Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/9682B2FF0EB7AE18049761215DA092A02BD2405E.cer
File:                     9682B2FF0EB7AE18049761215DA092A02BD2405E.cer (raw, json)
Hash identifier:          sfTrV6pq3UNV5+SFSEma986Vd/AYpInm5lK0E8eQSik=
Subject key identifier:   96:82:B2:FF:0E:B7:AE:18:04:97:61:21:5D:A0:92:A0:2B:D2:40:5E
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Certificate issuer:       /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial:       2A213CC50F7FDE427F6F19E6E284E96EE5AAC3F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/3/9682B2FF0EB7AE18049761215DA092A02BD2405E.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/3/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 03:29:41 +0000
Certificate not after:    Mon 09 Dec 2024 03:34:41 +0000
Subordinate resources:    IP: 2a06:9f44:b000::/36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:21:3c:c5:0f:7f:de:42:7f:6f:19:e6:e2:84:e9:6e:e5:aa:c3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
        Validity
            Not Before: Dec 11 03:29:41 2023 GMT
            Not After : Dec  9 03:34:41 2024 GMT
        Subject: CN=9682B2FF0EB7AE18049761215DA092A02BD2405E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:2c:20:d4:fd:8f:00:bf:50:68:39:de:e0:
                    5d:ca:1f:5d:fd:18:22:24:97:01:20:c8:4f:7a:87:
                    b0:6a:74:0f:38:5d:44:72:c1:7c:78:79:7b:56:a6:
                    4c:0c:04:66:7f:00:07:97:5c:d4:7f:95:25:a7:93:
                    cc:7f:d8:e6:99:a7:d6:bd:9f:d9:38:80:3a:1f:bf:
                    72:ca:1a:5f:56:53:26:4b:25:7c:2d:34:10:ec:21:
                    7c:9d:06:40:37:15:cd:75:51:ae:58:ef:6f:14:31:
                    c3:1e:a2:11:2d:3d:36:81:e8:d8:87:a7:55:eb:de:
                    f6:9d:31:ad:43:c2:41:1e:7a:a2:84:34:a8:2a:f5:
                    4a:7c:6b:6a:43:4b:d7:41:18:f5:e9:2d:73:15:3b:
                    7e:7a:e1:37:20:d0:16:88:00:3e:0b:1c:03:36:4b:
                    d3:19:09:72:08:36:cb:a4:e2:71:cd:4c:a5:f7:bb:
                    c4:18:dd:ba:11:55:bf:78:7b:b8:ae:3c:f7:bd:d5:
                    7f:af:e3:61:e1:e5:25:98:7d:53:a4:c6:93:3a:dc:
                    1f:88:d1:f7:17:d6:b6:1a:0c:c7:c7:c2:7c:74:e6:
                    82:d6:cd:c7:b6:12:05:a4:7f:56:c5:15:aa:19:6f:
                    81:f7:88:fd:e6:59:0f:f6:04:49:21:fa:4a:76:d5:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:82:B2:FF:0E:B7:AE:18:04:97:61:21:5D:A0:92:A0:2B:D2:40:5E
            X509v3 Authority Key Identifier:
                keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/3/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/3/9682B2FF0EB7AE18049761215DA092A02BD2405E.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:16:c7:12:a3:ab:f8:bd:ab:b3:9a:a9:e2:a5:ac:55:9a:
         6c:3e:2c:44:b9:9a:c0:8a:6a:3a:95:b3:53:7e:fb:ff:91:92:
