Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YxJxtcTIiRYPq80iuQcUOYdn0U.cer
File:                     0YxJxtcTIiRYPq80iuQcUOYdn0U.cer (raw, json)
Hash identifier:          jVMm9jfou7jL7Gm6AH0Ntq3XXq+ITHvi6JtVCz2YZwM=
Subject key identifier:   D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC42480B25B0C5F900766D6407B6A0935
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.91.220.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:80:b2:5b:0c:5f:90:07:66:d6:40:7b:6a:09:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d18c49c6d7132224583eaf348ae41c50e61d9f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:8e:e0:41:39:78:03:db:8b:bc:e0:da:2e:
                    ea:7e:28:a0:75:d8:e3:c6:7a:32:a4:5b:bf:19:a5:
                    ca:dc:12:8c:f0:fb:f4:2f:09:6b:6f:75:62:57:60:
                    60:31:99:b9:50:ac:69:12:02:05:6d:9f:d3:0a:0a:
                    a6:50:8d:e8:e3:a5:f7:ed:e3:7b:98:b0:6a:8a:fb:
                    88:01:fa:0a:2e:f5:c0:9f:3b:2d:34:3e:02:96:b7:
                    21:b9:f6:9e:52:b4:bc:dc:82:78:c9:63:4d:af:6e:
                    29:71:69:ac:7d:f1:e4:d3:85:ee:7f:14:0b:87:0e:
                    62:70:40:88:c0:dc:8a:5c:ea:41:ce:7f:ee:cd:41:
                    39:07:8e:53:97:31:e7:f1:14:a1:60:71:73:b1:1d:
                    06:69:c0:57:32:c7:2c:19:1b:63:95:42:0f:87:77:
                    7c:3a:ef:c1:07:50:94:d9:de:0e:a3:3f:27:8a:3f:
                    8b:3a:29:0a:ed:aa:2d:70:f9:ad:9b:be:33:3e:ee:
                    ce:26:cd:85:a3:f7:fb:e1:66:f5:bc:5d:05:9a:88:
                    e5:5f:c2:fb:af:a9:b1:9e:ab:fc:0c:cf:7f:af:7b:
                    11:b6:a6:48:fe:61:f4:06:03:fc:0f:82:c5:18:f6:
                    c7:89:e2:ba:83:ae:46:19:bd:89:b8:07:fb:7a:3e:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:29:79:6e:c0:b5:db:27:b0:00:8c:b2:96:dc:f7:15:39:0e:
         78:c9:fb:c6:d0:14:8a:d6:87:0d:08:22:b3:51:63:c1:73:3d:
         5b:10:27:2a:3d:19:3f:d5:4f:4c:10:65:92:6f:72:5e:56:da:
         63:37:c3:a8:26:26:eb:ed:81:17:e9:3a:9a:45:01:27:41:71:
         57:74:a4:94:0f:af:49:e5:4c:21:fc:05:14:6a:a8:e3:38:18:
         04:13:b7:bc:7f:99:97:a0:20:74:d0:00:7a:d5:8d:c6:ae:53:
         55:bf:36:a1:06:72:fa:15:c7:67:ff:00:e4:19:8a:54:89:92:
         e2:32:51:35:ec:23:04:59:03:4e:09:ca:8a:1e:bc:4e:4f:57:
         45:59:a8:df:e0:3a:9e:8a:e6:e1:63:c9:02:4f:17:d3:0b:dc:
         6d:7f:c4:55:97:4c:86:17:24:41:ad:89:82:e7:1b:ca:0e:39:
         b5:4c:06:13:14:d8:7c:af:87:64:b1:2c:fb:61:4b:71:4a:af:
         3a:94:50:20:05:8d:dc:07:4e:c4:23:33:95:bb:61:da:97:57:
         29:cd:55:bd:81:2e:39:e7:e3:2c:ac:45:73:cd:e1:a8:67:1d:
         fc:7d:f8:c0:b6:a5:d5:ec:22:13:e4:4e:45:82:a7:9f:49:b0:
         07:bd:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:02:44 2024 by rpki-client on console-ams.rpki-client.org