Certificate

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
File:                     14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer (raw, json)
Hash identifier:          IqWVzMquEWwZed37d2Qk+T0Sf7eSEoTWrOXoO0lIcYE=
Subject key identifier:   14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       62E68E68C82291EB0BE28B504FBDB356FAD6AAB8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Manifest:                 rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
caRepository:             rsync://rpki.nap.re/repo/pongery/3/
Notify URL:               https://rpki.nap.re:3030/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 12:32:36 +0000
Certificate not after:    Fri 29 Nov 2024 12:37:36 +0000
Subordinate resources:    IP: 2a0a:6045:c000::/34

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e6:8e:68:c8:22:91:eb:0b:e2:8b:50:4f:bd:b3:56:fa:d6:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Dec  1 12:32:36 2023 GMT
            Not After : Nov 29 12:37:36 2024 GMT
        Subject: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:e2:f5:d4:63:79:9e:de:51:a6:97:3f:dd:
                    54:b2:95:08:9d:09:9b:1d:2a:b1:b4:e8:e7:ba:45:
                    f0:e3:fd:c6:4f:1e:2b:a9:f5:04:a8:2d:00:1b:af:
                    d8:5a:5a:02:d5:f9:58:f8:ac:a3:18:ad:d9:4a:37:
                    2b:1f:2e:ef:cd:e4:a9:f6:6b:97:13:db:de:d2:67:
                    37:38:1f:6d:57:4d:91:68:50:fd:7f:d7:fc:09:33:
                    06:88:04:14:18:df:b0:66:f2:9a:e5:6c:fe:5a:79:
                    b7:05:97:3d:8c:1b:76:9a:a7:56:5c:39:46:ae:73:
                    88:56:87:63:aa:b5:24:20:df:a0:fa:34:78:93:56:
                    46:d1:ac:74:6a:5a:44:36:c4:15:0e:03:d8:3d:2a:
                    5c:40:f4:69:00:90:59:0f:b5:dd:5f:2b:4d:45:fb:
                    cb:c8:34:fa:8c:02:c4:41:c4:32:37:58:25:cf:63:
                    60:cf:02:1c:d2:3f:ef:26:09:48:c3:ff:93:b8:66:
                    f2:e0:2c:aa:50:bf:60:30:04:c2:3e:d3:cb:34:7f:
                    1d:ef:2c:c3:12:80:f0:b4:46:45:50:84:41:61:97:
                    34:cb:d0:e7:c2:bb:ec:71:bf:b6:fe:b3:a5:84:68:
                    3c:52:bd:9a:34:b4:ff:e6:d5:7e:16:f5:48:d4:9b:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.nap.re/repo/pongery/3/
                RPKI Manifest - URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                RPKI Notify - URI:https://rpki.nap.re:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:14:1c:76:47:ed:27:c6:ee:1e:2e:6c:d1:c4:a6:7d:c1:e7:
         f5:03:92:5f:f3:5e:db:ae:97:99:ad:0c:77:63:fc:95:58:04:
         a0:ac:19:be:cc:74:31:31:c5:f6:56:6f:a6:e5:6a:36:e0:ba:
         f6:ba:76:bf:19:84:cf:4e:b3:9c:c7:c9:4b:4d:3f:4d:c6:b7:
         db:f1:43:d7:5f:92:2b:37:56:a4:19:68:99:7c:03:05:e1:b2:
         00:f2:cb:fb:e4:18:b5:19:d0:e8:e7:cd:45:56:8e:97:6d:e5:
         bf:11:e1:4c:39:e2:0a:e9:86:4a:73:6e:8e:21:fc:7f:7c:f1:
         a6:01:04:ae:18:f4:61:0b:e5:fb:2f:ae:a2:df:2f:8f:60:e3:
         07:9c:9a:d7:89:ce:1a:81:c7:52:c0:ac:3d:7f:01:91:93:40:
         8f:d6:7a:ab:ac:b9:8d:34:ab:7f:d6:58:6c:a9:25:c3:e2:3a:
         42:37:3e:63:9e:d5:9b:67:70:d4:b3:bd:25:c0:c4:8e:38:a6:
         cb:71:77:04:97:79:d7:e7:fe:77:8e:68:d7:87:07:36:9d:ee:
         d2:5f:42:26:8f:4a:9b:fc:68:29:37:5f:f3:7a:70:cb:9d:3a:
         0f:e0:10:1e:ee:9e:11:e9:ff:59:f0:a9:e4:12:0b:89:38:b2:
         a6:80:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:47 2024 by rpki-client on console-ams.rpki-client.org