Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
File:                     1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (raw, json)
Hash identifier:          VtSiizIVzuEtmr7qRFAByqMcndhT2nY0iaO92uHEcB0=
Subject key identifier:   1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       58B513E5B5705B9C5675D4F664548A42A64F878E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 18:14:59 +0000
Certificate not after:    Sun 06 Jul 2025 18:19:59 +0000
Subordinate resources:    IP: 2a11:f2c0:fc00::/40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b5:13:e5:b5:70:5b:9c:56:75:d4:f6:64:54:8a:42:a6:4f:87:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 18:14:59 2024 GMT
            Not After : Jul  6 18:19:59 2025 GMT
        Subject: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:dc:7c:30:c7:1d:01:4f:6b:41:bb:ec:b4:24:
                    46:e4:ff:fb:42:b7:c5:ff:28:88:65:cc:b6:7a:21:
                    08:61:d4:04:b6:6b:c5:92:fe:1f:8f:ee:4b:81:15:
                    b5:5e:00:f5:bc:1e:06:02:23:b6:aa:27:d1:a0:cb:
                    20:61:08:45:44:c7:ff:70:10:0a:31:4e:44:78:49:
                    97:c8:02:6c:e6:0d:f1:aa:0d:74:22:0e:13:ea:d6:
                    23:12:1f:5c:55:91:87:5b:a2:3c:c3:c4:5c:8a:6d:
                    a3:e0:46:6e:e0:65:f6:ed:90:5c:f5:47:13:7d:e1:
                    1e:b1:c8:05:61:28:58:b8:39:fa:95:b6:13:f6:35:
                    10:6d:c4:93:71:65:7d:df:e3:c9:a0:b8:63:b1:b1:
                    1a:76:c2:6a:5a:e4:d0:ea:7c:60:34:57:33:83:27:
                    2c:06:1a:28:09:db:a4:c8:17:e8:26:f8:6d:44:7e:
                    44:77:38:af:b8:16:c6:45:81:21:87:88:13:b4:bd:
                    67:22:ff:58:84:6f:84:ca:58:59:ab:f8:3d:76:71:
                    8e:ce:30:bb:64:90:8f:e5:e0:1b:e4:6e:27:ea:01:
                    ca:ca:d5:da:9f:51:9c:04:c9:8e:ae:11:85:aa:f4:
                    aa:63:ac:2a:3a:af:50:59:3d:c5:b6:04:1e:f2:6a:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:c5:32:f2:4c:c1:60:7a:8c:13:1e:1c:00:41:af:de:a9:
         c2:ae:ff:db:27:18:21:99:37:e6:0d:0c:04:85:fc:a0:7d:bb:
         47:14:75:0d:f2:57:57:3f:fd:96:c6:00:31:46:1f:1d:9c:81:
         9d:66:09:78:07:8e:cf:ae:61:74:1e:4f:ba:5a:68:51:f9:95:
         54:58:9d:a7:7d:e0:b3:a9:03:ab:2c:6d:b0:c4:4d:de:6f:22:
         d0:fd:e7:50:14:8d:b7:87:d7:0b:de:c9:38:cf:a5:b9:7d:a3:
         e8:7a:c9:33:84:54:8e:f1:61:4a:6e:eb:28:68:bd:d8:10:b2:
         fd:a4:9f:f2:e1:7f:dd:5a:e1:43:f6:1b:bd:8c:3a:01:49:1f:
         74:ef:2a:49:8d:4c:b3:20:9d:7f:11:6d:a9:b2:f7:e3:20:fe:
         c2:4e:d0:2e:2c:50:88:9f:58:89:06:0c:5d:f0:8e:89:ab:6c:
         76:82:ec:a2:28:14:f5:ce:7d:8e:0b:0d:47:56:82:5b:12:21:
         48:0c:76:cf:69:09:8d:93:70:c8:b8:28:12:b4:d8:6e:d0:55:
         51:1a:18:f3:02:71:52:bf:7f:65:00:bf:49:67:ae:c9:06:18:
         eb:7e:7f:5e:52:f3:d6:8e:74:92:9e:ee:5f:bb:00:04:3a:54:
         9f:0c:96:ae
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUWLUT5bVwW5xWddT2ZFSKQqZPh44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA3MDcxODE0NTlaFw0yNTA3MDYxODE5NTlaMDMxMTAvBgNV
BAMTKDFBQkIwOEQ0MUE1QTY5NzQzMjBEOTc4ODc3NjlBMTVCQTZCN0VGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD53Hwwxx0BT2tBu+y0JEbk//tC
t8X/KIhlzLZ6IQhh1AS2a8WS/h+P7kuBFbVeAPW8HgYCI7aqJ9GgyyBhCEVEx/9w
EAoxTkR4SZfIAmzmDfGqDXQiDhPq1iMSH1xVkYdbojzDxFyKbaPgRm7gZfbtkFz1
RxN94R6xyAVhKFi4OfqVthP2NRBtxJNxZX3f48mguGOxsRp2wmpa5NDqfGA0VzOD
JywGGigJ26TIF+gm+G1EfkR3OK+4FsZFgSGHiBO0vWci/1iEb4TKWFmr+D12cY7O
MLtkkI/l4BvkbifqAcrK1dqfUZwEyY6uEYWq9KpjrCo6r1BZPcW2BB7yalupAgMB
AAGjggLaMIIC1jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQauwjUGlppdDIN
l4h3aaFbprfvcTAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfYjNkYTU3ODVmMGM4NDFhYzhkZDgxNWI3MzU0NjIzZGYvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4
RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgAqEfLA/DANBgkqhkiG9w0BAQsFAAOCAQEAN/zFMvJMwWB6jBMe
HABBr96pwq7/2ycYIZk35g0MBIX8oH27RxR1DfJXVz/9lsYAMUYfHZyBnWYJeAeO
z65hdB5PulpoUfmVVFidp33gs6kDqyxtsMRN3m8i0P3nUBSNt4fXC97JOM+luX2j
6HrJM4RUjvFhSm7rKGi92BCy/aSf8uF/3VrhQ/YbvYw6AUkfdO8qSY1MsyCdfxFt
qbL34yD+wk7QLixQiJ9YiQYMXfCOiatsdoLsoigU9c59jgsNR1aCWxIhSAx2z2kJ
jZNwyLgoErTYbtBVURoY8wJxUr9/ZQC/SWeuyQYY635/XlLz1o50kp7uX7sABDpU
nwyWrg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:24 2024 by rpki-client on console-ams.rpki-client.org