Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
File:                     0AAD221E4070989D4939FACA0F0981AB26E93895.cer (raw, json)
Hash identifier:          GEqsQfP25+JHbRhYbG2D7F+sEfMLADa49mp2bVqEIxY=
Subject key identifier:   0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4F68E5A47805D1D1D4F34A3A797554E100822D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 09:38:12 +0000
Certificate not after:    Wed 02 Apr 2025 09:43:12 +0000
Subordinate resources:    IP: 185.195.238.0/24
                          IP: 195.184.246.0/24
                          IP: 2a05:dfc4::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 17:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:68:e5:a4:78:05:d1:d1:d4:f3:4a:3a:79:75:54:e1:00:82:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr  3 09:38:12 2024 GMT
            Not After : Apr  2 09:43:12 2025 GMT
        Subject: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:44:14:41:09:d5:8e:4d:a7:c9:3f:70:e8:
                    1c:e2:ba:07:bb:47:8c:11:5d:2a:7b:0e:a0:bf:bb:
                    8c:52:e4:ac:38:84:c6:0a:9c:72:11:d7:6a:c4:8d:
                    52:c7:aa:e1:12:27:16:a3:15:d8:28:90:c3:a5:9f:
                    4b:ce:b8:77:85:58:ac:33:46:f6:92:ee:f8:9e:ab:
                    31:fc:71:8f:d4:13:14:4d:ec:77:20:71:d4:61:4b:
                    0f:f9:31:d5:28:02:66:49:78:67:92:10:f9:19:91:
                    27:d2:d4:d8:e5:45:e4:74:8f:49:d9:ac:ac:04:0d:
                    c0:f3:1a:6c:2c:29:89:a7:a6:36:63:d6:8d:f5:77:
                    56:28:dd:b8:af:a7:67:74:1f:29:7d:f4:4e:c5:55:
                    bf:3a:3f:11:98:c8:96:8e:9e:16:3f:68:af:2e:0c:
                    ff:2a:95:12:43:45:06:6c:37:e6:3e:51:37:9a:0b:
                    01:39:71:7a:09:57:0d:70:c8:7b:a6:59:2f:77:eb:
                    23:70:c0:86:85:5f:9a:32:c2:77:3d:16:b9:30:89:
                    77:1f:b5:f5:24:8a:97:51:21:75:b4:c0:f2:fa:ef:
                    ea:a1:4c:f7:31:bf:10:ef:63:96:37:eb:fb:5c:b2:
                    fc:60:92:76:ea:c2:9f:ee:73:e7:cf:9b:bc:2a:ac:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.238.0/24
                  195.184.246.0/24
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:09:38:2c:df:c0:23:4f:1d:da:7b:bf:0b:d2:7d:e7:dd:52:
         1b:6a:57:dc:e1:5b:be:c8:79:8d:85:20:18:e0:ab:67:74:33:
         f3:a6:fa:4c:80:16:af:52:f8:fa:3d:3b:3a:41:20:56:28:fb:
         1e:0f:4b:6f:72:e3:31:8b:41:4f:8b:10:c4:58:51:30:ed:8c:
         09:e0:64:f5:d7:b6:88:e7:2a:ef:df:c4:7e:3a:33:14:a5:9f:
         49:8a:a4:14:7c:8a:14:e9:12:12:58:59:12:a5:cc:46:c8:9c:
         5e:ba:4c:56:46:62:10:67:f9:d8:01:b5:13:74:49:76:ef:3b:
         8f:99:8a:ea:9e:72:4a:7e:e4:a5:d2:cb:52:f1:03:50:5a:61:
         c7:9c:c0:ca:75:83:0b:f7:40:ac:f7:77:04:74:c0:de:f3:49:
         eb:3b:d3:a5:a0:06:0f:c0:75:f7:43:b9:cd:54:a8:3e:71:7c:
         c1:4f:01:ce:2a:88:09:59:7d:1f:8c:8e:39:38:86:3a:0b:b0:
         75:4f:83:54:f1:d9:b0:06:31:a3:32:bd:69:a7:54:a6:b8:45:
         57:da:4e:35:e2:10:25:e5:f4:77:5c:cd:b5:ca:27:c5:fe:ff:
         f8:b0:73:6b:5a:58:f4:fe:7a:a3:17:48:24:77:6c:30:7e:b8:
         1c:34:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:35:09 2024 by rpki-client on console-ams.rpki-client.org