Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
File:                     CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer (raw, json)
Hash identifier:          sCw7xRIbdKNGsMbRbR3JtltTwuq5ekvfEverXm+UHrU=
Subject key identifier:   CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       51F54F3576E71BF74E46AAF0ECEE9779E2F10ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 10 Sep 2024 19:03:26 +0000
Certificate not after:    Tue 09 Sep 2025 19:08:26 +0000
Subordinate resources:    IP: 94.24.108.0/24
                          IP: 2a06:a003::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f5:4f:35:76:e7:1b:f7:4e:46:aa:f0:ec:ee:97:79:e2:f1:0a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep 10 19:03:26 2024 GMT
            Not After : Sep  9 19:08:26 2025 GMT
        Subject: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:7c:79:04:27:fd:97:84:52:aa:a0:d6:da:
                    02:44:25:57:83:07:2a:7c:a0:ef:eb:d3:87:d3:63:
                    bb:04:37:14:9f:19:31:31:73:55:13:39:17:67:30:
                    cc:47:42:e0:df:f7:13:58:4f:44:4c:b2:a1:62:c3:
                    e4:8b:bc:a1:95:24:52:46:78:33:f9:c6:22:9a:d3:
                    4c:64:3e:5b:ee:42:fd:5b:5d:2e:40:fc:a5:c1:18:
                    cd:09:ae:af:f8:51:c7:6a:96:27:85:08:a0:82:49:
                    25:2e:17:2c:df:8c:3d:0a:b4:fe:eb:6c:d9:0c:5e:
                    e9:5d:2a:87:7d:3b:cc:27:b7:e3:88:8e:87:05:77:
                    74:af:18:de:69:d8:e4:bc:ea:50:ff:87:77:12:c4:
                    61:78:c4:66:fa:1b:68:ae:e3:b6:00:f1:7f:5c:5c:
                    9d:7d:f5:8c:fc:aa:cf:58:77:3c:28:66:86:61:5a:
                    65:09:af:92:b7:3e:89:a5:fd:8a:38:5e:03:42:1d:
                    2c:24:71:bd:6a:e0:0a:fa:e7:a2:d1:9f:d8:30:fe:
                    de:35:20:e7:4c:ce:63:e4:16:1f:e9:06:91:a4:9b:
                    74:46:b0:a0:51:a0:5e:2f:47:a0:0f:60:1e:4c:39:
                    78:68:2d:70:48:95:9f:34:d8:d3:35:2d:fc:a6:a6:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.24.108.0/24
                IPv6:
                  2a06:a003::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:78:51:8e:f5:b6:c7:e5:f8:0a:1f:3c:bc:c2:47:b8:dc:
         38:be:52:e2:de:97:48:52:3f:10:df:e9:35:94:83:d4:7e:dd:
         13:0e:7a:31:17:9d:94:00:75:66:b9:82:51:94:eb:32:8d:d4:
         2d:22:2e:d3:f7:82:ab:6b:17:e7:5c:cc:98:e3:a9:2e:1b:ac:
         05:04:ae:34:19:37:d9:8a:89:77:8c:70:06:b1:9a:3e:36:32:
         50:1e:24:10:2e:c4:13:32:9b:79:61:cb:58:37:b1:fb:e8:97:
         06:c4:e4:a5:f6:f3:7b:e6:7f:8b:9d:9d:d1:39:4a:c8:41:36:
         08:4b:40:66:68:d7:57:6e:e8:9b:09:07:45:36:b4:69:54:1b:
         3e:f3:32:28:3c:47:79:ad:be:79:52:d9:40:bc:71:6a:ba:21:
         36:04:ec:ee:65:1e:fc:7f:af:20:03:df:85:31:90:e2:c1:55:
         92:79:92:04:73:a5:88:5a:03:44:38:90:5b:f3:58:d8:88:d9:
         8a:d5:38:45:db:31:d3:41:2d:ec:3b:5d:df:75:56:49:4a:0a:
         c2:39:b2:6e:7c:80:00:6d:bf:7e:f2:70:2d:f3:2f:e1:97:9b:
         fa:5e:bf:1c:04:b7:17:47:16:a1:bb:76:b9:5d:21:51:58:2d:
         1b:b7:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 02:14:26 2024 by rpki-client on console-fra.rpki-client.org