Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
File:                     974E186C2E15C12700D0165ACC54D7A585EE383C.cer (raw, json)
Hash identifier:          YbV/bpKVQH4Zys8adCgNXSVaAzDHMBxl4Kq6NUQwffo=
Subject key identifier:   97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1BC21D444E13B6235F26CB9EE3295F8ED1A6AE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 13 Sep 2024 10:52:02 +0000
Certificate not after:    Fri 12 Sep 2025 10:57:02 +0000
Subordinate resources:    IP: 194.58.65.0/24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c2:1d:44:4e:13:b6:23:5f:26:cb:9e:e3:29:5f:8e:d1:a6:ae:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep 13 10:52:02 2024 GMT
            Not After : Sep 12 10:57:02 2025 GMT
        Subject: CN=974E186C2E15C12700D0165ACC54D7A585EE383C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:d1:72:01:ce:b2:d1:d7:82:8a:4f:eb:c2:
                    14:a9:67:8f:51:1a:4a:a7:5f:0a:94:b7:61:b5:b7:
                    4b:8d:52:9b:38:e6:9a:6a:e9:3e:47:63:a4:61:80:
                    a8:d4:13:bb:24:1d:9a:bd:dc:7c:07:cb:5e:b1:b9:
                    30:02:bd:f0:22:02:0d:4c:a9:94:33:c6:ff:8f:84:
                    ed:1d:c5:ae:85:5e:0a:1e:87:64:80:d7:9d:69:f5:
                    9d:c4:17:63:6e:76:32:f9:e9:49:58:53:60:3f:d3:
                    28:53:de:e9:a7:4d:29:e7:27:9a:27:2e:39:41:3a:
                    88:13:e0:af:16:a7:08:e1:8c:8c:68:ac:b1:78:12:
                    fb:fa:47:f6:7c:52:0b:b3:b3:8a:c6:71:6e:f2:2a:
                    1c:51:07:e0:ea:47:a2:2c:de:4a:65:ad:b1:94:9c:
                    e6:2e:55:b4:21:d5:76:b4:b0:cc:a8:62:12:05:10:
                    a9:0a:0b:69:78:97:c1:87:f7:92:67:29:e4:a3:9f:
                    d3:98:ab:5e:3e:cb:ff:1d:45:1c:c6:e8:e2:48:51:
                    5a:4c:6c:ac:f5:5b:97:e7:28:fe:9a:f3:e3:1a:18:
                    91:0b:d8:4c:b2:fc:e7:31:cc:0b:52:7f:06:e8:25:
                    38:34:8f:2b:6e:ad:db:19:58:b4:f4:50:d3:a3:7e:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.58.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:35:98:a7:05:1f:bc:d6:8d:21:b3:1a:7b:cb:c0:f3:68:34:
         0f:00:44:f4:f3:12:1a:ba:1d:e2:bb:ad:e3:c5:96:c5:63:0f:
         53:16:39:c0:71:39:6d:94:4f:9d:57:92:60:60:db:79:f4:eb:
         31:6f:16:d8:4b:f0:54:7d:19:4b:72:6f:f2:9b:eb:80:26:c9:
         55:df:5b:db:09:78:4e:26:59:b9:87:ac:45:43:ae:65:40:9f:
         0e:fb:6a:44:7e:6a:3c:70:3c:6c:1b:10:a1:9c:37:d5:98:06:
         fb:35:30:54:8a:d4:90:33:8c:17:9f:c6:93:62:11:24:7f:e5:
         84:75:fc:21:0b:31:50:7b:73:59:a9:8b:dd:2a:91:e4:a9:fc:
         de:6c:1e:a5:a8:84:9f:9e:00:a7:81:7e:b7:c9:04:9b:a7:25:
         32:93:86:04:c9:95:d0:cb:d5:a9:6f:c5:60:bb:92:b9:2b:1f:
         d6:25:8c:0c:7a:b2:72:54:52:d2:fa:c5:30:4a:cf:08:e5:18:
         33:0f:31:62:48:8c:a5:74:9a:46:0c:2d:4e:ed:ad:f8:ab:1e:
         8d:a9:1d:3f:35:a5:c2:48:9d:2d:9c:42:23:b5:ce:bd:19:f0:
         1d:c8:ee:d9:dd:89:a4:2d:81:2f:61:14:f4:5f:ef:e0:47:b0:
         78:bd:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:56 2024 by rpki-client on console-fra.rpki-client.org