Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
File:                     067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (raw, json)
Hash identifier:          DM6fQZpfJqwr++cZFN5Ufiwk89NVOo53hInfNCVxyVA=
Subject key identifier:   06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       350E2E3105E1056F739EDFC2E9F995D8F8352E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 17:57:28 +0000
Certificate not after:    Sun 06 Jul 2025 18:02:28 +0000
Subordinate resources:    IP: 2a11:f2c0:ffc4::/48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0e:2e:31:05:e1:05:6f:73:9e:df:c2:e9:f9:95:d8:f8:35:2e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 17:57:28 2024 GMT
            Not After : Jul  6 18:02:28 2025 GMT
        Subject: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:1e:84:d4:70:42:d8:43:54:a0:6e:fa:4d:
                    01:b0:20:8f:6b:83:a9:ae:30:a6:25:cd:09:77:25:
                    ca:a5:9e:1c:41:e3:3d:6f:bc:9c:0f:e1:c4:f9:c2:
                    58:e2:4f:ad:27:f0:5d:bb:d7:a5:12:10:8b:c4:3d:
                    af:f3:af:e4:9f:b7:56:0c:61:c8:58:6b:52:5f:ed:
                    60:16:86:b2:79:15:68:a0:be:a3:bf:54:b1:c2:ab:
                    58:90:58:d8:1b:0d:9e:d1:52:6b:0b:de:0e:df:5f:
                    93:c8:39:37:60:ac:19:d4:4c:20:0e:06:f7:32:f9:
                    61:9b:9d:0f:ce:03:49:35:da:bb:66:4d:1f:58:6d:
                    7b:1a:b5:9e:4f:16:a4:f7:8a:39:13:a1:72:11:e3:
                    87:54:ac:f2:d3:dd:4a:13:67:a1:a7:38:dc:21:0c:
                    ff:32:62:07:bd:7f:79:d8:6c:09:b3:6c:e7:15:d2:
                    08:64:f7:65:24:d2:64:46:1a:47:b7:8c:f3:db:83:
                    ed:da:8b:78:e0:e2:a6:39:18:23:95:c1:33:ed:77:
                    54:55:06:62:8a:47:bf:24:65:9b:13:09:5f:7f:0b:
                    76:77:fb:65:36:85:e0:1d:f3:b0:f2:59:e0:05:dc:
                    7e:e1:78:0f:29:39:a7:c8:ae:8e:f0:3d:b0:8b:a7:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:31:ef:1c:5a:94:99:21:15:e9:af:ba:49:8c:89:8e:cc:
         11:c2:3a:42:10:db:d8:96:01:d7:77:8a:29:9a:8b:ea:87:cb:
         23:a5:d7:cf:7e:df:e8:08:15:f5:60:49:72:e5:d7:74:b7:bc:
         ba:81:48:ec:de:04:67:b7:e3:7a:06:11:d3:8d:67:68:99:ab:
         e8:70:85:aa:c3:5d:a6:cd:97:33:e5:dd:af:26:23:93:a2:51:
         f1:90:55:fc:c6:c1:95:52:fd:8f:23:c6:60:96:86:41:99:15:
         aa:e2:26:55:8d:21:d2:b2:a2:ab:13:ca:d2:3d:ea:d8:a0:d3:
         69:5e:31:f8:b4:cb:c0:d1:c4:b3:60:a9:39:d2:1c:27:96:f8:
         d4:ec:c4:cb:aa:17:80:f8:ee:bb:fd:16:b1:a0:2a:fa:ec:04:
         27:7e:59:b4:96:a1:1e:26:8c:fc:37:08:6b:1c:81:73:45:cf:
         c8:8e:45:d2:fb:06:4f:f5:ca:9f:8a:3c:94:89:b0:fc:d1:45:
         79:28:81:a2:b5:dc:6d:ec:c8:b2:3f:ca:dd:c1:6e:24:7a:77:
         82:a3:52:f0:66:ec:cd:6c:f8:40:94:ad:bd:e6:c5:6e:ab:0b:
         0f:c5:f8:3d:a8:a6:5f:1b:c5:83:83:00:c1:54:eb:56:ed:b9:
         47:5d:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:45 2024 by rpki-client on console-fra.rpki-client.org