Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
File:                     7A7ECB46F513D542514E077E26624E43153E7F2C.cer (raw, json)
Hash identifier:          Gxl4w7pmMBdKk9MZ0rzcMH26kQjDT+Ll/ycNsXXr9qQ=
Subject key identifier:   7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2A889D3589F060D949F36FEB9BC73E23FCCC89CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
caRepository:             rsync://repo.rpki.space/repo/Infiniroute/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 19:55:00 +0000
Certificate not after:    Tue 29 Jul 2025 20:00:00 +0000
Subordinate resources:    IP: 2a0f:6280::/29
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 11:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:88:9d:35:89:f0:60:d9:49:f3:6f:eb:9b:c7:3e:23:fc:cc:89:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jul 30 19:55:00 2024 GMT
            Not After : Jul 29 20:00:00 2025 GMT
        Subject: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:17:d5:69:5a:e6:54:b7:33:0d:1a:af:66:
                    1a:f7:06:a8:ce:65:ba:b3:4e:bb:d0:8f:d2:9a:51:
                    e5:fb:7a:75:de:4a:e9:ce:ce:4e:15:84:e7:e0:5b:
                    c1:a4:34:3e:2e:15:90:b7:cd:c5:43:dc:4b:68:9e:
                    3e:c6:1a:2d:91:bb:f2:63:ca:33:c3:25:fa:6b:01:
                    fa:d2:a5:0f:2e:db:5c:d2:f5:73:e9:c1:40:3b:96:
                    36:bd:fd:75:7c:19:18:e7:19:2c:51:d9:c2:52:ad:
                    3b:63:55:62:d8:61:1c:30:ec:b3:4e:3d:03:3f:ef:
                    50:fa:2f:e5:34:ab:d8:38:58:1e:15:e7:d5:8a:7b:
                    ae:3c:fa:dd:5a:3b:31:4a:33:1c:c3:0e:1c:b0:fa:
                    13:e5:0a:57:e0:0c:66:eb:8c:b9:41:52:d7:06:e6:
                    02:cb:c7:5f:40:0a:4c:29:a9:df:84:d6:63:e9:fa:
                    40:9b:c2:07:b0:b2:c0:d8:cf:4b:99:2c:e3:c2:5a:
                    7b:e9:62:c8:2d:fc:13:e4:c8:2a:fe:69:f4:d7:d8:
                    72:61:f2:7b:69:c0:54:3f:96:2e:62:e9:88:9f:a7:
                    20:bf:ba:aa:2f:9b:05:5a:2c:ee:e9:8d:a2:ba:4e:
                    70:7a:f8:b9:df:33:a2:0b:85:b0:1b:3f:80:ab:00:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/Infiniroute/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280::/29

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:ea:e5:b3:ee:7b:ae:9c:20:d8:b3:73:69:2b:ad:f8:e5:
         19:86:75:a8:99:11:72:d2:1b:72:5d:30:61:0f:87:1f:fe:71:
         ea:f6:b0:fe:46:67:ec:4b:03:6d:57:51:6f:7f:04:fc:dd:50:
         a6:68:06:f9:1d:00:74:28:c8:70:b6:ad:33:b2:ae:d1:de:f7:
         11:65:88:d2:14:04:51:00:dc:b5:d4:a5:70:19:df:d2:06:bb:
         19:ec:c6:7e:50:f0:cc:41:be:3b:aa:6b:52:a5:92:5f:2a:52:
         ab:d5:c0:ec:39:8f:bd:da:eb:08:74:14:ba:d4:bf:23:79:a7:
         fe:fd:69:dd:a4:fb:14:18:61:b5:24:69:0f:0c:58:4b:f1:92:
         c2:c2:ef:f3:fd:69:c4:ac:7b:c3:a0:c3:c7:a1:c3:4d:2b:a6:
         ae:15:68:52:e0:cb:f5:64:ea:e5:56:f6:4b:97:18:b8:1c:6a:
         35:7e:7f:bc:f5:5c:2e:d1:43:19:36:35:3a:94:76:b0:f4:1e:
         8a:4b:b0:df:2f:e0:79:10:c2:48:f6:d4:1f:47:bd:d7:63:08:
         5b:43:60:42:ba:02:d7:36:c4:1a:0c:ef:c2:73:24:ee:7e:6b:
         c5:db:b1:45:f4:9e:05:56:4c:9f:8b:f8:8b:4c:ee:b1:f3:b4:
         74:6a:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:31 2025 by rpki-client