Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
File:                     AEF766F103B2EF99DF8C71978A7FE519D730B155.cer (raw, json)
Hash identifier:          ECrd+Lo7W5orkN9bVkIouxpSqLO3RkGmgRGAS/CH/pI=
Subject key identifier:   AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       79C3445BC09714867CAB557BCAAB75E34451DEAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 10:42:28 +0000
Certificate not after:    Wed 14 Aug 2024 10:47:28 +0000
Subordinate resources:    IP: 2.56.254.0/24
                          IP: 2.59.148.0/23

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:44:5b:c0:97:14:86:7c:ab:55:7b:ca:ab:75:e3:44:51:de:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Aug 16 10:42:28 2023 GMT
            Not After : Aug 14 10:47:28 2024 GMT
        Subject: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:33:5b:a9:b8:66:f7:91:68:b6:40:40:a0:
                    6a:b1:84:0d:bd:f7:16:e5:76:87:2e:73:ea:f0:53:
                    90:be:0f:a4:7c:8b:22:15:b9:18:86:ec:26:2d:0c:
                    17:2f:77:3a:37:fd:09:60:43:97:c6:f4:18:12:66:
                    52:a1:9e:aa:3e:09:2a:22:c4:13:94:1c:97:3e:00:
                    32:1e:cd:38:f3:8f:3f:01:cf:81:b2:46:0b:cf:28:
                    2a:45:ee:32:de:3f:aa:3e:36:2a:43:bc:d0:d9:f8:
                    d2:b4:75:22:45:29:25:01:d5:83:86:af:6a:08:e4:
                    b4:eb:90:81:73:9c:b7:07:f4:bf:2b:d4:f7:17:61:
                    ae:b7:dc:f4:7d:05:3f:6f:0d:f0:9f:bd:93:30:47:
                    c7:92:c7:10:c4:13:6e:07:bd:d0:6b:d4:92:cd:a2:
                    61:17:83:64:74:a1:5a:16:4b:2f:21:da:28:1a:ae:
                    b5:08:de:a4:8d:61:f6:69:7f:14:ba:81:79:25:12:
                    20:b8:fb:2a:6a:19:34:96:8d:9a:4a:4e:18:55:9a:
                    6a:a7:91:e9:9b:ea:db:e1:81:3f:09:86:81:fe:42:
                    ab:1b:f8:ad:d6:d2:b1:ec:ff:db:94:63:01:23:fe:
                    84:70:4a:d0:bf:1e:bb:54:84:f0:fc:b6:b6:ff:2b:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.254.0/24
                  2.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:94:32:6a:7e:7a:f8:38:78:e3:ac:a6:48:da:4a:f1:a6:
         d4:b9:d7:00:e4:88:a4:a1:93:a4:2b:c7:31:2d:09:5d:a4:d9:
         8a:fb:a0:93:e1:9c:ea:d5:a9:5c:17:c5:01:d9:db:74:20:06:
         0d:8a:66:75:e3:df:f3:18:64:37:7e:7d:a5:64:cb:0c:a7:57:
         16:38:a5:a0:0b:dc:bb:eb:a7:81:e5:9a:16:ce:9c:1f:17:2f:
         49:cd:47:6a:35:ec:bc:14:21:a5:d1:df:56:6f:f8:91:25:9e:
         2c:58:b4:3c:ee:50:9f:ea:e1:75:e9:64:44:a6:15:10:9b:7f:
         c9:2d:68:12:d5:41:6e:80:a6:0d:ac:51:3f:c4:45:ff:4b:95:
         02:40:79:37:35:7c:f1:42:c6:aa:11:ec:00:04:0b:a0:44:24:
         01:17:6d:ad:bf:a7:4b:a0:c4:77:d5:5e:72:c8:6b:ee:dc:fa:
         cf:ad:11:5e:0b:51:22:79:f2:6e:e5:4a:d6:d1:05:42:2f:ad:
         fe:57:91:a1:08:56:68:09:f6:64:e4:9a:e5:09:52:0c:51:4d:
         82:30:58:32:b9:58:45:b6:2a:48:1c:55:04:c7:3b:24:ac:27:
         7e:4d:f7:23:d0:c0:fa:12:f2:23:02:bc:ff:44:2c:45:e0:89:
         27:ba:46:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 20 14:35:48 2024 by rpki-client on console-fra.rpki-client.org