Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
File:                     04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (raw, json)
Hash identifier:          2lYT3gtC49tqrkD3HaWeKlDKSbKBNwQiIvyLld9YaQk=
Subject key identifier:   04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       25406D9362C618EDAF24059A144ED4534B5AFB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest:                 rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
caRepository:             rsync://rpki.cc/repo/MythicalKitten/15/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 11:49:23 +0000
Certificate not after:    Wed 13 Aug 2025 11:54:23 +0000
Subordinate resources:    IP: 2a14:6f45::/36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 13:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:40:6d:93:62:c6:18:ed:af:24:05:9a:14:4e:d4:53:4b:5a:fb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Aug 14 11:49:23 2024 GMT
            Not After : Aug 13 11:54:23 2025 GMT
        Subject: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:34:34:84:22:35:a8:07:af:3d:8a:7b:d1:
                    1f:b5:68:0e:33:bb:35:99:c9:0f:b1:dd:a9:ab:60:
                    bf:d2:7d:e8:9c:4d:a4:36:fa:1c:2f:ed:57:bb:f8:
                    3d:a5:c4:7c:79:04:be:83:82:39:f8:9f:62:a5:49:
                    9a:3c:17:f7:ed:8a:9f:19:e2:47:72:dc:94:19:9e:
                    91:e0:f3:01:97:50:ea:eb:67:d8:9d:4d:38:ff:ec:
                    a1:ae:d8:eb:d3:b1:e5:cf:2c:31:a1:cd:7a:48:f7:
                    60:7a:7a:b7:7c:f1:33:07:66:25:6a:8a:da:5b:c8:
                    78:64:68:26:fe:e5:87:be:ae:ac:84:9f:0d:40:dc:
                    3a:46:68:e4:81:96:5d:cb:3f:ff:20:21:e6:14:cd:
                    32:1d:eb:c2:0b:68:cc:d6:19:73:a0:ff:4b:a5:2c:
                    fc:3c:a6:e7:e2:0d:11:26:9e:79:2e:8d:05:36:ce:
                    ed:01:56:23:9a:d4:55:2e:20:be:6a:5a:35:58:4f:
                    10:fa:f9:67:23:fe:72:f5:2a:93:a0:69:dd:ea:9b:
                    64:1c:04:3e:62:9c:7f:5a:77:2e:7d:43:fa:28:37:
                    90:ec:26:c7:30:d0:f4:70:7a:03:87:d6:5c:c3:27:
                    7b:99:fa:d1:3f:af:18:cd:d9:23:c1:b9:7e:79:1c:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/15/
                RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:9f:09:cf:eb:ad:3f:a9:16:8e:0c:47:d2:b2:2c:2c:80:
         7f:f2:70:05:8d:d0:3e:6e:00:b7:82:0e:91:f7:b7:2b:d8:a5:
         63:5a:09:8c:2c:58:f3:c7:44:60:cf:5a:4f:94:e4:c0:77:4f:
         f4:ba:a5:fe:0c:9a:2a:fb:ed:e9:5a:d0:04:0d:a8:ef:2a:00:
         38:d2:08:fa:50:c3:55:c8:45:fa:a6:04:af:13:e8:01:21:fb:
         c5:f5:5d:67:a0:05:ea:6b:ed:29:e8:d2:2e:5d:52:10:34:4f:
         63:eb:e2:83:e6:cc:97:b1:76:9e:22:d2:82:b3:e1:3b:9d:51:
         0d:2c:f7:1b:9f:a2:52:b6:14:85:98:81:40:b5:e9:aa:35:38:
         f1:44:76:53:bd:bf:be:38:35:05:e1:50:70:b2:80:5a:aa:38:
         fc:fa:9a:50:a5:ec:e9:3c:5a:70:65:a4:da:5d:80:5a:5d:8c:
         8e:ea:b8:34:91:ca:21:16:01:27:e4:36:a7:8d:cb:4d:08:9c:
         9c:48:99:29:f6:35:42:fe:f7:7f:7b:e8:4f:43:56:ad:dc:f5:
         9e:57:23:0f:86:eb:22:28:b4:76:66:cc:ce:c7:be:09:18:ca:
         bf:98:fb:15:f4:68:a8:33:57:5d:42:d8:16:62:fe:7c:85:6c:
         ae:21:8f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:02 2024 by rpki-client on console-ams.rpki-client.org