Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
File:                     7A7ECB46F513D542514E077E26624E43153E7F2C.cer (raw, json)
Hash identifier:          ciyihhwHcrJZJOi14iSMkG+oo4BQs91WWMtB2ljsXrA=
Subject key identifier:   7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6C0F7913A5D92A77D9D97C471755BE60CCEB797A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
caRepository:             rsync://repo.rpki.space/repo/Infiniroute/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Tue 28 May 2024 09:17:29 +0000
Certificate not after:    Tue 27 May 2025 09:22:29 +0000
Subordinate resources:    IP: 2a0b:9e40::/29
                          IP: 2a0f:6280::/29

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:79:13:a5:d9:2a:77:d9:d9:7c:47:17:55:be:60:cc:eb:79:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May 28 09:17:29 2024 GMT
            Not After : May 27 09:22:29 2025 GMT
        Subject: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:17:d5:69:5a:e6:54:b7:33:0d:1a:af:66:
                    1a:f7:06:a8:ce:65:ba:b3:4e:bb:d0:8f:d2:9a:51:
                    e5:fb:7a:75:de:4a:e9:ce:ce:4e:15:84:e7:e0:5b:
                    c1:a4:34:3e:2e:15:90:b7:cd:c5:43:dc:4b:68:9e:
                    3e:c6:1a:2d:91:bb:f2:63:ca:33:c3:25:fa:6b:01:
                    fa:d2:a5:0f:2e:db:5c:d2:f5:73:e9:c1:40:3b:96:
                    36:bd:fd:75:7c:19:18:e7:19:2c:51:d9:c2:52:ad:
                    3b:63:55:62:d8:61:1c:30:ec:b3:4e:3d:03:3f:ef:
                    50:fa:2f:e5:34:ab:d8:38:58:1e:15:e7:d5:8a:7b:
                    ae:3c:fa:dd:5a:3b:31:4a:33:1c:c3:0e:1c:b0:fa:
                    13:e5:0a:57:e0:0c:66:eb:8c:b9:41:52:d7:06:e6:
                    02:cb:c7:5f:40:0a:4c:29:a9:df:84:d6:63:e9:fa:
                    40:9b:c2:07:b0:b2:c0:d8:cf:4b:99:2c:e3:c2:5a:
                    7b:e9:62:c8:2d:fc:13:e4:c8:2a:fe:69:f4:d7:d8:
                    72:61:f2:7b:69:c0:54:3f:96:2e:62:e9:88:9f:a7:
                    20:bf:ba:aa:2f:9b:05:5a:2c:ee:e9:8d:a2:ba:4e:
                    70:7a:f8:b9:df:33:a2:0b:85:b0:1b:3f:80:ab:00:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/Infiniroute/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e40::/29
                  2a0f:6280::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:46:e6:6c:08:a4:bf:ff:80:eb:ae:2a:3d:97:4a:f7:b9:22:
         80:ca:87:0d:89:5c:49:25:3c:21:6e:c9:29:54:9c:1b:88:ef:
         32:b5:6a:00:b2:9e:4a:b6:65:a4:d1:3d:bf:f8:b3:08:40:bf:
         73:6d:d8:2a:46:3e:db:76:f8:ae:d0:35:12:ae:cd:b7:1c:86:
         b9:15:af:95:7f:95:4a:fa:5c:cc:ad:e1:5a:04:61:8c:4b:11:
         4d:98:01:cc:1c:e3:e8:af:a4:58:5d:f4:3c:95:ca:55:cb:91:
         5a:29:55:62:4f:df:3d:9d:f2:d1:c5:cf:1a:78:5a:39:f9:f2:
         83:3b:09:2a:a0:61:0c:50:a9:97:13:db:a1:a9:80:c9:17:5c:
         8d:65:6a:d8:ba:d8:18:78:e8:d6:1f:3c:3e:59:57:e9:f2:2e:
         92:b0:10:31:a9:76:b8:53:85:69:f4:19:73:79:4d:b0:7d:ab:
         5f:7e:b3:18:36:85:30:13:24:40:b1:88:e2:0c:86:c4:1d:7b:
         a1:27:27:40:1f:a5:b7:3e:ce:8e:90:45:e1:66:60:24:f6:43:
         19:a1:fc:d4:46:9a:32:dc:e9:c6:35:9b:05:1d:b3:77:f8:3e:
         2c:46:16:84:08:40:8e:ea:ae:aa:f4:c8:6c:1c:9e:6d:97:99:
         9d:d1:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:40:20 2024 by rpki-client on console-fra.rpki-client.org