Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
File:                     UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer (raw, json)
Hash identifier:          QlzF5BFKNkTAOH2ByWFwPGrZQQkuReBX9JAhM96j6bE=
Subject key identifier:   50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F0108516850E178E95242E4711EABCAEC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 21 Apr 2024 14:21:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209528
                          IP: 45.135.64.0/22
                          IP: 185.162.136.0/22
                          IP: 2a09:2bc0::/32
                          IP: 2a0e:8940::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:01:08:51:68:50:e1:78:e9:52:42:e4:71:1e:ab:ca:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 21 14:21:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:16:51:85:27:7e:80:98:89:18:33:53:8f:
                    84:34:10:db:c7:28:ea:20:1d:58:fa:59:3c:63:e4:
                    64:05:db:17:9e:ec:73:e7:4a:50:4b:7b:c8:db:81:
                    54:38:c9:47:e2:da:62:d4:26:a0:2e:e8:37:bd:65:
                    bf:8c:96:49:fc:7a:e7:78:29:d6:10:15:ab:e6:d6:
                    a2:73:5e:f3:37:72:da:ad:12:27:15:14:bb:74:84:
                    97:8a:6e:81:73:10:47:a5:98:b7:bf:85:94:f3:42:
                    ce:61:21:45:e4:f0:a2:8e:60:d2:74:b6:09:43:91:
                    43:31:7e:f4:d1:b3:73:a5:41:c8:63:6d:56:24:5c:
                    be:21:ad:01:1a:98:39:ca:88:45:5a:ae:2f:81:c2:
                    40:c7:c6:ff:d8:d1:aa:bb:4c:ef:04:b9:80:bd:76:
                    73:7d:6e:62:6f:c6:13:85:8c:dc:3f:c1:0d:34:e0:
                    b2:20:47:96:06:f1:8a:7f:0e:4c:8d:4a:94:3e:3b:
                    5d:d8:64:6b:36:a4:f6:37:cb:5b:65:21:d3:ae:a5:
                    3b:f1:5c:38:cd:39:d0:94:f1:ae:f8:b9:fc:a0:56:
                    22:b2:d8:87:24:cb:a9:78:b0:a8:ba:e7:e1:53:30:
                    7f:79:aa:22:e2:89:38:9d:a8:ce:8c:f8:d8:fe:b4:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.64.0/22
                  185.162.136.0/22
                IPv6:
                  2a09:2bc0::/32
                  2a0e:8940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209528

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:bf:2d:66:c7:0b:e6:7d:7a:1c:4b:aa:7a:0a:80:c1:4c:
         18:e8:5c:2f:23:33:4f:81:f3:8f:76:13:f4:ee:59:35:e5:4c:
         b5:fd:35:15:3b:95:80:d0:ca:32:e0:93:e9:69:3d:c4:36:8b:
         09:29:c7:1f:97:47:6a:db:25:18:1d:f4:dc:d7:44:05:23:47:
         d9:fc:4b:65:8a:c1:94:14:8b:dd:a9:2d:97:0a:db:22:ab:25:
         c4:ba:39:9a:58:90:8c:f8:99:66:19:0a:af:e7:41:1f:11:fd:
         1f:f5:c1:1f:eb:99:e8:04:a0:d6:ce:5b:ff:7b:f2:c4:01:3b:
         94:24:ba:58:b9:39:8f:87:0b:6d:91:21:76:94:be:97:f6:66:
         a4:09:02:6c:81:a7:32:ab:28:ff:81:56:ba:2d:0b:6a:47:fb:
         69:d5:ae:4f:eb:8b:86:b6:04:1b:bb:d4:04:87:9f:63:06:2a:
         42:59:b4:65:18:20:81:3d:61:e5:25:9a:cb:f7:27:23:e6:d3:
         a2:7f:5a:d9:8f:4f:36:6e:08:7e:1b:2b:85:8a:95:c9:93:cc:
         a5:21:1e:94:d4:e3:35:1a:46:8a:a1:7d:5a:ff:09:d1:a9:31:
         a8:43:de:43:e8:f1:f7:47:75:b0:84:cd:ee:ec:52:df:30:6a:
         5d:39:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:33:46 2024 by rpki-client on console-ams.rpki-client.org