Certificate

$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/28DA659073A44062B9F94B162B2CFE772AAAF097.cer
File:                     28DA659073A44062B9F94B162B2CFE772AAAF097.cer (raw, json)
Hash identifier:          FRUoeCTF6dT+f7/M3ZxwFBAZgf9oXVOGmhdae7A9fGI=
Subject key identifier:   28:DA:65:90:73:A4:40:62:B9:F9:4B:16:2B:2C:FE:77:2A:AA:F0:97
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Certificate issuer:       /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial:       0DAE28B99CF3AAF30155E15C1A8B9E27D7742B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Manifest:                 rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/28DA659073A44062B9F94B162B2CFE772AAAF097.mft
caRepository:             rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/
Notify URL:               https://k00.pp-rpki.athene-center.net/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 09:50:06 +0000
Certificate not after:    Thu 20 Mar 2025 09:55:06 +0000
Subordinate resources:    AS: 208162
                          IP: 158.220.128.0/17

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ae:28:b9:9c:f3:aa:f3:01:55:e1:5c:1a:8b:9e:27:d7:74:2b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
        Validity
            Not Before: Mar 21 09:50:06 2024 GMT
            Not After : Mar 20 09:55:06 2025 GMT
        Subject: CN=28DA659073A44062B9F94B162B2CFE772AAAF097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:59:7a:42:87:52:32:80:4c:ae:99:39:99:
                    d7:d1:ce:c1:df:05:b5:96:a8:95:14:d7:5a:ba:8f:
                    32:32:7d:76:41:30:dd:68:70:a9:cd:e1:06:68:47:
                    24:5d:fb:96:81:8d:83:dc:d7:55:32:3e:41:e7:65:
                    0d:d6:c2:06:b5:7c:79:bc:19:bb:0d:c1:09:10:02:
                    d2:76:f9:26:29:70:f1:66:eb:eb:fb:b9:78:0b:0f:
                    f3:b4:d5:b4:d3:a0:b3:e8:49:d8:2c:f7:43:43:db:
                    a9:a1:44:6d:30:73:54:5d:a3:bc:f4:60:d0:2f:0c:
                    de:5c:b0:0a:b7:f1:3d:a7:89:4e:9f:ac:c3:b1:9c:
                    a5:8c:3d:3a:ba:80:06:3d:83:d7:38:01:c9:dc:5f:
                    fd:a5:e2:c6:49:18:a3:26:7e:ad:d2:78:49:bf:3e:
                    23:5d:16:c7:44:51:e6:e7:00:6a:a5:3a:a7:5a:0d:
                    ec:67:89:77:17:79:2d:83:c5:b8:bb:e4:4a:e6:61:
                    87:40:09:db:9b:a9:ca:32:03:c3:a1:a9:d2:b8:52:
                    46:cb:9e:c6:a2:a8:97:47:91:15:45:80:70:0c:6a:
                    cd:62:73:14:db:a5:3a:5f:2f:48:3a:22:92:8c:b9:
                    d1:21:74:a5:29:80:da:32:8b:c6:23:5f:63:0f:c6:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:DA:65:90:73:A4:40:62:B9:F9:4B:16:2B:2C:FE:77:2A:AA:F0:97
            X509v3 Authority Key Identifier:
                keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer

            Subject Information Access:
                CA Repository - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/
                RPKI Manifest - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/28DA659073A44062B9F94B162B2CFE772AAAF097.mft
                RPKI Notify - URI:https://k00.pp-rpki.athene-center.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.128.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208162

    Signature Algorithm: sha256WithRSAEncryption
         61:67:cc:8c:3c:d1:89:4c:35:8b:be:b3:c5:48:68:99:f3:19:
         00:4e:02:46:1c:c6:19:db:53:1e:fe:6e:76:72:50:20:5b:d9:
         69:ea:7f:b5:56:1a:82:9d:49:94:cc:a2:22:a7:b9:35:7a:dd:
         81:d2:27:ba:a8:55:40:52:41:ca:b2:37:9d:31:57:ab:34:8e:
         d5:59:78:ba:90:25:60:a3:c8:81:ba:fa:70:60:67:a9:84:30:
         64:97:9f:8f:1f:b5:8d:df:f8:0f:b0:21:ed:f0:69:61:68:8c:
         9e:f5:f4:ee:93:76:32:05:27:88:dc:9d:40:57:0c:7b:16:a8:
         5d:59:7b:d8:ba:df:4e:72:ec:c5:b7:e4:95:c1:e1:4c:fb:7c:
         2c:4b:63:b3:7e:12:75:23:fa:3e:d5:53:b2:9e:7d:fb:6f:2a:
         25:d9:8e:15:63:0e:08:46:c6:f4:58:fc:19:18:15:b1:cf:43:
         44:b0:94:20:c4:fd:61:9c:b7:3b:12:52:77:6d:4e:77:31:93:
         b0:5b:f9:d9:a6:60:c6:40:ee:f5:c9:e8:2b:77:14:ed:96:10:
         d6:9b:1d:d3:a0:6b:7f:6c:c8:1d:76:e7:fe:9a:5a:7e:17:ce:
         17:97:fd:7a:84:61:c2:a3:e9:fd:dc:90:86:75:06:04:88:a1:
         94:90:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:59 2024 by rpki-client on console-fra.rpki-client.org