Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
File:                     5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (raw, json)
Hash identifier:          xeRI6FzlQmsY78+dgAi7lL6uMj4GvTYbygtkggLl9xg=
Subject key identifier:   5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       6B7FCA1E1E39D16CF462FD5D9E2366FAF4DC4F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 18:01:05 +0000
Certificate not after:    Sun 06 Jul 2025 18:06:05 +0000
Subordinate resources:    IP: 2a11:f2c0:fff7::/48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:ca:1e:1e:39:d1:6c:f4:62:fd:5d:9e:23:66:fa:f4:dc:4f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 18:01:05 2024 GMT
            Not After : Jul  6 18:06:05 2025 GMT
        Subject: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:17:1b:b3:12:7d:1c:47:66:3f:cc:2e:f7:
                    34:70:ad:75:b3:50:77:b3:9c:25:4c:ad:10:a2:f8:
                    76:20:47:29:df:62:90:96:13:f1:5d:f0:a5:a6:f6:
                    0e:39:f9:40:59:d0:2a:60:8f:06:06:f3:90:20:18:
                    4b:95:6b:47:02:4f:c2:98:c3:93:c9:cf:87:70:24:
                    a7:33:72:9b:81:f9:fc:79:97:8e:85:4b:11:ef:ee:
                    fc:af:01:a5:08:b1:78:03:dc:3f:32:1b:82:cf:cd:
                    5a:94:01:8d:cb:1c:4b:66:db:15:2f:14:ae:e9:65:
                    86:59:ce:52:a7:99:b3:c9:3b:0a:9c:38:a1:f9:7f:
                    76:39:b9:32:c6:3d:bb:cc:4f:b2:f2:1d:48:9e:2f:
                    36:39:98:9c:2b:56:66:2a:0d:74:1b:d8:83:43:da:
                    09:0b:12:c7:15:0c:94:26:05:b8:33:08:01:d2:af:
                    6e:46:6d:50:06:91:4a:7c:42:eb:e5:74:84:15:d6:
                    0b:df:be:d7:e1:ac:78:5a:10:60:18:f1:39:63:e3:
                    70:a6:a7:35:bb:f1:33:0d:93:04:80:c2:19:c8:ec:
                    92:24:fb:08:2a:c8:f1:84:0b:84:15:51:2c:6f:16:
                    3c:72:85:bf:35:f5:a7:8a:7d:9c:8d:1c:e9:a8:72:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff7::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:3a:5d:f0:7c:42:82:4b:36:ab:78:d6:8e:9b:a1:8d:52:
         17:52:e5:ac:dc:02:06:4f:db:6c:82:aa:59:12:78:95:00:4c:
         24:2e:a0:5f:65:40:af:1a:cc:e9:7c:4b:c5:41:ec:3f:23:b5:
         32:e9:31:83:eb:7f:78:82:a8:f2:69:2a:18:3e:4b:ba:38:fd:
         dd:e6:1c:0d:8a:f9:03:0d:76:8f:2d:90:4d:8d:99:38:95:d1:
         f6:6b:f2:1e:96:c0:f1:10:1e:19:03:4c:b7:5c:f7:e3:95:08:
         ba:f0:99:be:06:39:08:43:fe:03:64:d3:1d:98:5c:06:3f:f7:
         f9:9a:57:4c:0d:9d:76:fb:33:ff:21:2e:6e:ee:64:fd:3c:1b:
         d3:22:a0:e5:23:d6:65:67:eb:af:62:5b:5a:da:81:94:be:19:
         7f:a9:e3:71:31:79:7e:dd:e1:07:b5:94:c8:c5:e1:18:47:55:
         e8:03:2a:c7:1f:81:b1:5b:76:65:8a:8e:09:b1:7d:16:18:43:
         2d:d7:88:4e:2f:77:6a:c0:94:6b:42:c9:bc:5a:2f:13:54:a7:
         64:31:2c:d0:a6:d5:7a:53:04:09:9e:8f:77:c1:d6:53:99:1e:
         65:a8:72:44:f0:a4:d5:21:ff:ad:b6:b3:c2:ec:14:c3:7b:23:
         84:99:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:05:28 2024 by rpki-client on console-ams.rpki-client.org