Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer
File:                     92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer (raw, json)
Hash identifier:          TxQYolIpFKPt+Z1JpxNVOjCzF9wmIcG7BtZE4l/bqMc=
Subject key identifier:   92:E5:04:33:A3:DE:A8:21:0E:FF:11:82:AA:2F:52:08:42:7A:AE:C6
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       6C7362E373F3D2C143B248279CF7B1620D37C17A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 19:07:49 +0000
Certificate not after:    Wed 22 Oct 2025 19:12:49 +0000
Subordinate resources:    IP: 2a07:54c1:d000::/36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Oct 2024 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:73:62:e3:73:f3:d2:c1:43:b2:48:27:9c:f7:b1:62:0d:37:c1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Oct 23 19:07:49 2024 GMT
            Not After : Oct 22 19:12:49 2025 GMT
        Subject: CN=92E50433A3DEA8210EFF1182AA2F5208427AAEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:ee:07:11:b5:b4:c3:75:40:9b:a9:b3:4c:
                    6b:a8:95:5b:5b:c3:40:fe:76:63:ce:ec:10:0a:08:
                    d4:00:15:33:b9:4f:4a:79:59:8d:b7:8d:4c:e4:4c:
                    31:4b:20:c1:a5:ca:83:ac:c8:65:d0:f2:f6:e7:d0:
                    0f:20:99:ab:c6:02:85:8b:c9:12:43:94:ba:dc:62:
                    4a:14:79:70:9d:e6:b9:28:38:f1:a3:01:89:43:3c:
                    37:ae:39:e4:d7:a2:43:0a:88:de:be:88:e5:a4:72:
                    7b:5f:0d:7f:66:0c:2e:0c:23:fd:2c:4d:b6:9e:4f:
                    b6:5a:fc:82:9e:38:f1:12:b4:95:b8:0e:c4:19:cb:
                    1b:0a:fa:31:e8:74:c9:28:88:8b:17:7b:38:9b:4e:
                    30:58:2d:76:48:b4:fe:48:da:10:42:44:cc:16:3b:
                    53:1c:24:43:cf:d2:8d:2a:7d:22:34:2d:7c:30:54:
                    36:96:9e:19:5c:e8:9e:ac:ca:9d:b4:8a:17:3d:a4:
                    78:a2:f6:75:98:74:ea:0e:07:c8:6a:f1:4d:1a:be:
                    d0:ad:4f:4d:48:30:09:c0:c9:aa:42:5d:b2:29:e1:
                    1f:f4:7b:cf:a4:47:90:b0:1f:ca:2c:7a:4e:98:00:
                    54:12:79:68:b1:27:00:d2:38:93:8f:da:3b:c4:0c:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:E5:04:33:A3:DE:A8:21:0E:FF:11:82:AA:2F:52:08:42:7A:AE:C6
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:6d:d2:7d:bb:67:61:35:70:cf:6c:71:16:24:3e:30:d0:
         ee:75:03:6e:df:91:29:cc:4e:15:b4:3b:a4:1f:cb:f1:57:8c:
         e8:98:fa:80:5e:51:4c:89:25:d9:ba:e6:7a:70:03:f9:65:6e:
         8d:8c:91:ba:c9:c4:d8:0a:44:f4:b1:96:b3:80:e9:c3:92:5f:
         4d:4c:af:ab:98:28:1c:b5:c5:86:11:5a:f9:d8:8e:bc:d7:42:
         c4:3a:a5:62:bf:87:0b:10:33:61:03:25:af:2a:63:7a:eb:7a:
         b1:17:cc:3a:92:bc:a2:54:77:a5:7b:01:12:62:eb:98:53:55:
         93:a5:41:5f:b5:24:54:40:01:74:98:24:e2:f1:67:f4:eb:32:
         35:b1:b4:95:45:4f:2e:0b:f7:d1:3a:f9:22:5e:44:65:90:85:
         58:1c:42:dc:98:cc:e1:49:98:25:24:47:e2:b7:85:bc:58:c3:
         7d:5f:2c:9b:3c:10:29:3e:98:78:2a:e6:02:f6:a7:6b:2c:2c:
         b2:47:d5:29:ac:57:cd:98:94:e7:3a:f3:b6:04:13:ab:cd:46:
         4c:d5:a8:28:1f:18:20:ec:81:e6:59:ec:e0:b3:92:23:80:b2:
         ab:3a:18:08:13:45:5f:fb:02:12:df:fc:cc:4e:d2:15:f3:94:
         fc:75:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:17 2024 by rpki-client on console-fra.rpki-client.org