Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer
File:                     F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer (raw, json)
Hash identifier:          GJoLvIFQYQHpPUqAl0XwSl5tQrRBP9je6Id80UUhLb0=
Subject key identifier:   F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       161386F4CA4174AF284F5D081FA458335A6D0131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.mft
caRepository:             rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Mon 10 Jun 2024 22:30:48 +0000
Certificate not after:    Mon 09 Jun 2025 22:35:48 +0000
Subordinate resources:    IP: 2a06:1285::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:86:f4:ca:41:74:af:28:4f:5d:08:1f:a4:58:33:5a:6d:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun 10 22:30:48 2024 GMT
            Not After : Jun  9 22:35:48 2025 GMT
        Subject: CN=F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:10:5d:aa:2f:82:89:a2:b1:e6:10:f7:bd:
                    c6:b8:bc:39:64:56:7a:ad:f2:fd:b7:dd:27:b9:71:
                    da:04:fa:65:0a:15:92:de:e4:61:e3:1d:d3:86:78:
                    ec:20:9c:87:55:c8:e7:30:3d:a4:f2:60:8b:23:84:
                    70:a8:82:9f:6b:22:cb:90:d6:3a:ac:95:a6:5e:90:
                    38:c9:2a:31:9d:21:8e:d5:18:2b:61:41:cd:f7:4d:
                    ba:07:50:85:03:ed:3b:67:81:fc:dc:50:39:bf:00:
                    b5:8b:d9:1f:f0:bf:86:c4:80:2a:54:c6:54:be:99:
                    9c:a3:64:5b:77:95:12:29:4a:dc:e1:21:dd:30:8b:
                    5a:25:b0:b6:06:45:fe:00:85:41:48:d2:2b:51:5b:
                    24:f2:b2:3a:5f:83:f1:0f:20:de:00:a0:74:09:44:
                    a4:fa:93:12:d5:7e:ff:9f:07:aa:fb:09:c2:fc:96:
                    23:24:8d:ac:ca:31:80:db:ef:33:79:10:0a:79:b1:
                    1e:c4:17:29:7d:b9:1b:8d:f2:16:98:5d:fd:9b:11:
                    b7:4d:5c:2b:a8:0c:33:67:34:fe:b7:a0:d7:6c:48:
                    a3:a0:d1:95:e3:49:2a:24:bc:44:85:32:cc:3f:27:
                    22:c1:d0:59:65:8c:db:2e:b7:0a:24:cb:ec:04:22:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:05:0e:9a:7f:69:d7:30:50:95:94:00:fa:1f:e1:d9:4e:3f:
         94:f0:8a:a3:29:60:bf:07:68:cc:27:6c:85:dd:6c:06:e7:0e:
         01:4d:2c:5f:cf:69:75:ac:ef:44:cb:1c:13:9d:ca:08:f8:8a:
         5d:35:1a:2a:df:68:07:da:a2:f9:5b:6a:40:a7:98:62:74:82:
         14:94:bd:cf:8c:dd:30:50:d6:d0:95:c3:ee:a1:bd:57:ae:b9:
         8a:fe:f9:2c:7f:d2:01:14:4b:9f:23:27:51:13:16:b2:d8:27:
         2e:e5:df:ed:53:fa:ee:8f:d2:43:48:c9:bf:f2:26:8d:0b:c5:
         8f:f6:99:61:3f:61:42:22:c7:40:00:c1:0c:73:1d:77:5d:f4:
         fc:28:23:0c:77:a2:e5:57:a3:ca:10:69:58:75:bf:0d:59:f7:
         40:bf:c8:bf:18:8c:56:2b:56:21:47:ad:d9:dd:44:71:0f:b4:
         50:d3:da:52:2b:70:d2:0a:0f:69:3a:b8:b9:21:7e:82:6d:36:
         52:9b:6c:c7:2f:a9:3c:7f:45:a3:dc:5c:72:89:60:00:1e:f3:
         a6:1b:f8:ca:58:75:e3:54:21:e8:59:03:8f:39:d6:b3:04:22:
         83:55:a9:3c:7a:23:34:6e:d7:2a:34:b5:d8:ce:a3:7a:96:2a:
         d3:9a:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org