0:ee:03:57:b8:42:2d:14:40:b6:e6:13: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/17/ RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1::/36 2a07:54c1:3200::/40 2a07:54c1:6000::/36 2a07:54c1:8000::/36 Signature Algorithm: sha256WithRSAEncryption 92:e5:71:f9:69:54:66:73:e2:2f:90:a4:db:51:84:bf:e3:62: 6b:30:79:ac:5b:25:f7:9e:f4:53:27:73:d6:2c:c0:04:91:51: 7b:46:53:31:b2:2b:be:cd:af:c0:a1:ae:d9:8c:fc:42:d9:14: b6:56:25:ea:61:c7:9b:0c:0b:14:63:e2:cb:46:dd:b1:e3:cd: 61:45:f6:49:52:cb:36:7b:4d:9a:aa:6b:61:ae:a9:0d:65:1d: 29:de:7e:cf:74:04:eb:7a:a3:b4:6a:1a:9e:9f:80:78:7c:df: 18:a9:09:90:12:b5:43:39:27:1c:fd:37:de:c6:5b:c8:06:f6: 77:67:74:af:10:d5:55:c4:97:01:27:43:a4:4b:93:23:31:65: 38:99:51:73:23:61:62:b4:2e:d6:a9:06:8f:ee:52:a5:d8:a5: 92:20:24:e9:46:84:7d:81:0a:29:53:4b:05:c9:1f:bf:5a:11: b1:7c:ae:c3:dc:9b:9c:49:e5:c5:7e:04:27:a8:b0:06:13:23: a3:2b:42:08:60:77:34:49:28:48:51:b3:02:96:67:c2:77:bd: af:66:00:dd:43:e1:0e:86:c3:23:3e:e3:06:7a:ef:22:94:38: 0f:d9:d6:cf:95:97:76:e4:d7:fe:d2:94:d2:c5:51:2e:be:40: 6f:f4:07:b4 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUdh3157wp9fxIBUswocdBJ8OKvmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQxMTEyMjlaFw0yNjA3MDMxMTE3MjlaMDMxMTAvBgNV BAMTKDU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgH6BHFRa2DwUVfr7mkn1OnNI+ Ja4cr06c61i3WVf4HmHf/KuEcgO+asw+BvRa/vYTjl791hRWuX/Du8Ywqosq+G3O /bx+8EF6HQ5/5ezsZLsdlBE0KqQUIpJYj27K3FnouXaBd+Mzj+kR/KhLxTCIsc9U J1yJo+Cb+Sg0ociDXqli3r648ZeKRm+0GSKKKRjOjkczlTtpYkhjvRpjt2r8Da53 XGv0fNWTxxTT6NTLxbW65aBT4scuDtn7qgsE+NPYZzGwsFrbh+iAXDH1ObWUIl9k llEiyiWACDmW/yQPRacfz1JBTA/PrIhly0Eqoy86hfDuA1e4Qi0UQLbmExq5AgMB AAGjggLEMIICwDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVirjR44TBniZc PB9A5/M9lw9xIDAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCB2QYIKwYBBQUHAQsEgcwwgckwMwYI KwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzE3 LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0 ZW4vMTcvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5NzBGNzEyMC5t ZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jYy9ycmRwL25vdGlmaWNhdGlv bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq MCgwJgQCAAIwIAMGBCoHVMEAAwYAKgdUwTIDBgQqB1TBYAMGBCoHVMGAMA0GCSqG SIb3DQEBCwUAA4IBAQCS5XH5aVRmc+IvkKTbUYS/42JrMHmsWyX3nvRTJ3PWLMAE kVF7RlMxsiu+za/Aoa7ZjPxC2RS2ViXqYcebDAsUY+LLRt2x481hRfZJUss2e02a qmthrqkNZR0p3n7PdATreqO0ahqen4B4fN8YqQmQErVDOScc/TfexlvIBvZ3Z3Sv ENVVxJcBJ0OkS5MjMWU4mVFzI2FitC7WqQaP7lKl2KWSICTpRoR9gQopU0sFyR+/ WhGxfK7D3JucSeXFfgQnqLAGEyOjK0IIYHc0SShIUbMClmfCd72vZgDdQ+EOhsMj PuMGeu8ilDgP2dbPlZd25Nf+0pTSxVEuvkBv9Ae0 -----END CERTIFICATE-----Generated at Sat Jul 5 08:50:38 2025 by rpki-client