Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
File:                     08tc7MITufhtu6UYUh6FRuyThhw.cer (raw, json)
Hash identifier:          sn3auUNFZE2ec7UkmqCwIKpzS8ZWpu2U1xVcfXjGY4w=
Subject key identifier:   D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D3BFED47A229714922F63406ABA40002C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 Jan 2024 15:02:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 31034
                          AS: 202242
                          AS: 202613
                          AS: 205727
                          AS: 213224
                          IP: 5.249.128.0/19
                          IP: 31.11.32.0/21
                          IP: 31.14.128.0/20
                          IP: 46.37.0.0/19
                          IP: 62.149.128.0/17
                          IP: 66.71.128.0/18
                          IP: 77.81.224.0/20
                          IP: 80.73.224.0/20
                          IP: 80.211.0.0/16
                          IP: 82.192.128.0/19
                          IP: 86.105.48.0/21
                          IP: 89.36.208.0/20
                          IP: 89.38.144.0/21
                          IP: 89.40.112.0/20
                          IP: 89.46.64.0/20
                          IP: 89.46.104.0/21
                          IP: 89.46.192.0/21
                          IP: 94.177.160.0 -- 94.177.255.255
                          IP: 95.110.128.0/17
                          IP: 176.107.128.0/19
                          IP: 185.56.8.0/22
                          IP: 185.58.116.0 -- 185.58.123.255
                          IP: 185.58.224.0/22
                          IP: 188.213.160.0/20
                          IP: 194.182.64.0/19
                          IP: 194.182.104.0/22
                          IP: 194.182.110.0/23
                          IP: 195.231.0.0/17
                          IP: 209.227.192.0/18
                          IP: 217.61.0.0/18
                          IP: 217.198.128.0/20
                          IP: 2a00:6d40::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 11:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3b:fe:d4:7a:22:97:14:92:2f:63:40:6a:ba:40:00:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 24 15:02:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:8f:95:77:4f:02:f9:75:6d:4d:97:56:ef:
                    68:ce:50:bd:e3:fa:d3:e3:db:70:be:03:97:f7:5b:
                    0f:e7:73:6d:0a:80:c2:9e:2f:63:dd:07:76:b9:2d:
                    ee:50:7c:12:21:24:77:ce:30:8b:dd:e8:6f:5f:af:
                    ad:58:37:2b:44:ff:ea:9f:74:07:18:40:15:66:61:
                    63:f7:a7:23:ae:4e:a4:e0:ef:83:e5:9d:8f:b3:4a:
                    83:0e:0b:26:5a:7e:f9:32:ef:7e:65:6a:f8:70:a0:
                    e0:76:52:32:0f:89:4e:46:71:e5:4d:b2:a7:43:f6:
                    b2:42:bf:5e:62:5a:a9:fa:95:fc:a0:b3:bf:89:bd:
                    77:4f:0e:19:87:b7:49:f4:5c:68:87:0a:a5:38:b2:
                    67:49:a8:f2:6e:74:73:43:13:b4:a5:6f:65:04:81:
                    35:d6:1b:29:e9:4c:37:9b:ad:60:17:a1:46:8e:ad:
                    be:ad:e1:a3:47:ad:f6:dc:de:79:4b:89:f0:c1:c0:
                    6e:49:f3:be:ff:4c:c2:77:87:3b:db:63:0d:4f:37:
                    d3:8a:70:5a:35:2f:a7:b5:b4:35:10:50:03:3f:79:
                    db:e1:f0:1c:7f:91:06:a6:55:24:fe:86:1c:28:91:
                    3f:be:bd:2b:05:ee:da:d6:69:dd:1f:b4:45:87:3c:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.249.128.0/19
                  31.11.32.0/21
                  31.14.128.0/20
                  46.37.0.0/19
                  62.149.128.0/17
                  66.71.128.0/18
                  77.81.224.0/20
                  80.73.224.0/20
                  80.211.0.0/16
                  82.192.128.0/19
                  86.105.48.0/21
                  89.36.208.0/20
                  89.38.144.0/21
                  89.40.112.0/20
                  89.46.64.0/20
                  89.46.104.0/21
                  89.46.192.0/21
                  94.177.160.0-94.177.255.255
                  95.110.128.0/17
                  176.107.128.0/19
                  185.56.8.0/22
                  185.58.116.0-185.58.123.255
                  185.58.224.0/22
                  188.213.160.0/20
                  194.182.64.0/19
                  194.182.104.0/22
                  194.182.110.0/23
                  195.231.0.0/17
                  209.227.192.0/18
                  217.61.0.0/18
                  217.198.128.0/20
                IPv6:
                  2a00:6d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31034
                  202242
                  202613
                  205727
                  213224

    Signature Algorithm: sha256WithRSAEncryption
         60:99:66:65:ea:70:3e:48:a2:3e:b6:70:6c:38:ef:5e:76:a6:
         41:bf:4b:e2:22:a0:d0:f1:73:da:70:af:f3:08:75:8d:72:6b:
         4b:9a:f8:e6:15:9f:7e:a6:35:42:bd:fc:9d:14:c8:4b:35:62:
         06:72:36:22:3a:3d:a3:15:c0:06:f3:f8:c2:49:1d:fe:d0:e6:
         c8:fd:ea:54:6a:cb:d4:3f:fb:be:84:c1:1c:fa:ac:35:c4:b8:
         db:f1:0f:36:c6:6f:a0:f8:a0:fc:56:38:82:20:d8:62:eb:9b:
         e9:70:ab:bc:29:a8:06:71:df:fa:ef:1d:fd:bc:15:e4:5c:a1:
         34:7f:e5:e1:4d:42:91:c2:96:6e:3c:7d:7f:c1:49:fa:7d:29:
         53:b9:d9:f3:c2:43:36:4e:28:4a:d6:5b:a3:f8:8f:47:22:2c:
         2b:4d:08:c5:7e:2c:94:d1:9b:7f:fb:8c:ab:8c:0c:5c:38:d0:
         29:9e:3a:dd:d9:0b:0e:bc:59:a2:d8:c6:46:71:8f:56:67:4b:
         88:8b:09:67:bf:74:e3:15:d8:72:62:4a:32:db:41:ea:6b:49:
         e0:ec:19:0f:43:b1:f3:d8:d1:24:23:92:5c:a5:2c:d9:95:a7:
         0e:80:c0:f7:41:ac:52:f4:28:47:68:bd:e0:95:f8:6c:e4:17:
         68:9b:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:38:55 2024 by rpki-client on console-ams.rpki-client.org