Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
File:                     0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer (raw, json)
Hash identifier:          tqbzBvonpmqDXHNolsQ57uM5eJ6A/liny++UJB6jp18=
Subject key identifier:   D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B90D0348908AC21803EDFA4E012AB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:31:05 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.238.142.0/24
                          IP: 2a12:56c0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:0d:03:48:90:8a:c2:18:03:ed:fa:4e:01:2a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:31:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:f1:fd:49:7b:ac:cc:f0:a8:d8:82:fa:ec:
                    c4:ec:7d:fb:5d:45:ba:09:13:ca:90:4c:6e:a1:28:
                    f4:bd:08:e3:c4:96:2f:62:6e:e5:1b:94:ca:38:00:
                    bc:e3:5e:23:d3:68:56:e5:71:c3:45:5e:07:fe:bd:
                    56:17:3c:08:af:88:d4:76:df:8c:aa:02:7c:b2:b2:
                    a8:8d:fb:05:68:54:31:1b:85:10:5a:00:fa:12:8f:
                    42:ca:28:c7:fa:e1:5c:1d:69:a5:21:85:18:cc:35:
                    e6:ab:cd:8e:99:b7:d8:02:3a:18:d9:c1:6b:00:a0:
                    10:7f:f6:2b:3b:88:4b:ef:1b:c3:c9:75:b1:ff:11:
                    05:f2:9f:ee:23:66:92:a6:fc:2a:57:e0:fd:cd:30:
                    ad:dc:e5:71:3e:d1:fa:22:ee:7d:e3:41:81:65:05:
                    01:1c:b5:ad:ea:af:89:3a:42:00:ac:ef:4b:73:30:
                    5f:17:6d:6c:b0:7c:b5:f6:91:47:e2:cb:e8:12:e9:
                    83:d7:a3:d5:06:1e:36:85:0b:84:ec:ab:5f:9a:96:
                    76:78:79:3d:fc:08:6c:5e:11:d3:92:45:00:ae:4b:
                    bf:2b:a8:fb:58:d2:8a:67:43:00:25:be:fe:7d:27:
                    a2:f9:6c:25:39:48:d8:9f:2e:c6:07:dd:52:7a:8a:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.238.142.0/24
                IPv6:
                  2a12:56c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:94:02:67:39:f7:51:43:f6:1c:cd:91:9f:35:31:a8:67:31:
         3b:f8:ad:00:35:9f:c2:27:d1:ba:e5:46:b7:81:fb:72:d4:98:
         7b:c4:0e:fd:af:f1:e6:53:ae:73:ca:ca:4f:cc:c2:02:c6:ea:
         33:d8:62:f2:01:a6:8e:fa:a0:e7:ec:4a:f0:0d:ad:e7:d5:e7:
         88:57:c4:50:72:ab:dd:17:b2:6e:30:f4:23:11:07:5c:26:21:
         5b:18:9d:83:85:ab:28:da:7f:4d:d5:45:2e:61:99:b1:64:23:
         66:a9:ce:b3:e6:54:59:61:0c:65:c9:8e:33:66:93:4c:7e:3f:
         29:37:11:df:e8:03:30:28:2d:88:6a:19:7d:59:45:10:d2:67:
         d3:c8:a9:08:2c:f2:fb:5c:c2:64:71:dc:5a:23:1c:a6:10:a2:
         96:6c:15:32:34:a2:e3:4e:e9:75:dd:fe:9b:ec:d5:03:ef:5a:
         41:b8:d9:c9:06:ae:34:60:f8:2d:bc:bf:2c:47:c7:ec:c4:52:
         64:de:4b:a9:c8:a1:59:9f:32:06:21:b1:8e:b1:45:6c:f7:fc:
         9e:41:aa:bb:32:10:5d:63:bb:6b:c9:c6:f7:d4:f4:35:17:9a:
         39:d9:9f:36:9f:23:e0:67:60:0d:84:ce:e3:c8:77:92:21:b4:
         4d:3b:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:08:20 2024 by rpki-client on console-fra.rpki-client.org