Certificate

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer
File:                     7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer (raw, json)
Hash identifier:          h7g0lBzcSZgGVsxmezveIOruV2BI5uDmQOuc2XjnP+M=
Subject key identifier:   7C:9E:E2:0E:59:DE:F5:F8:B5:FE:68:58:5E:DE:90:6D:17:D3:04:0C
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       68F152BAA8CF5194845C05E093CB64F0D3AAA24A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Manifest:                 rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.mft
caRepository:             rsync://krill.uta.ng/repo/pongery/3/
Notify URL:               https://krill.uta.ng:3030/rrdp/notification.xml
Certificate not before:   Fri 16 Aug 2024 11:21:57 +0000
Certificate not after:    Fri 15 Aug 2025 11:26:57 +0000
Subordinate resources:    IP: 2a0a:6045:c000::/34

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Oct 2024 09:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f1:52:ba:a8:cf:51:94:84:5c:05:e0:93:cb:64:f0:d3:aa:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Aug 16 11:21:57 2024 GMT
            Not After : Aug 15 11:26:57 2025 GMT
        Subject: CN=7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:2a:c6:fd:11:c4:75:5a:0c:3b:ff:8a:8b:
                    5d:93:6a:21:4f:d3:40:75:0c:2b:d5:60:7f:99:ec:
                    ef:d7:7c:2e:8f:c9:56:16:d7:ac:a7:ce:9b:0e:63:
                    17:c2:c1:72:4f:2b:aa:2d:76:30:01:1e:16:03:d9:
                    7c:5e:35:7f:fb:31:2d:bc:de:b3:1c:40:3b:ac:1f:
                    1f:f2:66:83:1c:5a:d2:5b:98:4c:e7:47:92:f8:46:
                    3c:0c:f5:b8:f6:b3:9f:ae:e0:d5:e5:66:89:17:d2:
                    6d:ad:f7:c2:1b:f4:a7:45:97:ba:86:17:61:e0:af:
                    a4:9e:d6:5c:0d:35:83:e7:29:c4:88:6a:02:76:a2:
                    86:ec:e4:57:2a:13:79:81:6a:68:1d:3c:99:00:90:
                    f6:17:0c:51:64:4f:08:4d:f5:5a:4a:43:41:ff:ae:
                    7a:79:78:f1:74:c9:b3:10:b3:af:c8:a4:f2:d2:fe:
                    f8:5e:e4:da:35:89:40:0d:8d:c4:0a:dd:fd:fb:6c:
                    5c:af:36:b7:a1:b4:26:74:e6:b9:a2:45:43:af:47:
                    c4:2c:58:7c:70:bc:2c:7b:46:b2:91:50:8e:55:7a:
                    e9:97:9e:89:bd:af:18:2b:7f:64:7e:be:38:6f:02:
                    53:76:64:36:6e:73:30:97:81:5a:e2:4e:cd:f2:3d:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:9E:E2:0E:59:DE:F5:F8:B5:FE:68:58:5E:DE:90:6D:17:D3:04:0C
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.uta.ng/repo/pongery/3/
                RPKI Manifest - URI:rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.mft
                RPKI Notify - URI:https://krill.uta.ng:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:a8:8a:98:29:ed:45:9f:f2:b3:ee:62:51:03:f4:2b:b6:
         1a:9f:18:44:85:2e:02:d3:5a:10:fb:d0:d4:49:ed:6f:15:d8:
         5f:68:c6:d3:79:6c:a5:fb:e8:60:17:20:64:35:88:e8:b8:6d:
         50:bc:83:b8:aa:c4:55:0a:61:59:29:c5:b9:23:7c:82:f1:bd:
         a6:d3:a6:be:ab:45:08:c3:d3:6a:b3:e5:17:d3:ac:1c:f8:3d:
         7a:d5:37:c1:6f:5c:23:d2:ea:de:05:a5:f5:ac:76:b9:fd:a8:
         4a:c9:98:1f:a5:b6:cd:4e:43:de:02:65:ee:d0:53:b3:07:2a:
         29:a4:07:60:e7:47:cd:61:1c:bb:d0:32:b7:0e:d4:fa:fd:8e:
         22:79:91:4a:16:1f:64:4e:26:9b:b2:f5:b3:9a:fa:ed:8a:c0:
         a4:81:32:ac:37:78:5c:ef:e3:bb:db:0a:30:96:02:86:05:35:
         c8:57:74:76:a4:48:ec:cf:76:0c:f4:2c:03:db:4a:88:3f:b1:
         d0:77:c9:9b:c0:4d:df:26:5a:6e:78:0d:ae:65:76:99:d2:48:
         45:13:53:dc:4c:84:d5:25:6e:f3:36:7d:76:cc:1d:d2:db:de:
         47:ab:e1:a6:33:dc:ca:3f:c1:8c:4e:b4:a7:f6:8a:db:18:69:
         67:15:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 23:48:44 2024 by rpki-client on console-ams.rpki-client.org