Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/39AEFE2BA3F5A831FA397B7789C10D57E5D8BAD5.cer
File:                     39AEFE2BA3F5A831FA397B7789C10D57E5D8BAD5.cer (raw, json)
Hash identifier:          u8eHhi3SLvnE0fIj/CFSaOuqlELBJbXxIkXJu3+3kSw=
Subject key identifier:   39:AE:FE:2B:A3:F5:A8:31:FA:39:7B:77:89:C1:0D:57:E5:D8:BA:D5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       3D8103B1448ADFFC1D9D32D5DE6E1299FBF3C09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/2/39AEFE2BA3F5A831FA397B7789C10D57E5D8BAD5.mft
caRepository:             rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/2/
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Tue 15 Jul 2025 06:51:39 +0000
Certificate not after:    Tue 14 Jul 2026 06:56:39 +0000
Subordinate resources:    IP: 2a06:1285::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:81:03:b1:44:8a:df:fc:1d:9d:32:d5:de:6e:12:99:fb:f3:c0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 15 06:51:39 2025 GMT
            Not After : Jul 14 06:56:39 2026 GMT
        Subject: CN=39AEFE2BA3F5A831FA397B7789C10D57E5D8BAD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:37:91:f9:eb:36:16:2e:6d:4a:4f:32:91:
                    05:fb:25:cc:23:74:00:d1:4c:29:06:7d:f7:b7:73:
                    84:4a:89:0e:a9:e6:ca:5b:cf:7d:78:dd:3a:08:eb:
                    6e:01:b6:44:b9:d5:3e:fe:2c:23:db:a5:3b:aa:22:
                    e8:fd:ff:31:59:1c:53:1a:1c:8e:12:0b:2e:31:f3:
                    ce:81:ba:f3:dd:18:b7:10:88:a6:78:22:88:6e:58:
                    f4:53:b0:96:7e:bb:a4:28:b7:44:e4:ec:58:b1:fa:
                    c4:10:1b:c4:db:31:e1:4f:44:d8:27:c8:f0:33:2a:
                    e1:95:14:be:55:f7:c8:5a:20:a4:72:09:ac:2b:6d:
                    4d:24:cb:3d:da:91:d2:f9:ae:4f:5c:60:6d:2c:c6:
                    b0:07:e6:87:ce:fc:e0:49:84:c0:2a:a9:6d:a4:66:
                    f7:c1:1b:a2:11:b5:f2:da:19:91:5b:6c:b1:80:61:
                    c5:18:f7:cc:ec:eb:73:f9:9e:37:27:f6:77:60:74:
                    23:8d:15:c7:f5:02:83:36:81:42:58:39:f1:06:8b:
                    12:21:21:ab:c2:59:e7:66:49:67:83:c3:1c:e4:c5:
                    83:e6:c9:12:e8:0d:e2:aa:d0:5c:c4:a7:a5:36:11:
                    8b:60:a2:42:a6:3e:dc:0e:47:a7:14:5e:64:21:82:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:AE:FE:2B:A3:F5:A8:31:FA:39:7B:77:89:C1:0D:57:E5:D8:BA:D5
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/2/
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/2/39AEFE2BA3F5A831FA397B7789C10D57E5D8BAD5.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:70:12:21:d6:54:32:a9:66:8c:fe:6d:bd:5c:56:34:4a:
         0f:3b:62:71:0b:50:1d:da:07:29:0f:96:01:4e:c5:b8:c9:df:
         47:26:01:d3:6c:0a:b2:b6:aa:a4:d0:18:0d:4c:ab:4f:57:6f:
         b6:62:54:42:df:3a:c2:95:d0:55:2d:2e:b7:7d:43:f2:0e:ab:
         55:c5:72:0b:30:e8:27:42:a1:22:2a:1d:06:dc:b8:0b:09:86:
         38:42:3b:f2:07:1f:36:95:1b:57:97:ce:c3:52:cf:19:68:b2:
         c4:22:50:65:1e:0c:46:54:f6:71:7d:3a:7c:c8:b1:ae:ad:50:
         6a:c8:fe:3d:1e:fc:e6:6f:e2:af:9f:9f:59:32:65:87:3a:2e:
         eb:29:19:35:3e:c0:20:29:c1:9d:d5:ab:f7:c0:a0:9c:c2:86:
         eb:29:82:2d:a6:c1:08:c7:8b:84:69:8c:7b:27:d6:f4:b2:d3:
         07:2e:66:23:ec:65:05:2f:50:36:ae:03:19:8b:5f:b7:8e:fb:
         78:0a:16:80:d7:ba:aa:c2:1e:7d:69:d8:d0:2e:ae:d5:31:e9:
         80:d3:9c:c9:bd:f4:00:6c:e2:b1:01:9e:26:32:16:4c:af:7b:
         81:ed:c8:fc:4e:f1:4f:53:52:23:a5:24:2f:53:6b:62:6e:ad:
         ce:2f:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:14 2025 by rpki-client