Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.cer (raw, json)
Hash identifier:          WeVLUQ994c8jaSD/vZewO7ymFHzCgFBEriIkDUbBgEw=
Subject key identifier:   44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       08227BF6C41E188829E3DB8C8ECFF04BCE59EE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 17:13:50 +0000
Certificate not after:    Sun 06 Jul 2025 17:18:50 +0000
Subordinate resources:    IP: 2a11:f2c0:fe00::/40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:22:7b:f6:c4:1e:18:88:29:e3:db:8c:8e:cf:f0:4b:ce:59:ee:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 17:13:50 2024 GMT
            Not After : Jul  6 17:18:50 2025 GMT
        Subject: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:38:0e:56:5a:81:99:08:d3:e1:98:07:9a:
                    dd:d1:cb:cf:ca:f5:55:b8:b4:5c:d4:2b:ed:31:5b:
                    01:de:80:ce:86:81:8b:79:8c:b0:d3:c4:f7:70:38:
                    49:a7:bc:cf:b6:9c:cf:fd:da:5d:38:fc:bb:82:07:
                    17:35:bd:4d:31:12:62:d7:e0:c3:3f:bc:90:58:e0:
                    3a:1d:af:02:f4:a9:68:0b:61:79:15:37:94:da:cd:
                    78:6c:91:86:33:ee:9a:ca:46:3d:d4:19:ea:b6:10:
                    c4:32:b6:da:24:76:ff:0e:df:b4:27:b5:de:3e:95:
                    01:a6:09:e6:99:08:f6:f8:0c:69:6f:d6:1d:c0:4c:
                    5b:7b:58:fd:ba:9b:64:5c:f6:10:5e:2c:1b:69:41:
                    9b:43:31:24:3b:ce:34:10:32:67:01:32:b9:dc:03:
                    5f:c9:40:39:71:c1:8d:66:80:a9:52:af:23:fc:b0:
                    07:1d:49:fb:4f:e2:14:be:bd:25:41:61:9c:16:3c:
                    1d:ea:dc:7b:23:65:01:c6:82:93:a5:a0:1d:cb:39:
                    e2:aa:53:c6:87:0f:97:f7:a9:01:b7:a9:df:2d:15:
                    cc:19:87:00:7f:62:1a:59:88:ad:29:f3:64:86:67:
                    af:1a:c3:26:05:4a:af:02:8f:8d:55:0a:38:a3:5e:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:53:a4:e8:7e:9a:1d:e7:90:49:67:30:72:c9:6a:e5:8e:da:
         6f:cf:19:aa:db:5d:db:9b:ca:01:f0:08:8f:1a:82:ef:8e:d9:
         5c:00:c8:00:f4:da:44:fd:30:42:d4:0e:51:94:4d:bc:2d:bc:
         42:20:27:e8:13:0c:27:94:a1:c6:74:f3:72:a9:96:bb:84:70:
         54:4f:41:fa:82:cf:2c:f0:ae:28:ca:49:32:0e:f7:39:be:d2:
         79:38:ef:bb:a0:73:1f:e5:47:a8:b2:95:2a:f8:01:fe:fb:2a:
         3b:03:75:42:cf:df:a2:d6:6c:18:59:5b:fa:4c:13:de:41:cd:
         e6:2e:ce:95:cb:35:59:6b:ff:32:98:ed:d1:c1:6d:b9:f2:87:
         30:5e:e7:64:c6:72:52:dd:ba:02:48:bf:70:1c:73:ca:15:c2:
         85:04:f5:f9:7e:09:69:70:05:ba:75:49:71:82:4e:30:7d:ad:
         98:c5:44:a0:21:4b:c3:88:f8:27:5c:3e:7b:3e:36:63:67:13:
         f2:9d:d4:7c:68:5f:6d:2b:ab:89:91:8b:40:0d:18:9d:c9:66:
         4f:3e:b5:6b:2f:45:9f:c1:60:88:60:7c:91:79:8f:1a:50:1a:
         a5:88:c1:ce:1c:85:25:04:85:d5:74:3f:ec:81:76:7b:5c:68:
         02:5c:91:96
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUCCJ79sQeGIgp49uMjs/wS85Z7iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA3MDcxNzEzNTBaFw0yNTA3MDYxNzE4NTBaMDMxMTAvBgNV
BAMTKDQ0QzRDOTEzRDU4RjVFRjg0Nzk5NjI0MUU5NjlCNjBBMUUzRjEzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLzgOVlqBmQjT4ZgHmt3Ry8/K
9VW4tFzUK+0xWwHegM6GgYt5jLDTxPdwOEmnvM+2nM/92l04/LuCBxc1vU0xEmLX
4MM/vJBY4DodrwL0qWgLYXkVN5TazXhskYYz7prKRj3UGeq2EMQyttokdv8O37Qn
td4+lQGmCeaZCPb4DGlv1h3ATFt7WP26m2Rc9hBeLBtpQZtDMSQ7zjQQMmcBMrnc
A1/JQDlxwY1mgKlSryP8sAcdSftP4hS+vSVBYZwWPB3q3HsjZQHGgpOloB3LOeKq
U8aHD5f3qQG3qd8tFcwZhwB/YhpZiK0p82SGZ68awyYFSq8Cj41VCjijXpihAgMB
AAGjggLaMIIC1jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRExMkT1Y9e+EeZ
YkHpabYKHj8TiTAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfZDBmMmRiOTlmZTFkNGIzNmI5MzAxYzgyMTIyMGZlM2EvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5
MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgAqEfLA/jANBgkqhkiG9w0BAQsFAAOCAQEAFFOk6H6aHeeQSWcw
cslq5Y7ab88Zqttd25vKAfAIjxqC747ZXADIAPTaRP0wQtQOUZRNvC28QiAn6BMM
J5ShxnTzcqmWu4RwVE9B+oLPLPCuKMpJMg73Ob7SeTjvu6BzH+VHqLKVKvgB/vsq
OwN1Qs/fotZsGFlb+kwT3kHN5i7Olcs1WWv/Mpjt0cFtufKHMF7nZMZyUt26Aki/
cBxzyhXChQT1+X4JaXAFunVJcYJOMH2tmMVEoCFLw4j4J1w+ez42Y2cT8p3UfGhf
bSuriZGLQA0YnclmTz61ay9Fn8FgiGB8kXmPGlAapYjBzhyFJQSF1XQ/7IF2e1xo
AlyRlg==
-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:45 2024 by rpki-client on console-fra.rpki-client.org