Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
File:                     69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (raw, json)
Hash identifier:          B/+QWDHzyOr9SJLC4npzSctgEQuTvpsRqvyFt5a8rhQ=
Subject key identifier:   69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       02B64A86977B2B4E6022BA815300C5A29700FCE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 17:59:00 +0000
Certificate not after:    Sun 06 Jul 2025 18:04:00 +0000
Subordinate resources:    IP: 2a11:f2c0:ffcf::/48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 10:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b6:4a:86:97:7b:2b:4e:60:22:ba:81:53:00:c5:a2:97:00:fc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 17:59:00 2024 GMT
            Not After : Jul  6 18:04:00 2025 GMT
        Subject: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:a6:86:b6:d4:2d:c0:4e:03:e3:2d:36:73:
                    f9:a8:75:2f:eb:c3:1d:27:73:88:54:22:ad:3c:09:
                    ba:46:c4:df:bc:4a:0d:3c:9f:72:72:60:24:c5:d9:
                    a4:af:7d:60:d0:85:91:97:17:45:a5:19:c3:4c:2b:
                    ff:17:34:2a:3b:81:8f:fc:7d:ac:0b:b6:49:d3:75:
                    b0:32:38:b1:ff:65:cc:68:6d:71:d0:a0:c3:1d:fc:
                    f5:3e:e9:2c:14:f8:42:73:4e:3b:25:7f:59:2d:bd:
                    90:1b:e4:85:31:c5:c0:82:84:6e:b0:eb:6e:16:45:
                    e5:ca:b0:08:e4:7e:5b:43:f1:58:b4:32:6f:6e:72:
                    7e:c4:3d:68:f1:60:7e:17:29:0c:03:ba:ca:a5:06:
                    b6:0f:3a:75:52:02:8c:1a:47:3b:d6:27:1a:c6:ce:
                    51:dc:91:f2:90:d2:96:0c:de:63:55:9e:0f:2a:7e:
                    d8:a1:02:96:56:af:f6:b8:a3:06:87:cb:53:c0:d3:
                    eb:44:d9:d5:d3:8d:cb:9e:db:76:65:56:78:4f:2d:
                    a0:c4:1a:91:92:2e:5f:a7:2f:35:59:16:55:6b:53:
                    56:2d:2b:fc:f2:5e:fe:fb:74:d3:8c:3f:00:a4:de:
                    34:01:c2:1f:92:d4:f1:bb:a3:00:96:c6:0c:e0:cc:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffcf::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:0e:9c:39:6e:6b:01:7d:5a:ae:79:b4:99:51:a8:a4:f0:
         01:63:c9:b2:ec:63:ac:f7:4b:5f:2e:16:1f:fd:14:45:01:9e:
         e8:c0:d2:ff:69:bd:3f:13:37:d1:e4:9b:cd:ab:e6:17:41:a1:
         3d:dc:d4:1e:ae:e8:f8:3a:52:7e:9e:59:3a:66:97:da:d8:c0:
         67:0a:76:5f:0b:89:01:83:d1:45:76:9b:b1:e5:7d:bf:4b:8c:
         13:11:68:b8:b6:0c:89:d3:3c:a4:13:7f:c5:04:2f:e5:4d:5b:
         69:2c:f3:f1:4b:6a:fe:0e:ef:e1:66:44:04:47:e5:b7:28:d4:
         c5:c2:38:19:8b:97:11:53:8d:5c:ef:a5:32:e2:ca:99:80:91:
         8a:83:40:ed:92:9d:8d:c5:84:8a:6b:fe:4b:cf:14:cb:69:58:
         40:a0:28:23:c9:a8:da:9f:7c:97:f9:3a:c1:81:dd:92:b8:e2:
         a6:df:3b:27:8f:1b:89:15:fb:36:d6:bb:c3:6e:5c:ed:00:62:
         56:82:43:46:73:b2:19:76:2b:58:ab:fe:4f:44:2a:37:32:7c:
         a8:e7:21:72:e2:df:dd:ad:50:6c:1d:e8:fc:a2:6e:8c:12:6d:
         07:dd:f5:1f:a2:e7:a4:47:20:01:20:5a:b4:86:19:ad:bc:9e:
         55:92:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 14:48:54 2024 by rpki-client on console-ams.rpki-client.org