Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F8DFF19A672A7674864D5F6367842D23E68D772F.cer
File:                     F8DFF19A672A7674864D5F6367842D23E68D772F.cer (raw, json)
Hash identifier:          SyuefDq3wWE+0CDNcXBRIul1lrn8P8gm2cLZcOz+cY4=
Subject key identifier:   F8:DF:F1:9A:67:2A:76:74:86:4D:5F:63:67:84:2D:23:E6:8D:77:2F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       40CCBBE4EAD3422865E7B56F9DF6775AD16F3002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/F8DFF19A672A7674864D5F6367842D23E68D772F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 06 Mar 2024 20:22:18 +0000
Certificate not after:    Wed 05 Mar 2025 20:27:18 +0000
Subordinate resources:    IP: 2a0a:6042::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cc:bb:e4:ea:d3:42:28:65:e7:b5:6f:9d:f6:77:5a:d1:6f:30:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar  6 20:22:18 2024 GMT
            Not After : Mar  5 20:27:18 2025 GMT
        Subject: CN=F8DFF19A672A7674864D5F6367842D23E68D772F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:1e:91:d5:89:e7:83:32:c5:7a:12:45:68:
                    4a:2c:d5:42:cd:49:32:88:da:6d:26:f2:ec:7d:41:
                    55:a8:1c:88:b1:60:e9:2b:34:c5:f1:c0:5c:1a:9d:
                    df:fe:b7:6b:fb:77:17:66:ca:32:b5:4b:86:23:60:
                    d3:b2:6a:2a:6d:60:fc:a4:f9:be:b8:dd:c9:33:fa:
                    5d:22:76:df:63:65:08:18:42:26:42:40:83:fe:3f:
                    78:77:ac:d7:58:cc:e7:fa:34:89:76:09:fa:4a:6c:
                    eb:3e:6d:c6:61:97:b1:01:77:f1:a3:85:3c:73:87:
                    d3:ac:71:1c:ba:e5:d2:db:ab:84:3b:ce:f1:0c:e7:
                    6c:12:75:b5:4f:fd:ae:cb:1c:be:c3:b4:1b:0d:83:
                    ce:d7:41:9d:c3:e6:13:68:6d:a3:1b:75:57:07:82:
                    06:8f:f0:6f:f1:c1:10:43:4d:0e:34:dd:e3:57:64:
                    f3:42:ba:eb:fc:ab:c1:22:e7:22:2f:4c:a9:ef:eb:
                    93:04:4e:72:32:3c:0c:10:d1:4a:20:25:c9:41:a7:
                    50:43:06:50:28:b2:92:28:5e:e2:c1:07:97:bd:21:
                    58:bd:0d:31:21:04:60:bd:e1:03:48:fa:84:76:65:
                    f8:85:7e:ed:58:1e:20:8d:dd:01:ce:1a:89:2c:7d:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:DF:F1:9A:67:2A:76:74:86:4D:5F:63:67:84:2D:23:E6:8D:77:2F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/F8DFF19A672A7674864D5F6367842D23E68D772F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6042::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:eb:85:9e:a1:24:7b:7d:af:77:34:7d:2f:8b:5f:2f:ca:62:
         56:7a:11:31:18:48:2c:3a:30:26:9e:1b:df:c9:f3:6b:d4:f2:
         46:bf:b0:fe:38:39:17:2b:a1:50:ef:2d:91:6c:f8:3d:9a:de:
         60:fb:9c:ab:f8:ad:96:a7:44:e7:97:29:4e:62:a2:c4:c3:3b:
         6f:df:ab:a3:5f:7c:39:ce:ae:4f:71:17:60:db:8f:1d:f3:10:
         16:e8:ac:bf:3f:7d:50:87:50:1b:b5:bb:53:fc:77:a4:25:01:
         69:a8:0e:c1:44:37:a4:f2:c0:22:89:1b:ad:94:c6:67:58:94:
         58:c7:fa:37:07:4c:b0:21:e5:11:87:30:84:d5:35:1d:16:92:
         e5:95:73:a9:f9:ee:13:ca:c8:98:42:ed:2b:a3:c1:0d:72:98:
         50:c4:37:1d:61:a6:16:2e:1c:e0:52:6b:57:ac:c9:07:b6:58:
         26:c4:ab:8a:aa:bd:56:37:a6:b3:a5:19:9e:fd:4e:8f:49:f1:
         62:1c:49:5a:f9:8c:6b:85:d4:69:a1:1f:8d:ce:90:7b:b7:12:
         c3:1b:fd:f9:01:a1:3a:c8:ab:cf:98:36:c6:07:5c:72:54:4f:
         82:52:82:79:4b:59:e0:2e:35:e3:dc:f0:b8:5a:b8:e9:91:ee:
         40:62:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org