Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.cer
File:                     D90A2CAF3A5960F41FF092B680098C21E44AF2F1.cer (raw, json)
Hash identifier:          aXiGnnaMBrgG7tv3oegS0q5NXdluUQqa9vwMrbs6fmM=
Subject key identifier:   D9:0A:2C:AF:3A:59:60:F4:1F:F0:92:B6:80:09:8C:21:E4:4A:F2:F1
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       2B06702A72BFD7CBCD6142E7F921FFEE9EE41F71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Manifest:                 rsync://rpki.cc/repo/MythicalKitten/5/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.mft
caRepository:             rsync://rpki.cc/repo/MythicalKitten/5/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 09:40:13 +0000
Certificate not after:    Sun 06 Apr 2025 09:45:13 +0000
Subordinate resources:    IP: 2602:fac2:6::/48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:06:70:2a:72:bf:d7:cb:cd:61:42:e7:f9:21:ff:ee:9e:e4:1f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Apr  7 09:40:13 2024 GMT
            Not After : Apr  6 09:45:13 2025 GMT
        Subject: CN=D90A2CAF3A5960F41FF092B680098C21E44AF2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:24:c3:bf:62:6d:2d:ea:56:82:3d:47:11:
                    82:b3:ff:73:42:11:b7:d5:08:49:97:c2:32:84:1a:
                    8e:ce:97:80:30:0c:0a:7a:01:be:68:e3:1a:89:cb:
                    e8:eb:3a:51:c5:a5:a6:30:3e:cb:de:33:bb:bc:60:
                    1f:81:36:72:84:da:99:56:b3:09:dd:e9:6c:01:0c:
                    45:bf:37:50:07:c0:03:37:08:f8:97:5a:43:aa:5d:
                    c5:3a:02:81:15:c7:91:ca:2c:e0:85:97:89:00:ef:
                    8c:9d:b2:b0:94:ed:36:9a:f5:33:92:10:27:c2:9f:
                    a8:9f:f7:eb:45:82:bb:77:5f:fd:a2:f7:9a:d7:25:
                    8d:92:14:7f:ac:30:3c:03:13:0a:55:1b:ea:ef:ee:
                    ad:5c:42:f9:26:52:ed:40:27:03:dc:05:ff:05:55:
                    8c:77:b3:7b:79:37:5b:a6:a6:84:14:7d:cd:a8:7f:
                    5d:f6:e6:7e:fa:22:1d:6c:eb:c7:a6:bd:8b:df:ba:
                    1d:b0:89:d0:92:d4:04:89:39:5d:4b:f9:69:53:d5:
                    e1:c6:fc:eb:7a:97:07:48:f4:52:c1:30:f1:28:a7:
                    0a:7a:55:50:62:1e:8a:ee:e6:84:ae:f4:31:c4:6c:
                    cf:2c:b3:e5:c8:c5:d5:a4:43:0e:48:73:76:3b:51:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:0A:2C:AF:3A:59:60:F4:1F:F0:92:B6:80:09:8C:21:E4:4A:F2:F1
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/5/
                RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/5/D90A2CAF3A5960F41FF092B680098C21E44AF2F1.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:73:c9:50:87:e0:75:a2:19:16:02:a9:ca:9b:b5:90:ef:2c:
         7d:c2:67:00:6c:6e:68:95:3b:5f:3f:26:ee:a8:69:a7:d8:21:
         a2:0a:57:ba:4b:f0:a8:1b:f1:3f:30:10:d0:f8:8b:6c:80:80:
         98:fd:f2:28:41:d2:62:be:54:22:c5:b7:b0:52:d3:57:30:a3:
         75:52:83:53:29:39:8d:8d:c1:68:53:fb:91:35:08:10:7c:7c:
         32:4a:5e:ff:6c:01:ae:33:0e:a5:2d:db:05:a0:40:c0:26:82:
         ad:87:d0:8b:3e:53:89:d4:53:f4:d5:26:13:19:30:1a:36:ed:
         b2:f1:5d:6c:7a:8f:c7:37:a5:fc:13:31:72:d0:67:3c:1b:92:
         5f:b7:05:e1:d8:cc:10:b8:5c:d8:a8:1d:2d:73:60:fa:9e:3a:
         f1:c9:e7:10:26:a4:75:67:12:e2:d3:79:f7:36:c2:60:b0:56:
         89:5e:d3:92:fe:95:cf:4c:b1:1c:43:7b:b4:30:88:55:ea:c2:
         cf:8a:47:25:6c:60:23:b9:09:ad:c4:6d:60:16:60:2c:11:af:
         73:11:96:cf:6e:fd:35:00:1b:65:6b:f0:87:ad:be:b5:d6:f3:
         b9:15:b5:f5:f1:2f:7b:d2:d9:cc:4c:c0:dd:39:c6:bf:f2:44:
         8d:ef:d1:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org