Certificate

$ rpki-client -vvf rpki.co/repo/Simple/2/0F4E901309D0140275A3FCBE4BE4BADB7B262E7F.cer
File:                     0F4E901309D0140275A3FCBE4BE4BADB7B262E7F.cer (raw, json)
Hash identifier:          LOg3JcFAJJ5u6H7occnVjvKiNTyYdhkfCV8LoRcAWKY=
Subject key identifier:   0F:4E:90:13:09:D0:14:02:75:A3:FC:BE:4B:E4:BA:DB:7B:26:2E:7F
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Certificate issuer:       /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial:       069744B4D1D3274CC702D561ED53548F12881A1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Manifest:                 rsync://rpki.co/repo/AS945/17/0F4E901309D0140275A3FCBE4BE4BADB7B262E7F.mft
caRepository:             rsync://rpki.co/repo/AS945/17/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 04:43:41 +0000
Certificate not after:    Mon 07 Oct 2024 04:48:41 +0000
Subordinate resources:    AS: 9663

Validation:               OK
Signature path:           rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl
                          rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 20:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:97:44:b4:d1:d3:27:4c:c7:02:d5:61:ed:53:54:8f:12:88:1a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
        Validity
            Not Before: Oct  9 04:43:41 2023 GMT
            Not After : Oct  7 04:48:41 2024 GMT
        Subject: CN=0F4E901309D0140275A3FCBE4BE4BADB7B262E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:5d:4c:99:c9:cc:20:1b:55:94:4c:de:65:
                    71:6f:be:9b:a1:ad:f1:e4:91:d1:f0:fc:1d:6b:13:
                    73:64:19:37:4b:52:6b:ae:95:4c:51:a9:13:61:85:
                    dc:c7:27:c0:5a:f6:33:ec:5d:41:de:c8:29:ce:1b:
                    51:27:bc:48:ec:68:39:25:21:01:99:f0:fc:f8:18:
                    c5:24:26:b9:c4:e3:c7:a9:1a:bb:36:cb:5b:87:2d:
                    97:2e:40:b9:6c:2e:53:6c:42:48:a4:d4:ae:ee:52:
                    59:b8:e0:cb:ce:7b:be:a6:a4:2e:42:13:6d:b1:52:
                    a3:55:f3:32:b4:21:7e:ff:1d:5e:7b:67:c3:4b:88:
                    dd:e7:10:f7:b4:98:dd:ce:3e:ee:27:65:2b:b5:4c:
                    25:28:df:6c:8c:1b:73:11:84:6f:97:82:54:29:d0:
                    2c:fa:03:9a:5b:5b:5d:62:ec:8c:ca:43:d0:75:e4:
                    ba:4b:a0:58:f2:54:a7:02:b2:e8:bf:f4:9d:5f:fb:
                    6d:6f:a4:d0:39:ae:b5:87:ec:0f:8d:51:64:ed:57:
                    8c:d8:17:ed:c9:43:aa:15:5e:fe:3b:e3:cf:0b:d3:
                    8d:dc:58:fc:e2:b6:6d:4d:bb:ba:99:e0:46:72:0f:
                    a4:f5:08:42:04:b2:1c:ae:88:d6:10:2c:23:a9:4c:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:4E:90:13:09:D0:14:02:75:A3:FC:BE:4B:E4:BA:DB:7B:26:2E:7F
            X509v3 Authority Key Identifier:
                keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/17/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/17/0F4E901309D0140275A3FCBE4BE4BADB7B262E7F.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9663

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:83:6c:ea:89:31:a1:03:16:d7:cd:08:da:88:c0:93:ea:
         de:e2:de:a7:fe:05:ca:20:65:95:de:25:17:17:f3:64:13:44:
         96:3e:bd:6f:e4:96:0f:f1:07:69:d5:08:55:37:60:d0:64:f7:
         c5:7f:d7:7a:62:2e:34:cc:e1:4c:d6:40:08:a3:98:07:1a:7a:
         25:55:3c:19:c6:76:9b:cf:ed:30:5a:9b:2d:ee:aa:ed:a3:ba:
         c0:14:4b:ed:8c:a4:a9:7b:5b:c0:f9:f2:f3:5f:94:8d:66:ab:
         4a:3a:56:a9:01:19:1e:d8:f9:16:65:5f:c9:22:29:7a:16:7a:
         9c:75:56:5d:b4:01:38:62:66:29:bc:55:ff:ee:8f:65:06:38:
         da:86:ca:4a:02:49:a1:8f:42:05:39:9a:cb:c0:de:71:26:98:
         9a:39:1d:64:b6:5d:2d:e7:4b:38:72:ca:f0:47:ad:aa:fc:63:
         d5:c4:ac:54:9c:59:fd:77:71:9e:61:b7:3c:f1:ec:de:3e:84:
         1d:4f:2a:a7:4a:cb:13:a9:be:c1:34:df:8a:b6:08:3e:06:5a:
         70:05:ae:41:0d:ba:01:58:71:5d:0f:aa:db:8a:b3:25:6b:b8:
         13:6b:fd:d9:ed:44:d4:44:37:9a:6b:2c:b7:da:0e:33:36:ec:
         27:2a:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:20:55 2024 by rpki-client on console-ams.rpki-client.org