Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0C3177E3D69C2E575BA929C25CA552115583F707.cer
File:                     0C3177E3D69C2E575BA929C25CA552115583F707.cer (raw, json)
Hash identifier:          4MP0OUmWWRje1r37tBYCAW/Mka6ILlkt7CkXUb93+Wg=
Subject key identifier:   0C:31:77:E3:D6:9C:2E:57:5B:A9:29:C2:5C:A5:52:11:55:83:F7:07
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       33DA932AC12D769B7691ACC12D6F3F1EC3E9A53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/0C3177E3D69C2E575BA929C25CA552115583F707.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 21:40:24 +0000
Certificate not after:    Tue 11 Feb 2025 21:45:24 +0000
Subordinate resources:    IP: 94.24.108.0/24
                          IP: 2a06:a003::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:da:93:2a:c1:2d:76:9b:76:91:ac:c1:2d:6f:3f:1e:c3:e9:a5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 13 21:40:24 2024 GMT
            Not After : Feb 11 21:45:24 2025 GMT
        Subject: CN=0C3177E3D69C2E575BA929C25CA552115583F707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:1f:59:dc:16:e4:e6:a6:b7:8a:9b:ca:c5:
                    7e:9b:7f:e1:80:b2:b1:39:3d:c3:5b:80:5b:80:19:
                    63:f9:a8:91:e9:51:f8:30:c2:af:fa:40:26:57:2a:
                    c6:3e:5d:96:76:99:a4:da:53:74:75:e9:a1:09:87:
                    a8:b0:fb:16:cf:2c:97:4e:cb:a2:c1:7b:d7:b8:fd:
                    24:e7:9a:18:0d:80:79:20:15:aa:09:3b:18:15:99:
                    24:e0:fd:51:f5:15:85:7e:f1:cf:5d:3d:9b:4d:b8:
                    91:e4:38:21:f1:56:e4:03:0f:4d:ce:9d:b0:c0:82:
                    17:13:f3:27:64:0e:8e:18:7b:ca:85:bc:40:8e:b4:
                    df:5d:dd:7d:cf:a4:14:6a:8f:96:47:de:f8:a1:81:
                    3b:40:21:1a:b2:75:57:79:d7:6f:5d:42:a9:f9:a0:
                    1b:49:dd:1e:f7:09:c8:0a:4d:9c:be:c0:a2:dd:cd:
                    da:d6:92:a3:b0:b6:e4:61:8e:b2:4f:26:ce:a1:eb:
                    7a:5a:48:0e:0f:b2:d2:45:e7:2d:1c:a3:02:77:70:
                    8f:1f:38:fc:fe:8a:7c:26:57:0e:48:9e:72:e9:ee:
                    a4:41:7a:4a:53:05:9a:dd:c6:07:76:6d:ec:9d:1e:
                    e5:98:9f:11:89:0a:09:a5:14:9d:d0:6f:00:4b:a0:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:31:77:E3:D6:9C:2E:57:5B:A9:29:C2:5C:A5:52:11:55:83:F7:07
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/0C3177E3D69C2E575BA929C25CA552115583F707.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.24.108.0/24
                IPv6:
                  2a06:a003::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:69:a1:89:25:e0:02:ab:0b:66:c2:b4:b8:22:1e:0e:f4:4b:
         a1:d4:34:be:93:b0:2e:29:9a:9f:ce:6a:ab:8b:bf:14:b2:4c:
         38:14:50:0f:fc:39:fc:58:06:2b:ab:bc:39:00:ce:e6:32:df:
         11:b4:e3:a1:cd:2d:43:07:ab:b0:cf:53:01:16:95:c0:17:2f:
         15:88:f4:a9:fa:be:8a:be:b2:5a:6e:5a:a6:3a:43:76:b0:77:
         a1:ca:d4:c9:b1:84:c2:14:c8:62:0e:9b:6c:d2:80:56:2a:54:
         1c:6e:71:7f:54:2c:40:31:6b:4f:0d:a7:13:6e:c3:f7:29:03:
         a1:fe:d6:2b:de:d5:3d:01:50:c6:b7:db:42:27:b9:43:28:4c:
         f4:2e:29:0c:3d:36:1f:d1:0f:44:69:85:fc:26:9e:97:94:cd:
         b7:c9:26:d4:42:8e:b6:80:4d:7d:29:da:ff:e2:fe:f3:53:33:
         1d:09:e4:be:49:57:be:6c:d5:57:a1:b2:91:80:47:82:5b:45:
         7d:8f:48:76:e2:3b:9d:83:a5:7c:12:24:90:cb:0c:2d:54:64:
         d7:51:ec:de:99:a1:e0:f3:82:d8:53:84:67:5b:1f:d5:10:1e:
         cb:ad:97:6e:36:8e:05:1b:78:00:16:ec:ce:4e:73:54:35:60:
         e2:5d:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org