Certificate

$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/5665DC4D31D2D8688792970C92271376F081D514.cer
File:                     5665DC4D31D2D8688792970C92271376F081D514.cer (raw, json)
Hash identifier:          LA0Y7OY6/jgwtQrMaHxPaI4FqX6nE4Hclas91CZ3Iug=
Subject key identifier:   56:65:DC:4D:31:D2:D8:68:87:92:97:0C:92:27:13:76:F0:81:D5:14
Authority key identifier: A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4
Certificate issuer:       /CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4
Certificate serial:       5A67A8EF4F4C2F3E2952E09374A7B6D276D19ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer
Manifest:                 rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/1/5665DC4D31D2D8688792970C92271376F081D514.mft
caRepository:             rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/1/
Notify URL:               https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 11:24:46 +0000
Certificate not after:    Mon 17 Jun 2024 11:29:46 +0000
Subordinate resources:    IP: 2a04:b905::/32

Validation:               OK
Signature path:           rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl
                          rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:67:a8:ef:4f:4c:2f:3e:29:52:e0:93:74:a7:b6:d2:76:d1:9a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4
        Validity
            Not Before: Jun 19 11:24:46 2023 GMT
            Not After : Jun 17 11:29:46 2024 GMT
        Subject: CN=5665DC4D31D2D8688792970C92271376F081D514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:3d:27:5e:0b:de:68:fb:05:a8:5d:68:4d:
                    64:3d:19:96:14:2d:0c:89:e7:c6:38:34:5d:0d:59:
                    88:b9:48:0c:e6:43:6b:8c:f6:d3:53:0e:7e:dc:79:
                    79:63:96:65:f8:f6:59:82:c1:19:d4:30:06:4d:c3:
                    da:4c:a1:78:89:1d:a1:e4:f3:32:9b:9e:5c:a9:1a:
                    e1:04:9b:93:dd:9a:4c:ac:c6:16:35:68:09:2c:f4:
                    9c:21:75:f4:2d:46:99:fa:a5:a2:73:bd:4f:e3:63:
                    bf:86:7c:cd:9f:01:bc:5d:6d:a9:68:ed:5a:73:65:
                    cf:47:6c:9b:4e:ba:c8:a6:ba:1e:f8:33:1f:90:c5:
                    7e:65:27:8b:cf:b9:b7:9e:f0:65:75:72:ad:76:49:
                    e1:c8:7d:50:4a:5a:41:af:d7:7b:05:9b:82:e1:d4:
                    89:13:2f:7d:74:74:1f:80:38:71:52:05:c0:cf:6a:
                    cc:c6:d6:1d:7a:ba:7f:a3:66:b5:da:bc:12:d9:c8:
                    24:f0:3c:5c:d1:74:34:ef:7c:df:3b:d1:5d:6e:d9:
                    2c:b8:36:8d:5e:e3:0a:20:11:7a:1e:b5:56:46:c6:
                    77:e5:92:7e:4d:8d:ea:d2:c1:2e:89:7c:c6:d4:30:
                    71:96:27:71:63:27:7f:4c:37:5a:dd:e4:24:7f:66:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:65:DC:4D:31:D2:D8:68:87:92:97:0C:92:27:13:76:F0:81:D5:14
            X509v3 Authority Key Identifier:
                keyid:A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/1/
                RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/1/5665DC4D31D2D8688792970C92271376F081D514.mft
                RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b905::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:af:30:65:a0:6c:d9:01:61:4c:87:34:12:63:68:fb:86:f6:
         fb:86:50:70:05:27:26:72:58:61:b9:a0:f6:64:bf:9c:f7:19:
         26:74:b1:91:9a:5c:77:f8:78:8e:d3:08:08:b7:69:f9:e1:bf:
         fa:dd:28:d8:97:16:30:99:a3:5e:3c:e7:d9:ad:50:62:16:a0:
         d1:d7:f6:61:73:80:18:a1:a2:b8:3c:74:85:81:25:2b:38:f8:
         15:80:8a:62:b4:be:ec:51:e0:2e:86:38:de:d4:f3:4d:74:b4:
         cc:4d:10:ed:f4:03:61:2c:a1:9d:d8:8d:69:d3:08:53:20:8c:
         20:b2:95:24:91:e9:18:e9:57:86:07:92:04:a7:0b:b7:09:cc:
         21:16:16:1e:17:d5:0e:93:be:46:a6:f6:3b:06:d8:44:8e:c6:
         4b:28:b2:4a:6d:67:63:65:df:ba:4f:4d:92:bc:84:f1:1d:2f:
         3b:20:6c:67:e6:26:8c:45:71:ea:f6:40:69:1a:0c:48:80:04:
         c3:26:bb:25:8a:3a:15:ea:ce:6f:ee:da:e6:a6:c6:3c:c4:a8:
         b7:d8:80:8b:69:38:14:9b:09:f3:a4:a1:8c:5f:1d:09:99:a8:
         a9:82:ad:3a:4a:cf:71:f7:9b:74:df:ba:18:64:7a:80:14:0f:
         72:d5:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:41:22 2024 by rpki-client on console-ams.rpki-client.org