Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
File:                     04SkGZfu6k0F_MfNQLEhE6W7aeg.cer (raw, json)
Hash identifier:          YhzTGKuBZuYQBNkH/KgJNSGb9c+M1hama0oMgbSgE2g=
Subject key identifier:   D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D1216EBE9E3A960CDBBB68537A43E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:37 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 21222
                          IP: 193.8.16.0/20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:12:16:eb:e9:e3:a9:60:cd:bb:b6:85:37:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:97:4d:f7:1d:d6:1a:0b:c7:36:de:b3:cb:
                    fe:cd:df:b7:de:a4:6d:66:eb:0c:33:25:00:99:46:
                    75:4d:81:7a:e9:54:bd:0a:37:c8:30:98:7b:d0:7a:
                    60:98:5b:4a:b4:72:a0:82:75:c5:b4:6e:5a:00:1c:
                    6f:f0:43:0a:bb:37:1d:98:3a:84:49:25:06:2a:a9:
                    5f:07:4a:86:ee:52:83:7a:13:f6:fc:e1:9a:74:b4:
                    38:e5:1c:4a:fb:26:ec:12:3d:83:1b:d7:54:88:d5:
                    8e:3c:43:5d:51:55:40:37:10:33:7d:96:51:d2:15:
                    5a:28:f4:05:f9:d3:a9:88:2f:71:d5:4d:30:7d:3d:
                    48:f6:29:1a:88:f4:f1:e1:cc:4e:a2:8f:0c:03:05:
                    d4:82:99:f3:ef:7d:fc:7e:59:60:18:6f:b3:63:2d:
                    78:4b:3b:3e:2d:b8:d8:34:08:39:00:df:24:a9:98:
                    eb:8e:83:8f:9a:d8:af:09:6d:49:d1:e0:62:fd:e9:
                    d4:ec:a9:52:f8:15:37:0e:59:fd:4d:02:58:9c:0c:
                    77:ce:4b:20:93:0b:80:77:ff:34:bd:49:f2:fb:05:
                    1b:bc:31:bf:e3:25:11:79:2c:75:ff:df:2c:38:76:
                    9f:c6:31:72:30:24:47:0b:14:37:06:66:0b:d0:09:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.16.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21222

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:0d:45:e7:bb:47:36:8e:b1:8f:39:4d:c6:f7:a1:86:9c:
         1f:0e:d4:19:ca:5b:c7:2d:f9:ed:e8:33:85:fb:22:9c:c5:c2:
         fd:5c:56:f1:39:b2:ac:8c:e4:ac:6c:66:13:52:fa:9d:31:f7:
         53:f4:4c:76:cc:c9:3b:fd:29:02:cd:7b:b5:17:47:da:27:c5:
         05:ef:c2:df:98:85:4e:b3:49:30:45:24:14:f7:1e:16:73:07:
         64:d5:09:bd:d9:7e:31:dd:66:bd:9b:f4:23:80:98:66:b6:2a:
         1b:d3:8e:70:62:52:7a:a1:a1:10:72:2b:cf:f7:28:1e:59:07:
         19:c3:95:92:5e:ed:cd:6c:4f:ab:9c:be:ea:5e:4e:5b:20:4a:
         b8:96:b4:a6:5b:58:d5:8f:c3:82:b2:b4:c4:25:80:39:b2:c7:
         11:1e:18:73:a8:c6:87:c9:95:0e:e1:4d:60:bf:32:d7:e4:b3:
         a3:14:7f:7c:f3:9b:97:2f:c1:ad:75:3f:fa:f3:30:c1:63:82:
         f6:32:1d:b3:23:80:b4:92:2f:90:e4:62:b0:c6:65:7d:0f:ca:
         69:22:32:6d:68:46:03:3c:1b:28:5b:4d:ea:24:7d:cf:af:0d:
         a2:34:ec:44:b1:63:dd:22:e6:15:49:b1:0e:1a:79:1d:88:00:
         53:ef:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:02:29 2024 by rpki-client on console-fra.rpki-client.org