Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer
File:                     D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer (raw, json)
Hash identifier:          xKAsiA7Qgppw/1uZKFfRzNO1rTnYOAI4H9m1WNqxiQY=
Subject key identifier:   D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       574623AE0114D189F1B0CCF14C4F1DDE326B97F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 00:57:22 +0000
Certificate not after:    Mon 10 Nov 2025 01:02:22 +0000
Subordinate resources:    IP: 2a06:1287::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:23:ae:01:14:d1:89:f1:b0:cc:f1:4c:4f:1d:de:32:6b:97:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 11 00:57:22 2024 GMT
            Not After : Nov 10 01:02:22 2025 GMT
        Subject: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:ce:b2:f8:cf:6c:13:31:f4:5c:a0:d9:2e:
                    95:fb:39:47:fa:f2:37:22:b1:0d:6f:c1:e5:c7:c4:
                    b7:99:d6:4f:90:ee:e1:bc:27:72:62:ec:3a:dd:79:
                    24:5f:62:f8:99:4b:19:28:03:4e:3d:4d:4a:42:ce:
                    7a:a2:d6:76:38:d4:ff:e7:31:fb:1a:47:20:48:02:
                    59:84:d3:f4:02:f3:26:0c:02:55:82:93:f1:84:17:
                    65:61:17:47:06:3e:97:8e:34:e3:b0:58:64:9c:be:
                    6f:e7:24:55:84:db:ef:a4:95:b8:23:c5:2d:a1:e5:
                    2f:35:e8:35:01:99:f5:31:95:a5:1b:b6:4b:74:64:
                    ea:b3:a2:17:41:04:9b:21:5a:a4:30:8f:8c:31:0e:
                    68:7a:df:37:46:d7:f1:e7:e1:2d:b6:29:79:b6:2d:
                    3c:92:21:f4:c0:aa:58:e0:9a:61:d8:46:12:bd:c9:
                    84:f3:28:f4:ed:1b:41:0b:b1:fa:f9:61:91:3b:b4:
                    7d:01:0e:1a:90:9a:d2:cc:b2:8a:3a:fd:4c:be:c0:
                    c3:ec:2d:66:9b:78:78:fc:b2:ad:56:5a:d7:cd:96:
                    ec:06:88:6a:d7:83:09:27:15:a4:63:63:be:c5:ce:
                    30:ab:1f:b9:51:83:d3:8d:28:ea:b8:8d:c9:a8:56:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:94:f7:e2:5a:b3:56:3e:10:0b:4f:d2:13:97:ab:b3:31:46:
         09:11:80:c7:de:7a:78:01:f9:bd:11:57:aa:66:00:88:e7:b3:
         cb:1e:fa:77:96:59:0e:80:19:fc:a9:c1:ca:d4:9f:66:bc:e2:
         fc:37:0d:2d:8d:bd:47:11:90:57:24:03:c7:e8:84:68:bc:11:
         c8:ff:3d:a8:85:d9:a2:10:fa:82:68:85:05:7c:37:1f:68:c9:
         cc:03:a1:84:17:af:15:53:78:35:e0:dc:cc:bb:c0:67:20:ba:
         a3:e6:60:8e:f5:c3:e2:70:9a:3f:fd:8d:9e:c7:cb:c1:b2:e3:
         38:e0:e2:3f:94:f6:ee:c8:75:6f:a6:f9:eb:a2:3d:88:d1:9f:
         36:c4:c4:70:ab:f9:3a:6a:ab:a8:33:61:6d:15:f8:13:30:99:
         47:93:db:33:ad:9c:91:c0:05:74:dc:7c:f4:fd:f2:ff:d6:4a:
         d5:72:21:00:9f:b2:a3:c1:68:ca:12:b6:c6:dc:e8:d3:e8:34:
         1f:71:4f:4b:06:6c:23:04:03:b9:bd:38:61:47:0e:cf:2b:67:
         ee:a9:8c:c5:1a:8c:2d:a8:5c:13:55:fc:22:b1:77:ec:eb:5a:
         d8:8e:4f:9b:19:51:60:04:e6:c5:93:c7:5c:05:0b:d3:f0:44:
         62:8f:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:51:32 2024 by rpki-client on console-ams.rpki-client.org