Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
File:                     AEF766F103B2EF99DF8C71978A7FE519D730B155.cer (raw, json)
Hash identifier:          UXcM05D/ECouvVrNwzwe9ugxGgF4pcIye3Jkxbz2/pM=
Subject key identifier:   AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       3A55C86021A6775ACC2B41DF4E161B02B7AD65B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Thu 18 Jul 2024 04:45:18 +0000
Certificate not after:    Thu 17 Jul 2025 04:50:18 +0000
Subordinate resources:    IP: 2.56.254.0/24
                          IP: 2.59.148.0/23

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:55:c8:60:21:a6:77:5a:cc:2b:41:df:4e:16:1b:02:b7:ad:65:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jul 18 04:45:18 2024 GMT
            Not After : Jul 17 04:50:18 2025 GMT
        Subject: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:33:5b:a9:b8:66:f7:91:68:b6:40:40:a0:
                    6a:b1:84:0d:bd:f7:16:e5:76:87:2e:73:ea:f0:53:
                    90:be:0f:a4:7c:8b:22:15:b9:18:86:ec:26:2d:0c:
                    17:2f:77:3a:37:fd:09:60:43:97:c6:f4:18:12:66:
                    52:a1:9e:aa:3e:09:2a:22:c4:13:94:1c:97:3e:00:
                    32:1e:cd:38:f3:8f:3f:01:cf:81:b2:46:0b:cf:28:
                    2a:45:ee:32:de:3f:aa:3e:36:2a:43:bc:d0:d9:f8:
                    d2:b4:75:22:45:29:25:01:d5:83:86:af:6a:08:e4:
                    b4:eb:90:81:73:9c:b7:07:f4:bf:2b:d4:f7:17:61:
                    ae:b7:dc:f4:7d:05:3f:6f:0d:f0:9f:bd:93:30:47:
                    c7:92:c7:10:c4:13:6e:07:bd:d0:6b:d4:92:cd:a2:
                    61:17:83:64:74:a1:5a:16:4b:2f:21:da:28:1a:ae:
                    b5:08:de:a4:8d:61:f6:69:7f:14:ba:81:79:25:12:
                    20:b8:fb:2a:6a:19:34:96:8d:9a:4a:4e:18:55:9a:
                    6a:a7:91:e9:9b:ea:db:e1:81:3f:09:86:81:fe:42:
                    ab:1b:f8:ad:d6:d2:b1:ec:ff:db:94:63:01:23:fe:
                    84:70:4a:d0:bf:1e:bb:54:84:f0:fc:b6:b6:ff:2b:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.254.0/24
                  2.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:71:ca:be:4e:cc:be:75:59:15:c8:2f:55:36:1e:c5:6d:c6:
         58:ee:1a:1e:a1:c2:6d:a4:28:a0:57:7d:b6:8b:05:d7:c2:63:
         0f:b4:4d:7b:62:7b:18:a2:ec:59:4d:2a:bd:f5:7d:97:0a:47:
         33:ba:65:df:f4:10:1f:f0:20:9b:fb:70:08:b3:57:5d:25:2b:
         7c:7c:d9:b9:b6:0e:e1:89:a7:86:53:81:2b:b4:34:4a:82:3f:
         18:4f:87:4b:97:5c:62:ed:2a:6e:14:19:f6:ad:93:a8:d4:20:
         86:73:ce:71:c4:fc:f6:73:6d:92:e9:b0:c4:fd:e6:f5:60:16:
         a5:fc:23:63:f2:6d:37:ff:8e:61:05:55:64:a8:e1:56:c9:8a:
         fc:cc:57:82:ff:ae:dd:fe:08:24:c0:61:11:b3:14:e3:b4:14:
         4f:e5:57:f0:12:db:ad:3e:1b:64:b1:8f:42:59:f7:5c:ad:79:
         3c:02:ec:56:0f:c8:5e:e3:14:53:5b:45:bd:ee:de:cc:a9:84:
         b4:97:c7:ba:1b:fc:a7:35:42:d1:40:c2:95:73:7c:da:f1:e8:
         ed:ec:91:ff:85:50:76:3e:87:54:a0:18:ec:29:06:95:af:bc:
         8c:77:fc:db:eb:6d:03:13:10:a5:9b:f1:14:0f:fd:ae:80:ba:
         a9:74:de:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:16 2024 by rpki-client on console-ams.rpki-client.org