Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
File:                     0AAD221E4070989D4939FACA0F0981AB26E93895.cer (raw, json)
Hash identifier:          pFlG8c/is5RhyeBB+yMEBPRelk4sfnqSIQlKLmZLe7k=
Subject key identifier:   0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       46E5B9528ABB76850AB2FAB9DC992AF83BCA94AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Fri 28 Jun 2024 00:09:33 +0000
Certificate not after:    Fri 27 Jun 2025 00:14:33 +0000
Subordinate resources:    IP: 2a05:dfc4::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:b9:52:8a:bb:76:85:0a:b2:fa:b9:dc:99:2a:f8:3b:ca:94:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun 28 00:09:33 2024 GMT
            Not After : Jun 27 00:14:33 2025 GMT
        Subject: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:44:14:41:09:d5:8e:4d:a7:c9:3f:70:e8:
                    1c:e2:ba:07:bb:47:8c:11:5d:2a:7b:0e:a0:bf:bb:
                    8c:52:e4:ac:38:84:c6:0a:9c:72:11:d7:6a:c4:8d:
                    52:c7:aa:e1:12:27:16:a3:15:d8:28:90:c3:a5:9f:
                    4b:ce:b8:77:85:58:ac:33:46:f6:92:ee:f8:9e:ab:
                    31:fc:71:8f:d4:13:14:4d:ec:77:20:71:d4:61:4b:
                    0f:f9:31:d5:28:02:66:49:78:67:92:10:f9:19:91:
                    27:d2:d4:d8:e5:45:e4:74:8f:49:d9:ac:ac:04:0d:
                    c0:f3:1a:6c:2c:29:89:a7:a6:36:63:d6:8d:f5:77:
                    56:28:dd:b8:af:a7:67:74:1f:29:7d:f4:4e:c5:55:
                    bf:3a:3f:11:98:c8:96:8e:9e:16:3f:68:af:2e:0c:
                    ff:2a:95:12:43:45:06:6c:37:e6:3e:51:37:9a:0b:
                    01:39:71:7a:09:57:0d:70:c8:7b:a6:59:2f:77:eb:
                    23:70:c0:86:85:5f:9a:32:c2:77:3d:16:b9:30:89:
                    77:1f:b5:f5:24:8a:97:51:21:75:b4:c0:f2:fa:ef:
                    ea:a1:4c:f7:31:bf:10:ef:63:96:37:eb:fb:5c:b2:
                    fc:60:92:76:ea:c2:9f:ee:73:e7:cf:9b:bc:2a:ac:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:9b:45:64:21:9a:f4:b3:d9:04:c5:75:2a:74:d6:84:c1:
         51:23:0d:e6:04:a2:b4:f6:f1:17:7f:34:b7:6c:73:b1:17:88:
         4d:79:54:4d:3b:29:ed:16:49:30:c6:64:d3:5a:14:8b:4a:3c:
         72:97:85:d3:59:59:95:a0:c9:13:7c:44:c9:f2:7f:67:49:4d:
         7c:94:8b:01:ba:16:05:f0:e0:b8:d3:22:2a:12:13:69:bf:35:
         b8:1e:50:5d:36:6f:5b:7b:1f:36:73:93:a6:54:82:f2:14:75:
         ab:68:64:43:58:1e:d5:0e:25:d0:9e:1f:db:bb:d6:1d:2e:f5:
         92:a5:63:66:53:be:19:3c:00:33:54:56:b4:06:1c:60:01:23:
         12:09:1e:78:65:d9:5a:ff:41:30:1d:d2:0b:ee:63:65:47:e0:
         11:47:64:75:ec:88:11:74:c8:ec:43:72:73:8a:b8:6f:d4:2f:
         b5:c0:4d:60:35:0b:fe:10:36:d3:07:be:db:dc:16:3e:4e:4b:
         08:9a:5e:a4:37:ed:b8:9a:49:a2:2c:ec:10:f4:66:e0:4a:de:
         5c:a4:51:c8:ca:26:68:d1:e8:af:fe:85:fc:f6:10:e0:4b:0b:
         11:74:e9:1a:13:ca:81:1b:1e:40:43:fc:c6:61:11:d2:50:0d:
         b1:dd:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:42 2024 by rpki-client on console-fra.rpki-client.org