Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
File:                     75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer (raw, json)
Hash identifier:          5lYyemoNTlsS9729jwLAwnZ+Fps0J043APcxPidbv8A=
Subject key identifier:   75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       47F60ED2EC1FE7B0D15CE3B652D1FCCB6AD432EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 02 Sep 2024 09:02:44 +0000
Certificate not after:    Mon 01 Sep 2025 09:07:44 +0000
Subordinate resources:    IP: 83.142.31.0/24
                          IP: 2a06:9f41::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:0e:d2:ec:1f:e7:b0:d1:5c:e3:b6:52:d1:fc:cb:6a:d4:32:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep  2 09:02:44 2024 GMT
            Not After : Sep  1 09:07:44 2025 GMT
        Subject: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b7:ff:14:cb:4f:d2:f0:60:b1:7c:8c:6c:e9:
                    45:ff:68:9a:17:63:af:a5:bb:83:f5:c3:39:12:01:
                    3e:cc:23:81:62:f1:29:e8:0d:e8:dc:e4:31:1a:73:
                    10:ba:0b:6d:40:cf:61:b9:32:2d:e5:5a:2d:48:1d:
                    ed:8a:cc:59:ff:be:47:b0:2f:78:35:82:cc:68:62:
                    e8:89:de:66:10:f4:a0:09:0e:3f:97:55:ff:67:03:
                    f1:93:5e:2c:cd:d3:2a:6d:ea:a3:9d:85:90:d7:1b:
                    32:66:5d:e5:80:4f:ba:be:1c:41:81:67:8c:fc:27:
                    e9:5c:bb:20:bf:6e:40:fa:46:e6:0d:75:1b:2b:81:
                    35:27:c0:66:c2:cf:9e:7b:c3:c5:5a:1c:69:58:bb:
                    1d:30:b1:5e:39:90:8a:56:e8:30:b7:20:15:62:d1:
                    ca:d4:d2:25:45:38:9f:95:b6:37:d5:6f:22:fd:bd:
                    68:76:43:28:7a:dc:64:0f:d2:c8:9d:47:09:a8:c4:
                    dd:18:36:af:7f:a8:22:54:35:68:8b:61:35:e6:cd:
                    ea:c1:83:10:6d:62:ff:ba:34:d4:0a:f3:9f:1d:cd:
                    30:a5:64:0e:e1:c9:22:f3:33:56:59:6c:28:bb:84:
                    fd:4e:84:27:dd:b6:9c:40:e3:85:82:5a:15:95:bd:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.31.0/24
                IPv6:
                  2a06:9f41::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:2a:a6:d8:33:74:9b:66:f7:23:93:7e:f3:79:2d:83:7e:70:
         fc:bd:7e:b8:c0:e8:07:77:fa:85:51:f7:45:79:b5:c4:f7:13:
         60:9f:44:a3:a0:09:33:d7:84:89:6d:a7:04:56:96:dd:28:1a:
         55:30:71:af:14:75:1f:c6:17:5e:3c:8e:4c:41:4f:1d:54:18:
         48:15:36:21:92:de:c3:59:06:6e:03:e0:0d:bf:0b:5d:1a:bf:
         62:63:d2:d9:98:7e:3f:68:d8:bf:e3:6a:35:24:59:6d:95:8b:
         15:56:35:9f:09:e8:5c:e7:a3:ba:73:c8:81:b8:7d:07:0f:32:
         35:1a:58:33:19:38:2a:44:b1:cc:34:c3:fd:4f:ba:32:3b:79:
         53:07:80:8d:9c:a1:35:8d:87:a3:79:01:48:54:bd:22:15:47:
         b7:ec:61:88:7a:1f:6c:db:5b:7b:1b:43:20:6d:34:a0:4d:2d:
         c4:b4:f7:80:e8:f4:db:21:9e:8d:4c:66:d7:6f:f6:bd:8e:4c:
         a7:ce:47:f4:4e:bc:ab:9c:07:c6:a8:15:2b:bc:2d:b6:da:e0:
         5c:7c:98:1c:c4:d7:bc:45:21:54:d9:d5:83:d5:cd:48:8f:77:
         a5:44:59:00:87:b4:82:97:c4:cc:84:ab:d2:e9:5e:d4:aa:a5:
         c1:89:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:52 2024 by rpki-client on console-ams.rpki-client.org