         c2:68:a3:6a:b7:90:f2:ec:5e:a6:95:94:be:48:64:dd:26:71:
         ec:c7:92:68:e5:b2:2e:70:56:eb:54:a4:b6:fc:ce:8b:a4:d4:
         6f:d6:a1:59:03:98:78:f9:f3:a8:ad:31:ed:5e:a8:90:c0:10:
         1b:1c:7f:ff:27:1a:85:13:e5:a8:28:bd:03:84:60:ca:10:eb:
         e3:ab:c7:5c:02:f5:6a:79:8b:80:bc:86:51:b9:7a:9f:68:46:
         95:a9:8b:d1:e5:2c:ab:d0:0b:55:2a:82:e9:cf:6c:5d:b3:47:
         a1:ef:fa:ea:0d:77:49:95:a8:1b:41:f0:49:e4:10:e5:ed:04:
         8b:55:f3:01:58:6a:42:61:0e:b7:5d:ae:41:c9:6a:e2:fd:40:
         c0:f4:10:1f:5a:94:91:d5:c5:02:72:e6:e7:f9:e2:07:62:03:
         87:1f:ba:1a:34:c5:38:71:71:80:25:6b:a2:48:0d:d0:1a:88:
         5b:3f:53:c1:5a:90:20:04:c3:f4:91:70:0d:a0:42:58:be:16:
         a0:57:4d:dd:7a:b2:4e:cd:a5:01:a4:f4:f4:11:73:68:ed:cc:
         10:f9:78:7d
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUKiE8xQ9/3kJ/bxnm4oTpbuWqw/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk1NDJDRjVCMDkyM0E5MDExMDMzRTJGN0NBNTQzRDZB
MjVBNDhDMTAeFw0yMzEyMTEwMzI5NDFaFw0yNDEyMDkwMzM0NDFaMDMxMTAvBgNV
BAMTKDk2ODJCMkZGMEVCN0FFMTgwNDk3NjEyMTVEQTA5MkEwMkJEMjQwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJrywg1P2PAL9QaDne4F3KH139
GCIklwEgyE96h7BqdA84XURywXx4eXtWpkwMBGZ/AAeXXNR/lSWnk8x/2OaZp9a9
n9k4gDofv3LKGl9WUyZLJXwtNBDsIXydBkA3Fc11Ua5Y728UMcMeohEtPTaB6NiH
p1Xr3vadMa1DwkEeeqKENKgq9Up8a2pDS9dBGPXpLXMVO3564Tcg0BaIAD4LHAM2
S9MZCXIINsuk4nHNTKX3u8QY3boRVb94e7iuPPe91X+v42Hh5SWYfVOkxpM63B+I
0fcX1rYaDMfHwnx05oLWzce2EgWkf1bFFaoZb4H3iP3mWQ/2BEkh+kp21TklAgMB
AAGjggLNMIICyTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWgrL/DreuGASX
YSFdoJKgK9JAXjAfBgNVHSMEGDAWgBS5VCz1sJI6kBEDPi98pUPWolpIwTAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWUyNzJlOC1kNzBhLTQ3
OTMtOGFjNi1mM2Y0YTcyYWU5Y2EvMS9COTU0MkNGNUIwOTIzQTkwMTEwMzNFMkY3
Q0E1NDNENkEyNUE0OEMxLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9COTU0MkNGNUIwOTIzQTkwMTEw
MzNFMkY3Q0E1NDNENkEyNUE0OEMxLmNlcjCB+gYIKwYBBQUHAQsEge0wgeowOgYI
KwYBBQUHMAWGLnJzeW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3JrL3JlcG8va29t
b3JlYmkvMy8wZgYIKwYBBQUHMAqGWnJzeW5jOi8vcnBraS5rb21vcmViaS5uZXR3
b3JrL3JlcG8va29tb3JlYmkvMy85NjgyQjJGRjBFQjdBRTE4MDQ5NzYxMjE1REEw
OTJBMDJCRDI0MDVFLm1mdDBEBggrBgEFBQcwDYY4aHR0cHM6Ly9ycGtpLmtvbW9y
ZWJpLm5ldHdvcms6MzAzMC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoG
n0SwMA0GCSqGSIb3DQEBCwUAA4IBAQBaVxbHEqOr+L2rs5qp4qWsVZpsPixEuZrA
imo6lbNTfvv/kZLCaKNqt5Dy7F6mlZS+SGTdJnHsx5Jo5bIucFbrVKS2/M6LpNRv
1qFZA5h4+fOorTHtXqiQwBAbHH//JxqFE+WoKL0DhGDKEOvjq8dcAvVqeYuAvIZR
uXqfaEaVqYvR5Syr0AtVKoLpz2xds0eh7/rqDXdJlagbQfBJ5BDl7QSLVfMBWGpC
YQ63Xa5ByWri/UDA9BAfWpSR1cUCcubn+eIHYgOHH7oaNMU4cXGAJWuiSA3QGohb
P1PBWpAgBMP0kXANoEJYvhagV03derJOzaUBpPT0EXNo7cwQ+Xh9
-----END CERTIFICATE-----
Generated at Fri May 24 01:34:15 2024 by rpki-client on console-ams.rpki-client.org