Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
File:                     F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (raw, json)
Hash identifier:          hrMuYbNbolBn5qHPBhq39VGP7XcpBY94Nz1TdYn99Kw=
Subject key identifier:   F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       4EDE228A488CFD27F8D6AE2EF933A7FEF993F506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 18:00:35 +0000
Certificate not after:    Sun 06 Jul 2025 18:05:35 +0000
Subordinate resources:    IP: 2a11:f2c0:fff4::/48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:de:22:8a:48:8c:fd:27:f8:d6:ae:2e:f9:33:a7:fe:f9:93:f5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  7 18:00:35 2024 GMT
            Not After : Jul  6 18:05:35 2025 GMT
        Subject: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:61:8e:29:ca:9f:df:ed:88:2a:30:15:5a:
                    fa:8a:89:62:99:95:0f:ec:b7:8c:d7:33:d8:c4:88:
                    ee:e4:0a:9b:82:ea:ea:cd:96:c7:7f:f1:91:18:f7:
                    ac:ba:a7:c1:18:01:15:5d:b1:5f:3d:af:85:db:bd:
                    59:b3:82:fc:95:7b:18:89:2b:c3:98:9d:0d:07:af:
                    35:09:6e:f9:bc:49:35:95:0f:5d:2f:6e:5b:18:78:
                    78:2e:01:4f:fb:69:f1:64:eb:cb:17:0d:64:d5:0d:
                    c4:0b:57:fe:69:c6:aa:6a:df:26:fc:e0:30:f9:bb:
                    a0:33:c1:7d:56:04:2c:74:d9:e8:a0:76:89:93:49:
                    b2:fe:af:1b:58:df:39:ab:31:b7:28:e1:07:86:8a:
                    3e:5c:ba:d1:a3:d4:18:63:94:de:c0:18:69:3b:91:
                    1b:ac:c4:2e:d9:b1:0a:56:8c:3f:ef:7b:b4:a7:d8:
                    b3:66:8e:31:72:25:bc:f0:9b:d5:c6:e0:0d:53:7b:
                    15:8c:c5:77:91:c2:8c:46:d4:0c:48:ca:57:ed:1c:
                    ea:48:ea:8f:70:e3:d2:09:73:6b:8f:72:b0:48:dc:
                    6f:1b:4d:63:35:fd:3b:48:39:36:8d:2d:98:ec:68:
                    22:32:fd:94:21:2e:97:8b:55:19:f6:80:db:48:b9:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff4::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:ec:c4:b3:fe:9b:15:67:ca:35:d5:6d:e3:e8:b6:11:d0:14:
         2e:ad:2e:ae:3f:d7:d8:c8:a7:e9:44:75:1f:f8:0b:b8:42:45:
         83:55:07:60:90:8f:03:97:8d:f0:f8:42:66:a6:0d:e0:4a:f2:
         89:8c:f1:39:fb:e7:c4:2d:6b:8c:49:9b:6e:17:fb:01:8d:e9:
         7c:fe:46:cd:8e:6a:ce:fd:b0:1f:d8:6f:cd:92:65:62:1e:68:
         9f:73:e4:56:0f:60:8a:33:60:42:ef:c9:16:10:ca:a4:b0:fb:
         28:de:ef:1d:ee:23:a8:81:a6:c9:d0:25:5d:c2:48:2d:be:12:
         eb:5e:e4:80:9d:a9:02:c5:b9:e2:85:16:16:dc:10:41:77:b6:
         fe:e0:8f:82:2b:45:48:ad:9c:6e:44:fd:b7:41:22:f7:18:0a:
         94:20:55:80:4d:00:8f:b1:a1:1c:03:68:f6:06:a3:46:57:e0:
         c2:25:53:da:4a:fd:42:67:36:67:84:34:e2:90:6d:e6:cb:7a:
         cf:f1:26:b8:ea:89:4a:0a:bc:7d:af:9c:66:33:47:1d:8c:8c:
         e8:29:e2:00:46:05:3a:3d:4f:cf:f0:6c:4f:70:8d:da:6d:c8:
         0d:87:af:a7:c0:95:53:b1:48:24:4f:3e:4e:f7:88:7f:f8:d8:
         ad:fe:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 16:02:55 2024 by rpki-client on console-fra.rpki-client.org