Certificate

$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.cer (raw, json)
Hash identifier:          housp/NQrT3wpqClESKpJc+buA8NGpEKQSVaZk63L84=
Subject key identifier:   C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E
Certificate issuer:       /CN=7aca2b768def8bb9544468ed5f726256c364336e
Certificate serial:       66D1526A3C28AA66BC92761D21AD7BAAFF066523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
Manifest:                 rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
caRepository:             rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
Notify URL:               https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2024 12:34:50 +0000
Certificate not after:    Tue 10 Jun 2025 12:39:50 +0000
Subordinate resources:    IP: 2a04:b905::/32

Validation:               OK
Signature path:           rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d1:52:6a:3c:28:aa:66:bc:92:76:1d:21:ad:7b:aa:ff:06:65:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e
        Validity
            Not Before: Jun 11 12:34:50 2024 GMT
            Not After : Jun 10 12:39:50 2025 GMT
        Subject: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:74:f5:21:88:8c:11:78:29:03:54:fe:81:
                    d4:69:60:51:c5:ed:67:d5:31:b3:fa:dc:72:24:6e:
                    8d:4e:cf:f5:18:ab:d8:ee:0f:f2:93:cb:45:6c:3f:
                    81:9c:fb:71:6e:0b:71:34:2e:c3:f3:9c:af:6d:00:
                    bf:36:5b:f2:d3:6f:29:fc:e3:eb:c4:a3:72:62:33:
                    de:ce:94:a9:92:10:f3:27:7c:9b:c8:04:ed:f7:d9:
                    bb:3d:79:c7:ae:52:dc:0b:b2:99:81:20:06:51:ec:
                    4d:4a:42:e7:5e:c7:84:6e:19:90:04:43:f9:47:8f:
                    cf:f4:68:38:9f:d4:15:58:66:57:f3:cc:9d:ac:01:
                    93:5f:61:e4:b3:6e:a6:47:07:ac:e5:1e:af:d6:30:
                    c4:d6:03:12:ec:25:17:16:c3:8f:2b:d5:7b:e9:d6:
                    63:f0:8e:78:7a:29:bc:3b:99:0e:f8:1e:86:7d:4a:
                    cb:a9:48:08:80:d4:32:3e:bc:38:88:14:eb:b8:4a:
                    22:1f:2f:c5:6f:c3:de:d1:32:bb:9f:8b:56:61:e6:
                    85:68:23:10:33:03:bd:5a:47:83:ef:f9:10:c4:98:
                    83:63:3a:d2:72:a9:af:54:58:05:d9:f4:71:53:e1:
                    54:79:08:e1:64:8a:f3:71:77:5a:a8:8e:39:3c:ca:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
            X509v3 Authority Key Identifier:
                keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer

            Subject Information Access:
                CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
                RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b905::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:35:29:db:3d:e8:19:bd:3d:8c:d1:2e:f0:e3:15:cc:d8:
         6b:60:29:51:dc:e6:e0:ae:d7:06:63:e8:9a:4e:a2:84:b6:4b:
         ab:f0:46:8d:05:32:7e:dc:e0:49:b9:6e:87:e5:c9:bf:da:80:
         c3:96:66:10:40:f7:ce:f0:ca:8e:df:10:93:ac:71:bc:9e:3c:
         18:bd:be:79:60:f7:27:30:5b:6f:0e:c2:53:d1:f0:c4:40:85:
         08:97:e3:3d:f7:9c:f3:22:19:72:fb:67:7e:cb:74:cc:b9:bc:
         32:95:c1:ba:98:7a:c8:33:91:8a:e6:26:bb:fd:f4:e7:18:1b:
         c4:2c:81:dd:e2:bb:78:bf:e1:5c:b8:11:44:91:ed:6f:5d:6d:
         f2:48:f7:f1:36:85:42:cd:e7:e5:d4:6b:24:48:26:63:a5:ca:
         67:d6:6c:04:b1:5b:a0:63:f0:74:cb:a8:ea:18:4d:7b:e1:1c:
         b5:34:cb:a5:67:1d:8e:77:2a:a3:a7:5d:17:9b:50:0a:da:7d:
         a0:25:15:be:3b:ae:4c:33:ed:77:8c:2f:6a:87:5c:5d:8d:dc:
         60:dd:8e:e8:5d:84:31:34:b9:1c:99:98:ab:87:de:53:89:25:
         a1:dd:5e:91:45:f7:7c:a6:1a:f6:3c:54:70:ea:7a:17:64:2f:
         0b:81:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:12 2024 by rpki-client on console-ams.rpki-client.org