Certificate

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.cer
File:                     83027A47466EFA0ED200A7CA6EE9CF229F431C1B.cer (raw, json)
Hash identifier:          WQvsmLEKqfbHrQEO+iV0pJ/m689HzCWOL5Ik+jKYGAA=
Subject key identifier:   83:02:7A:47:46:6E:FA:0E:D2:00:A7:CA:6E:E9:CF:22:9F:43:1C:1B
Authority key identifier: 99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26
Certificate issuer:       /CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26
Certificate serial:       32C21B4132709811EA137366D1784B34C29F9208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/q-test-ca/1/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Mon 12 Aug 2024 09:22:21 +0000
Certificate not after:    Mon 11 Aug 2025 09:27:21 +0000
Subordinate resources:    AS: 210561

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 13:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c2:1b:41:32:70:98:11:ea:13:73:66:d1:78:4b:34:c2:9f:92:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26
        Validity
            Not Before: Aug 12 09:22:21 2024 GMT
            Not After : Aug 11 09:27:21 2025 GMT
        Subject: CN=83027A47466EFA0ED200A7CA6EE9CF229F431C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:cd:0d:d8:52:7f:25:e5:a4:e1:cb:3a:a6:
                    61:9a:60:bc:2a:f4:65:a6:31:c3:4c:b4:10:bf:8a:
                    9b:52:3d:23:c7:3b:51:85:5d:16:f8:3a:ff:ff:52:
                    99:38:81:60:41:0a:8e:37:0b:bb:33:a0:f8:42:1a:
                    61:94:2a:f2:3d:56:78:71:86:e0:5b:9a:26:86:68:
                    22:3d:d0:e3:ef:eb:b8:a4:dc:e7:33:cf:d1:bd:30:
                    93:20:4f:49:fe:fe:bd:0d:90:e5:87:ff:92:d9:5d:
                    4a:cd:34:57:95:11:8a:8e:fd:bc:f4:c1:13:29:d1:
                    62:f1:7e:c8:94:5a:35:af:ba:36:e3:b5:e8:79:ca:
                    2a:65:ce:e5:a6:58:d5:c7:46:54:6f:4e:68:02:d2:
                    3a:65:e9:70:a9:9c:c6:78:04:a3:e4:0a:41:a4:52:
                    44:f9:e7:dc:7d:fc:b7:26:b5:ff:9b:ee:c8:2e:1f:
                    e5:f3:87:be:af:f7:56:6c:18:fb:78:79:03:fa:c6:
                    42:ba:d6:83:34:22:fa:3d:ba:b1:05:73:98:1c:92:
                    39:ab:0e:b1:42:2b:81:93:ad:fc:97:35:34:ae:0f:
                    9a:66:a5:d4:72:6c:c9:d6:72:bf:06:cf:4f:33:a5:
                    14:f9:9f:7a:9f:85:25:11:a5:51:61:1b:1c:ea:88:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:02:7A:47:46:6E:FA:0E:D2:00:A7:CA:6E:E9:CF:22:9F:43:1C:1B
            X509v3 Authority Key Identifier:
                keyid:99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/q-test-ca/1/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210561

    Signature Algorithm: sha256WithRSAEncryption
         b9:44:02:74:f1:e6:a2:a7:f6:0e:d2:15:45:4e:c5:13:c8:df:
         2d:ac:f5:19:68:77:23:4b:81:37:51:1c:15:d7:0a:20:1c:73:
         92:62:5f:77:ce:5e:1c:56:a4:ce:06:53:34:5c:b4:46:c3:6c:
         8a:0d:ac:d1:ce:8b:4f:3c:b6:af:1d:5f:83:8a:67:0f:27:da:
         82:4b:47:5c:a3:2e:86:fd:98:ff:a1:6d:a8:5f:04:c0:08:fa:
         2f:a2:ca:b7:f4:16:f5:65:8f:f8:1e:00:24:e7:17:82:e5:bf:
         eb:0e:84:23:c8:80:fa:37:3b:7c:c4:1f:2f:99:06:15:65:c3:
         40:d0:1a:42:af:c3:2d:7d:0c:93:ab:77:71:fe:d3:1e:9e:46:
         31:4e:d6:3e:2e:fb:ef:14:14:38:0a:50:3e:65:0a:0a:f7:cd:
         68:d9:55:73:26:db:71:79:c1:ac:37:b5:23:38:88:0e:7b:f8:
         be:ea:5f:ca:f7:24:ca:e9:e3:2a:6e:05:39:e1:dc:45:de:fb:
         c9:6c:09:0e:e1:ff:dd:e6:b6:40:79:02:24:ea:ce:3e:b9:88:
         35:6d:76:09:b9:1b:fd:cb:54:ae:51:3d:c8:46:52:e6:41:48:
         80:49:a1:8b:cd:c4:67:e4:c0:11:63:f7:fe:0f:e9:fc:69:4b:
         2a:36:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 16:39:35 2024 by rpki-client on console-ams.rpki-client.org