Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
File:                     C2724A29EF989A4340933B8130B402DD4627A501.cer (raw, json)
Hash identifier:          4qZfpBtylNCWNbc9MZh+bMbGYXSJJ9qYkLQDr+h8MiM=
Subject key identifier:   C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       1FF2895F6DD7E14D4F5C51F3154D2F6008113AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 17:57:18 +0000
Certificate not after:    Sun 06 Jul 2025 18:02:18 +0000
Subordinate resources:    IP: 2a11:f2c0:ffc3::/48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 10:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f2:89:5f:6d:d7:e1:4d:4f:5c:51:f3:15:4d:2f:60:08:11:3a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 17:57:18 2024 GMT
            Not After : Jul  6 18:02:18 2025 GMT
        Subject: CN=C2724A29EF989A4340933B8130B402DD4627A501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:56:5f:a5:ec:86:85:f5:97:67:50:f0:c1:
                    db:6d:c2:cf:5d:76:f3:59:f2:15:39:0e:20:ba:0e:
                    3e:98:0d:9f:f3:7f:28:35:48:25:78:99:8c:1e:ce:
                    bd:8e:16:40:a9:fa:3f:01:69:ef:e3:e5:d5:c7:0c:
                    0d:a4:63:40:9b:ae:80:7b:3a:56:e0:db:e9:a4:4d:
                    5b:58:46:a9:05:d9:d5:51:ad:e3:cd:ef:a6:c5:9b:
                    8d:49:b7:af:3c:93:92:09:f2:d3:e1:15:e4:f1:68:
                    29:bc:ba:28:70:10:50:f4:55:6d:56:c1:87:87:f8:
                    6d:e8:4f:3a:72:a3:e0:49:01:c1:9e:ec:76:18:ca:
                    01:b2:6d:92:63:02:8d:d7:02:a6:86:14:cb:ac:6a:
                    1b:a5:6e:a0:25:e5:54:ad:05:fd:89:71:2a:15:52:
                    c0:68:91:4a:cf:86:8e:ea:d5:0f:11:53:6f:0c:3a:
                    0a:fe:ee:db:ea:1c:4a:b8:0c:b5:80:5b:24:9c:c7:
                    ea:fb:76:b5:b0:d5:8b:f8:ee:ae:6d:80:c0:85:04:
                    e4:03:46:2c:58:4a:97:4a:6d:85:21:14:b7:f4:cb:
                    6d:3d:fa:0d:ef:4b:01:a6:e2:9a:a4:77:4f:97:44:
                    32:6a:ff:e2:7b:5f:58:f6:40:37:79:2e:ee:fd:ae:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc3::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:b9:54:17:7a:89:d6:e5:8a:f6:93:9b:ea:37:f0:02:e4:28:
         53:0c:a3:61:62:ac:d3:e1:bf:bb:a2:a2:ab:aa:35:8b:38:be:
         90:d2:0a:2f:75:dc:9c:d0:19:38:ff:03:ed:27:86:78:eb:78:
         c5:0b:57:4f:de:cb:6f:32:a0:0b:68:d9:d8:92:52:8c:a6:2f:
         1d:cc:98:ef:25:54:24:79:f5:e4:6e:ea:ea:15:08:78:64:06:
         ab:ff:e3:8f:fd:37:b4:28:3d:dc:3c:b7:6c:68:d3:a0:b4:9d:
         e1:58:26:7e:ef:04:16:18:98:87:7e:dd:67:71:ea:92:2a:f8:
         36:c0:38:f1:ff:47:54:48:90:f5:38:af:86:2d:68:36:0a:04:
         88:ba:c0:44:1a:a3:08:bb:8f:06:2c:44:1e:42:90:c9:0f:ce:
         e4:0e:a3:14:70:bd:5c:c0:4f:5b:99:4e:ef:af:15:70:fd:2e:
         7d:51:14:f2:f9:18:c2:44:50:84:c6:85:dc:e6:82:36:e3:7a:
         01:3e:9d:a6:d5:0d:c0:0c:66:e8:de:1f:f4:31:29:da:3a:c8:
         dd:85:ff:92:d8:15:89:b3:c8:1e:e6:55:dc:90:fb:92:fb:01:
         01:71:47:89:28:e8:30:0b:2c:b0:67:37:5b:cf:6d:7e:e2:d3:
         d5:05:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 14:48:54 2024 by rpki-client on console-ams.rpki-client.org