Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer
File:                     F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer (raw, json)
Hash identifier:          VlAfqUq8XzUy53r6f01NCtT4sBIydab1T81ODPO5ES0=
Subject key identifier:   F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0ABFB10126A7FA1704EEEC56746D302EB7B1391E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.mft
caRepository:             rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 08:42:43 +0000
Certificate not after:    Mon 08 Jul 2024 08:47:43 +0000
Subordinate resources:    IP: 2a06:1285::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bf:b1:01:26:a7:fa:17:04:ee:ec:56:74:6d:30:2e:b7:b1:39:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jul 10 08:42:43 2023 GMT
            Not After : Jul  8 08:47:43 2024 GMT
        Subject: CN=F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:10:5d:aa:2f:82:89:a2:b1:e6:10:f7:bd:
                    c6:b8:bc:39:64:56:7a:ad:f2:fd:b7:dd:27:b9:71:
                    da:04:fa:65:0a:15:92:de:e4:61:e3:1d:d3:86:78:
                    ec:20:9c:87:55:c8:e7:30:3d:a4:f2:60:8b:23:84:
                    70:a8:82:9f:6b:22:cb:90:d6:3a:ac:95:a6:5e:90:
                    38:c9:2a:31:9d:21:8e:d5:18:2b:61:41:cd:f7:4d:
                    ba:07:50:85:03:ed:3b:67:81:fc:dc:50:39:bf:00:
                    b5:8b:d9:1f:f0:bf:86:c4:80:2a:54:c6:54:be:99:
                    9c:a3:64:5b:77:95:12:29:4a:dc:e1:21:dd:30:8b:
                    5a:25:b0:b6:06:45:fe:00:85:41:48:d2:2b:51:5b:
                    24:f2:b2:3a:5f:83:f1:0f:20:de:00:a0:74:09:44:
                    a4:fa:93:12:d5:7e:ff:9f:07:aa:fb:09:c2:fc:96:
                    23:24:8d:ac:ca:31:80:db:ef:33:79:10:0a:79:b1:
                    1e:c4:17:29:7d:b9:1b:8d:f2:16:98:5d:fd:9b:11:
                    b7:4d:5c:2b:a8:0c:33:67:34:fe:b7:a0:d7:6c:48:
                    a3:a0:d1:95:e3:49:2a:24:bc:44:85:32:cc:3f:27:
                    22:c1:d0:59:65:8c:db:2e:b7:0a:24:cb:ec:04:22:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:24:1f:dc:5b:b7:3b:d6:be:21:d4:5d:bf:c9:54:de:31:
         74:f4:da:c9:0a:08:62:90:eb:e9:eb:ae:7d:36:74:90:90:8c:
         65:f3:f8:05:35:5f:1b:7a:49:79:33:21:24:1e:d0:72:b4:2b:
         dc:02:46:5e:ae:ea:63:e1:5d:56:4d:88:a7:a3:be:a4:d4:9b:
         07:1b:af:09:55:18:05:9a:b1:a7:79:fa:16:50:47:08:3a:2e:
         4b:c0:ea:72:78:2f:dc:1b:0f:48:01:76:fd:40:3e:18:45:9d:
         c9:5a:ce:c3:b8:3b:45:0c:cc:89:83:07:ce:4b:66:c1:64:6d:
         97:61:f4:4b:22:9b:e6:4a:71:58:fc:97:5d:4f:a8:52:ef:f4:
         9c:6f:f5:a9:8d:f8:38:c9:23:f3:4b:d3:34:c6:de:4e:5f:75:
         76:7d:8b:f5:89:56:5c:c8:2a:99:62:f8:4e:98:5d:72:65:45:
         7a:60:33:d1:bf:d0:33:f6:e1:f1:9f:3d:c4:45:de:97:22:cd:
         9d:b9:75:3e:f9:0b:93:39:26:f9:a6:ce:57:ba:3f:aa:a9:8b:
         11:b5:ad:c0:4c:13:67:9e:3a:e7:93:54:b8:e8:7b:c5:4a:1d:
         f8:ba:e5:a0:7e:14:71:55:da:40:01:09:d3:ec:0f:ff:d8:37:
         2b:bf:18:56
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUCr+xASan+hcE7uxWdG0wLrexOR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzA3MTAwODQyNDNaFw0yNDA3MDgwODQ3NDNaMDMxMTAvBgNV
BAMTKEY5MkMwQ0E4NjAwM0JFMkQ5NjkxMkYwQ0YwRTkwRkFGMEQ2Q0Y5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NBBdqi+CiaKx5hD3vca4vDlk
Vnqt8v233Se5cdoE+mUKFZLe5GHjHdOGeOwgnIdVyOcwPaTyYIsjhHCogp9rIsuQ
1jqslaZekDjJKjGdIY7VGCthQc33TboHUIUD7TtngfzcUDm/ALWL2R/wv4bEgCpU
xlS+mZyjZFt3lRIpStzhId0wi1olsLYGRf4AhUFI0itRWyTysjpfg/EPIN4AoHQJ
RKT6kxLVfv+fB6r7CcL8liMkjazKMYDb7zN5EAp5sR7EFyl9uRuN8haYXf2bEbdN
XCuoDDNnNP63oNdsSKOg0ZXjSSokvESFMsw/JyLB0FlljNsutwoky+wEIg67AgMB
AAGjggKUMIICkDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5LAyoYAO+LZaR
Lwzw6Q+vDWz5VDAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBAQYIKwYBBQUHAQsEgfQwgfEwQQYIKwYBBQUHMAWGNXJzeW5j
Oi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1RFUklUVU1fVUlEXzE4ODU4LzAv
MG0GCCsGAQUFBzAKhmFyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9U
RVJJVFVNX1VJRF8xODg1OC8wL0Y5MkMwQ0E4NjAwM0JFMkQ5NjkxMkYwQ0YwRTkw
RkFGMEQ2Q0Y5NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczovL3Jwa2kuemFwcGll
aG9zdC5jb20vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqBhKFMA0GCSqG
SIb3DQEBCwUAA4IBAQBt1yQf3Fu3O9a+IdRdv8lU3jF09NrJCghikOvp6659NnSQ
kIxl8/gFNV8bekl5MyEkHtBytCvcAkZerupj4V1WTYino76k1JsHG68JVRgFmrGn
efoWUEcIOi5LwOpyeC/cGw9IAXb9QD4YRZ3JWs7DuDtFDMyJgwfOS2bBZG2XYfRL
IpvmSnFY/JddT6hS7/Scb/Wpjfg4ySPzS9M0xt5OX3V2fYv1iVZcyCqZYvhOmF1y
ZUV6YDPRv9Az9uHxnz3ERd6XIs2duXU++QuTOSb5ps5Xuj+qqYsRta3ATBNnnjrn
k1S46HvFSh34uuWgfhRxVdpAAQnT7A//2DcrvxhW
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org