Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer
File:                     F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer (raw, json)
Hash identifier:          zy5qFgTPSkryvKr/iv2jKMyxCtoEGcL7vgGkesULMWU=
Subject key identifier:   F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       57D2E14284BD7B3732DD971AC6AB113B301FE153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 05:50:21 +0000
Certificate not after:    Thu 21 Nov 2024 05:55:21 +0000
Subordinate resources:    IP: 2a05:dfc5::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d2:e1:42:84:bd:7b:37:32:dd:97:1a:c6:ab:11:3b:30:1f:e1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 23 05:50:21 2023 GMT
            Not After : Nov 21 05:55:21 2024 GMT
        Subject: CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:e5:c8:fd:1f:44:54:e7:3b:d6:d2:c1:fa:
                    0a:b7:78:42:90:f3:3a:0a:e2:63:a5:d3:97:a5:b9:
                    b9:03:cf:00:8a:d5:db:e5:f6:19:ea:80:05:fb:c7:
                    56:43:60:b8:ed:3c:f8:3f:9b:7a:f6:76:64:64:91:
                    c0:c5:ce:61:e2:88:48:fb:20:f3:62:72:8b:f0:ec:
                    4a:16:f0:09:b6:a5:6e:82:aa:d5:3a:21:b2:e2:0d:
                    04:69:8c:b2:c3:03:e0:6e:d4:70:e4:5b:bb:bf:cd:
                    86:fd:a6:e9:a6:4b:9c:13:2b:71:a3:55:ec:fc:f1:
                    ba:f2:e8:93:fc:4b:d1:9c:a3:ea:10:fb:b7:46:d5:
                    29:54:d1:85:d2:a7:72:ac:ce:d8:d4:3d:fb:df:12:
                    cd:dd:c9:2b:8c:fe:fa:97:c7:67:28:9d:75:c7:7d:
                    82:47:03:09:70:27:67:5a:5d:60:a4:48:8c:19:9e:
                    31:79:b4:a9:23:9b:21:e8:23:9e:ba:fa:f6:9b:28:
                    58:29:c1:be:49:42:45:a9:df:2b:d8:e5:e4:88:0d:
                    6e:31:b4:48:c5:2c:0c:75:79:95:e3:01:59:6f:cd:
                    06:4d:ef:ad:bf:61:b7:67:56:74:e4:a9:aa:46:2e:
                    7f:b4:d4:60:66:a9:eb:b6:ef:72:09:2c:58:b8:2a:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:57:f7:79:ef:91:0e:af:03:ff:e4:9b:36:be:cc:4f:d9:88:
         f6:68:d6:56:c6:f9:c9:7d:28:03:64:8a:2f:98:88:a4:fd:83:
         4b:ab:f0:4c:70:fc:f0:72:2c:7d:1e:42:62:c7:50:37:ee:8e:
         d3:cc:6e:c4:60:15:2f:65:2b:86:b8:95:7e:a2:0d:b9:92:c5:
         a5:d7:62:09:a2:24:47:cc:43:e6:eb:63:85:e5:b9:a7:fd:0d:
         60:1e:d5:a5:7e:b2:cb:07:cd:dd:58:a6:b8:2c:16:e2:9a:23:
         bf:ce:ca:be:e6:77:3b:97:33:33:0e:5b:0a:04:f4:be:8c:f7:
         94:82:ab:2d:1d:e3:f7:39:14:ea:02:e4:33:75:37:9e:eb:a4:
         a8:0e:41:f3:e6:c6:3f:04:89:36:a0:8b:9a:19:bc:5d:53:36:
         04:e0:95:30:a4:39:de:60:cf:19:a1:2d:05:f7:04:f0:4a:ac:
         ce:85:b7:d4:fa:f8:74:23:1f:66:c5:95:bc:0c:25:1a:be:76:
         ee:65:86:bd:35:b0:3e:fd:ac:d4:c0:f9:a9:0f:e3:a8:9b:72:
         f6:ec:4e:99:d2:71:ab:12:bf:de:86:2c:5a:dc:6b:01:52:1f:
         2a:c4:b4:21:bd:c5:43:22:4e:68:a1:2b:1d:7b:55:16:f3:e4:
         07:b2:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org