Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/34C97EEFF760B9E22E4FD6B171AD50F159D08067.cer
File:                     34C97EEFF760B9E22E4FD6B171AD50F159D08067.cer (raw, json)
Hash identifier:          VPFNv2xfg60jrOLqNkdUDbl0IsKnsPlH38hlHi+97bI=
Subject key identifier:   34:C9:7E:EF:F7:60:B9:E2:2E:4F:D6:B1:71:AD:50:F1:59:D0:80:67
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       505796F52B355621DC95507EE82779F7C10AF956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/5/34C97EEFF760B9E22E4FD6B171AD50F159D08067.mft
caRepository:             rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/5/
Notify URL:               https://rpki.pedjoeang.group/rrdp/notification.xml
Certificate not before:   Mon 06 Nov 2023 09:32:25 +0000
Certificate not after:    Mon 04 Nov 2024 09:37:25 +0000
Subordinate resources:    IP: 2a06:a005:d2d::/48
                          IP: 2a06:a005:1507::/48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:57:96:f5:2b:35:56:21:dc:95:50:7e:e8:27:79:f7:c1:0a:f9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  6 09:32:25 2023 GMT
            Not After : Nov  4 09:37:25 2024 GMT
        Subject: CN=34C97EEFF760B9E22E4FD6B171AD50F159D08067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:da:05:be:22:89:82:c0:d9:83:8d:7f:4c:
                    b7:5f:6c:28:e1:af:c9:91:d1:23:37:d0:08:a3:4a:
                    2e:12:df:f2:5a:61:2c:0c:10:9e:2a:3c:95:01:ba:
                    3c:51:06:b5:75:a9:d9:17:9f:7c:e7:94:b8:89:f0:
                    6f:44:ee:f5:07:17:e3:82:01:52:71:ca:5c:99:de:
                    c9:d5:f5:4d:ed:fe:05:5c:a6:30:6e:4a:d2:ab:4c:
                    65:e6:68:4a:b8:2b:39:2c:57:85:cf:2e:d6:33:09:
                    e4:8d:50:a6:ef:68:71:f6:db:d1:9b:10:17:0e:a3:
                    65:1f:03:54:1a:fc:3f:6e:7e:aa:3c:1d:c2:07:48:
                    99:36:97:5e:ea:cf:88:57:65:55:8f:39:ca:34:7e:
                    4f:4a:a8:8f:2e:da:83:bf:e8:49:ee:5b:8e:e4:0b:
                    3c:ed:e2:47:df:46:f5:f9:2d:4d:33:c9:37:82:32:
                    5f:95:ee:d6:20:be:2b:01:27:4b:e1:68:23:72:82:
                    7f:5b:6b:69:95:0a:eb:f1:b5:c0:40:d7:ae:dc:31:
                    a5:d4:b4:ca:34:bd:63:af:65:5d:03:83:31:86:c9:
                    72:11:ed:d9:ae:85:13:89:59:d4:51:08:3a:7d:54:
                    c3:b3:7f:37:b3:5c:38:19:70:84:4f:c8:52:a7:91:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:C9:7E:EF:F7:60:B9:E2:2E:4F:D6:B1:71:AD:50:F1:59:D0:80:67
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/5/
                RPKI Manifest - URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/5/34C97EEFF760B9E22E4FD6B171AD50F159D08067.mft
                RPKI Notify - URI:https://rpki.pedjoeang.group/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48
                  2a06:a005:1507::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:c1:51:0d:02:af:d3:ab:04:fc:3c:ed:aa:b4:c7:b1:7b:
         9b:c5:f2:75:d0:09:f7:97:74:29:3a:1c:2a:03:d3:b2:aa:a9:
         a9:5c:9e:5d:05:70:a0:b2:35:23:fc:08:4f:0e:50:30:0e:04:
         fd:76:70:27:4c:e2:69:c8:97:d1:e1:fc:e9:9f:e7:fd:b0:f3:
         45:ee:c1:4d:a3:00:65:a1:72:c0:78:b1:0b:90:57:57:50:df:
         8d:14:41:fe:7a:43:c8:2e:8d:0b:c3:fa:8a:03:62:40:41:e8:
         d9:a5:ff:89:a2:2d:0f:30:67:79:3c:b6:b8:01:12:75:8f:3e:
         7b:9c:d5:0c:7a:64:a6:84:79:76:3e:48:db:31:73:d2:ca:bb:
         28:12:ed:5f:a5:14:0f:8d:97:9f:1e:59:62:e1:35:7f:5b:3a:
         dd:80:c0:f2:27:40:8b:ea:2c:b1:38:01:23:4b:fc:18:ad:a4:
         8d:d2:59:2f:5c:de:ad:a0:06:e6:07:37:34:78:91:30:ca:3f:
         46:7e:e7:71:27:75:b1:da:d7:b3:60:2e:c1:be:50:2d:2f:8c:
         7d:e8:8a:6e:0e:9c:cc:da:fd:1d:d3:94:d9:1b:87:b9:86:2f:
         29:fc:29:53:e8:79:21:4a:a9:a9:d6:18:25:da:63:e4:f6:16:
         4f:3f:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org