Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
File:                     847138B5401830B89B52403C777718BB40B2B6B5.cer (raw, json)
Hash identifier:          eOnzQDdTzflqWWUvNIYsfqo5RHNc154rBIGgvb48ngY=
Subject key identifier:   84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       34585A7A77EDCCCE7908CCBBC070C9707AEA3234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 05:50:32 +0000
Certificate not after:    Thu 21 Nov 2024 05:55:32 +0000
Subordinate resources:    IP: 2a05:dfc5::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:58:5a:7a:77:ed:cc:ce:79:08:cc:bb:c0:70:c9:70:7a:ea:32:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 23 05:50:32 2023 GMT
            Not After : Nov 21 05:55:32 2024 GMT
        Subject: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:ae:a8:9c:1e:fc:1f:9e:1b:92:47:6c:fa:
                    d8:4a:4a:a2:9d:b6:83:8e:0e:86:81:bd:32:17:aa:
                    03:b4:1e:e4:4b:39:be:4f:fe:60:53:b7:69:62:46:
                    91:5c:16:4a:2b:37:94:5d:24:e1:a9:c2:59:a0:e7:
                    80:9c:9b:46:89:bd:e7:4f:3b:32:f1:f3:e7:6a:ee:
                    cb:b0:d9:49:a5:c8:60:9c:dc:08:de:d9:fd:5f:50:
                    17:fb:78:50:70:5b:bb:29:b4:f2:cf:cb:14:d9:3d:
                    3c:29:d5:85:74:70:22:bc:ca:cf:ff:3d:48:b4:0d:
                    50:64:c7:9e:a3:5f:22:64:48:82:3e:74:15:ac:f2:
                    c5:1e:4c:fc:78:eb:9c:da:45:b6:e5:47:03:34:02:
                    24:f7:51:4e:4f:4e:3b:bd:3b:91:e1:ea:7f:f8:ba:
                    97:33:53:50:f8:9b:e6:13:5e:64:2d:07:0c:69:59:
                    c2:36:6b:77:64:0a:36:4c:9b:c0:8f:05:af:d9:7c:
                    b4:86:63:33:33:85:cc:0f:8c:a5:5a:4c:11:c1:99:
                    78:fb:71:ac:ea:50:26:cb:3b:ea:a8:c2:77:3b:4d:
                    96:09:e1:2c:07:e3:86:ff:8e:f9:82:5d:2e:aa:91:
                    98:41:cc:ff:27:d1:df:5f:85:2f:48:0a:42:ca:bf:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:db:a1:fe:00:3c:7d:2b:e3:1d:99:b4:c5:37:f3:e9:12:35:
         1e:3a:91:dd:4e:57:af:3b:17:20:8c:00:a5:26:e3:54:f0:ac:
         83:e4:e8:a7:58:8c:85:ee:29:80:b8:db:19:d5:b3:a5:8a:e6:
         b2:63:29:b5:01:f0:b2:ec:8a:17:af:7b:a2:27:44:bf:5b:a1:
         8d:0c:af:2b:ad:24:41:79:00:2c:74:0a:13:75:97:a3:78:a2:
         8b:42:18:ae:89:c8:f3:e0:34:84:46:2f:19:5d:cf:e5:91:2d:
         11:b7:91:ed:4d:de:33:ed:b8:7d:aa:79:04:12:bc:62:10:b8:
         b3:30:ad:51:9d:96:54:f0:12:f5:ba:48:89:c7:c9:6c:e1:59:
         fb:45:1c:24:7e:9a:9c:a8:af:60:ee:61:38:72:38:2e:85:4c:
         9f:7f:02:86:93:46:db:43:7b:ce:19:d3:cd:ad:7e:32:f4:7e:
         e9:bb:2c:18:8c:ff:75:ea:5b:9f:48:01:46:6b:65:d0:04:cf:
         7d:3b:f0:7d:13:6b:c7:41:c1:01:28:17:3f:75:e1:5c:19:ae:
         b9:74:ab:48:49:c0:28:91:e5:90:be:c0:be:60:d8:fe:66:a6:
         33:16:f5:5b:a6:b9:2b:05:27:42:57:26:85:4a:7d:9d:cf:58:
         2f:e5:5f:9f
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUNFhaenftzM55CMy7wHDJcHrqMjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzExMjMwNTUwMzJaFw0yNDExMjEwNTU1MzJaMDMxMTAvBgNV
BAMTKDg0NzEzOEI1NDAxODMwQjg5QjUyNDAzQzc3NzcxOEJCNDBCMkI2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLba6onB78H54bkkds+thKSqKd
toOODoaBvTIXqgO0HuRLOb5P/mBTt2liRpFcFkorN5RdJOGpwlmg54Ccm0aJvedP
OzLx8+dq7suw2UmlyGCc3Aje2f1fUBf7eFBwW7sptPLPyxTZPTwp1YV0cCK8ys//
PUi0DVBkx56jXyJkSII+dBWs8sUeTPx465zaRbblRwM0AiT3UU5PTju9O5Hh6n/4
upczU1D4m+YTXmQtBwxpWcI2a3dkCjZMm8CPBa/ZfLSGYzMzhcwPjKVaTBHBmXj7
cazqUCbLO+qownc7TZYJ4SwH44b/jvmCXS6qkZhBzP8n0d9fhS9ICkLKv54XAgMB
AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEcTi1QBgwuJtS
QDx3dxi7QLK2tTAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3
Ny03Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhl
OTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS80Lzg0NzEzOEI1NDAxODMw
Qjg5QjUyNDAzQzc3NzcxOEJCNDBCMkI2QjUubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACoF38UwDQYJKoZIhvcNAQELBQADggEBANXbof4APH0r4x2ZtMU38+kSNR46
kd1OV687FyCMAKUm41TwrIPk6KdYjIXuKYC42xnVs6WK5rJjKbUB8LLsiheve6In
RL9boY0MryutJEF5ACx0ChN1l6N4ootCGK6JyPPgNIRGLxldz+WRLRG3ke1N3jPt
uH2qeQQSvGIQuLMwrVGdllTwEvW6SInHyWzhWftFHCR+mpyor2DuYThyOC6FTJ9/
AoaTRttDe84Z082tfjL0fum7LBiM/3XqW59IAUZrZdAEz3078H0Ta8dBwQEoFz91
4VwZrrl0q0hJwCiR5ZC+wL5g2P5mpjMW9VumuSsFJ0JXJoVKfZ3PWC/lX58=
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org