Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
File:                     6482EA67DB858D1440DD67B955223E4341BA4E97.cer (raw, json)
Hash identifier:          oiZH7YJPFw+jMvSLiyEhlgvVDv7T4hzpqgfjYYX6YmA=
Subject key identifier:   64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       59B82BB9D65D42E528603B93989DCACDCD81CC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 18:01:23 +0000
Certificate not after:    Sun 06 Jul 2025 18:06:23 +0000
Subordinate resources:    IP: 2a11:f2c0:fff9::/48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b8:2b:b9:d6:5d:42:e5:28:60:3b:93:98:9d:ca:cd:cd:81:cc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 18:01:23 2024 GMT
            Not After : Jul  6 18:06:23 2025 GMT
        Subject: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:2d:05:c4:ff:f9:32:53:00:04:a6:55:e8:
                    45:1a:e8:05:a8:76:2f:72:a6:fa:2a:bc:92:dd:16:
                    04:8a:31:34:df:42:20:75:0e:6e:2e:71:21:a8:a6:
                    41:35:58:01:de:67:77:2e:8b:02:9d:aa:25:95:05:
                    47:ca:31:5b:94:be:80:b6:e9:f1:82:44:e5:48:ae:
                    f3:cc:61:05:05:db:ca:2c:15:42:79:9b:b0:15:20:
                    45:8f:7a:e3:85:c3:81:fd:d6:55:33:76:f8:73:b2:
                    17:82:03:e2:7d:29:7a:26:8e:83:75:11:23:bc:ca:
                    fd:99:76:d4:70:a0:e3:be:af:c4:fe:ff:65:50:7e:
                    15:f3:0b:00:d3:46:8c:bb:92:bc:d9:e8:48:b2:1f:
                    12:cf:98:6d:3e:15:6b:6e:d7:28:bb:2f:c0:14:66:
                    42:88:6f:81:17:5e:0d:4c:82:a9:ca:e1:d1:fb:97:
                    24:a9:74:7e:6e:f9:17:d5:95:e6:9b:e8:4f:6a:26:
                    e9:ab:c2:3c:0f:90:76:bc:a5:e6:07:1b:59:0b:9b:
                    58:43:c7:c1:0b:73:53:08:a4:e6:bc:76:19:ab:b3:
                    80:f9:1c:1d:d1:cb:c5:7f:28:5b:0d:73:17:c1:72:
                    00:e8:d6:4e:3c:17:17:48:1b:cb:8a:2b:7c:be:d9:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:65:a5:cb:a7:8f:b1:66:2d:c2:f0:61:93:2d:d5:78:f7:
         2b:4f:90:17:6f:0b:60:c5:2a:87:bd:11:67:6a:7a:8f:3f:38:
         c4:5f:b2:85:3c:35:5a:31:eb:e8:5b:c8:13:ab:13:ee:0a:55:
         44:5e:bd:27:01:25:da:50:3e:a4:e6:f3:1b:fd:ad:33:0f:e7:
         e0:8b:da:57:a3:13:5b:db:1c:63:56:9a:0a:27:5d:a4:ee:e2:
         4b:e6:6e:5b:62:d1:2f:bb:91:79:93:c2:ce:95:66:8c:e8:e0:
         49:76:b8:8e:cd:77:d6:13:2c:f0:41:34:21:22:f6:4b:cf:87:
         64:35:c7:f8:47:82:d2:59:8b:c1:81:0c:d3:28:78:35:c5:a0:
         22:39:af:04:04:24:7b:92:6e:b5:08:f5:b6:65:b1:15:23:35:
         b6:e7:d9:4f:49:fa:93:cb:6b:f6:4b:cf:a4:de:fb:10:37:8f:
         56:b4:0e:79:55:b9:40:e1:a4:c7:a3:5a:2b:87:7b:a6:e3:45:
         69:0c:05:ae:93:a1:4a:ea:4a:60:9c:9d:06:c3:95:87:02:2a:
         fb:d1:4f:56:58:95:c8:c8:0c:9c:f4:b6:23:df:cb:37:8b:67:
         36:d0:a2:d4:0b:29:23:4b:54:da:fc:eb:97:af:57:3b:3b:1f:
         42:d1:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:45 2024 by rpki-client on console-fra.rpki-client.org