Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
File:                     3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer (raw, json)
Hash identifier:          /g24tkoIvwx1YQCYmLXa5lzlUrpiNQ03TqZLMXQmQog=
Subject key identifier:   3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2DBF9CED5CF2350F2794025C1874385745B256AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
caRepository:             rsync://rpki.sn-p.io/repo/sn-p-io/0/
Notify URL:               https://rpki.sn-p.io/rrdp/notification.xml
Certificate not before:   Tue 14 May 2024 11:49:43 +0000
Certificate not after:    Tue 13 May 2025 11:54:43 +0000
Subordinate resources:    IP: 89.187.68.0/23
                          IP: 2a06:1282::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bf:9c:ed:5c:f2:35:0f:27:94:02:5c:18:74:38:57:45:b2:56:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May 14 11:49:43 2024 GMT
            Not After : May 13 11:54:43 2025 GMT
        Subject: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:1a:29:f7:e3:66:1e:d2:e3:4e:a1:33:9a:
                    2b:3e:10:28:9b:06:5d:bc:dd:3f:bc:44:71:8e:66:
                    dc:b4:70:b4:11:cb:55:10:7a:17:3b:55:27:5b:4e:
                    14:a5:fb:15:74:18:97:12:70:c4:34:37:dc:d5:01:
                    ca:f2:61:40:ba:0f:e9:5b:d7:08:d0:b6:50:06:4f:
                    9c:f5:ff:b1:6e:45:c6:a8:e9:70:38:92:24:9d:59:
                    dd:30:fa:c9:66:dc:ec:d4:c6:60:30:4b:d3:42:c1:
                    b7:2d:f9:4b:69:ce:77:c3:8d:18:27:7c:98:da:a9:
                    18:a1:bf:0d:7b:73:a0:5e:86:18:d9:a4:ad:86:75:
                    2a:e2:2f:84:02:e2:32:f9:3d:4d:5a:26:7a:9c:1c:
                    f9:48:28:4a:3b:bd:cb:3f:73:c9:69:52:45:c3:da:
                    a9:24:9d:17:53:f3:5c:c2:c7:01:bf:9e:81:d2:10:
                    6a:27:d9:c7:71:86:7b:5a:40:4a:7a:91:bc:9a:88:
                    72:e7:4b:c1:e8:13:54:a8:d1:c3:bd:bc:83:0c:21:
                    34:1c:28:58:70:ca:cb:51:f3:51:08:4f:c9:bb:d1:
                    a9:f9:44:ad:86:6a:4d:e9:b8:3d:1e:64:23:4b:6d:
                    43:f8:18:72:30:2e:82:c5:4e:28:1a:34:19:3d:15:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/
                RPKI Manifest - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
                RPKI Notify - URI:https://rpki.sn-p.io/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.187.68.0/23
                IPv6:
                  2a06:1282::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:82:93:75:7b:5a:f4:f4:a4:27:75:02:ce:9d:ce:36:d7:07:
         59:d5:c7:e1:6a:fc:05:cf:1f:3b:07:54:1c:4e:06:9a:57:1c:
         ff:94:f2:94:35:4d:55:30:fa:67:4c:0e:43:cc:36:eb:59:20:
         dd:60:96:24:fa:b1:59:0a:a7:d0:fb:d8:55:5e:65:50:9f:d9:
         e1:d7:cb:b3:90:eb:f0:1a:4e:15:90:1e:0c:0b:36:eb:c7:26:
         1d:33:a3:30:73:d6:4d:28:25:31:20:dd:b9:a5:09:de:69:ac:
         21:8e:88:24:9b:3b:fa:d3:4d:af:42:d2:22:cc:73:07:01:2c:
         d6:d7:de:7c:2a:a2:f6:13:c6:1d:e0:5a:3e:6f:67:ca:2d:99:
         2a:00:7a:28:96:10:4e:1b:40:63:6a:4a:ca:d4:5d:5d:fd:68:
         a1:9d:06:a7:72:66:6c:42:2a:35:b8:6d:51:34:8c:57:13:00:
         5a:c6:1b:5c:68:49:8b:a9:5b:09:e7:1d:0f:e6:31:6a:c6:f5:
         d1:a2:4c:79:b3:4a:dc:96:5d:42:2e:9a:10:6d:a7:7b:57:83:
         e1:d6:3a:6e:13:a2:8c:cb:23:8c:06:cd:47:98:01:3c:7c:16:
         e7:af:18:64:29:cd:f4:d5:a0:8e:f8:01:0e:83:ca:02:ea:31:
         64:bc:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:22:00 2024 by rpki-client on console-fra.rpki-client.org