Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer (raw, json)
Hash identifier:          wLW6SRnWAB+A2VvOQFQSsup6dk8nYOWxwNLqrW4LxcI=
Subject key identifier:   D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7274EC19C3355CB0846817422134EF5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:31:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206317
                          IP: 185.54.72.0/22
                          IP: 2a01:ba20::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:4e:c1:9c:33:55:cb:08:46:81:74:22:13:4e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:31:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:17:b0:f0:f6:58:30:6c:c4:0f:4d:52:92:
                    4d:27:ff:7b:e2:f8:3f:77:93:c1:e0:c8:f3:95:66:
                    7c:61:a3:8f:3d:17:6d:cb:82:a1:cc:f4:dc:b6:38:
                    10:42:09:44:88:4a:2b:d8:51:90:71:cf:a8:1a:4f:
                    6d:2e:f8:16:ec:aa:02:45:35:f0:d2:76:5d:30:a7:
                    87:25:38:36:fc:93:e1:f3:32:4b:c0:74:32:66:a9:
                    6d:24:8a:c3:fb:1b:02:7c:11:8c:b7:57:de:20:45:
                    5b:39:f8:f1:f3:5c:47:51:f3:cc:d8:e7:6a:8c:cb:
                    82:03:7d:3f:40:99:e4:7d:0d:6b:af:62:7f:21:52:
                    4d:6b:85:80:ea:13:33:96:4f:b8:51:87:4a:17:83:
                    d7:a2:de:84:7e:0d:18:ae:0a:7c:38:92:65:f1:d0:
                    06:14:dc:2f:43:f7:9d:31:59:5a:54:d4:c4:1c:5f:
                    06:e8:a0:a9:08:e1:dc:de:2e:f1:a5:1e:26:74:cf:
                    61:77:da:cc:34:12:83:ab:e7:31:dc:cc:ce:c0:15:
                    8a:a7:1e:04:d9:e3:16:5d:0c:57:44:dc:6e:37:06:
                    d6:d2:ca:e2:03:25:b9:d1:66:27:2e:b3:dc:91:eb:
                    94:d5:61:38:9f:1e:86:a8:e4:f5:12:66:c3:12:4b:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.72.0/22
                IPv6:
                  2a01:ba20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206317

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:4b:9e:2d:ca:79:3d:0c:b6:5a:e1:01:90:10:2a:d1:02:
         c4:7e:15:79:86:4a:53:81:cf:6e:cd:ed:d4:30:b9:3c:6a:d1:
         7c:01:59:8a:57:ad:5d:d5:c2:b6:cb:84:90:d0:a4:8d:7e:31:
         c2:ca:c5:bc:ff:ea:00:60:ab:f2:04:48:e7:0d:30:12:a8:7d:
         4f:72:11:51:77:1d:0c:0d:09:92:c6:c8:6c:8d:18:fe:c3:3b:
         ee:c4:c7:72:89:60:92:ab:ce:71:2b:34:d0:0b:22:19:02:f3:
         8d:c3:05:b9:6b:f3:13:48:c1:de:d4:b3:dd:38:95:ed:12:6a:
         31:bd:35:b8:a1:ba:e7:44:d0:62:97:ae:47:39:56:74:77:90:
         f6:79:e5:cb:a1:90:47:45:7e:35:31:f1:96:fb:df:17:d5:68:
         c0:8a:07:db:ec:ec:23:6d:4d:65:4b:29:d9:0f:46:6f:ea:3e:
         b2:59:14:91:b8:c4:13:a8:ad:78:ca:24:7b:dc:63:09:16:ac:
         4c:76:a7:5e:40:99:11:12:96:86:9a:0d:1d:36:0c:3d:10:e0:
         54:be:4f:0e:2e:46:b5:9c:1a:1d:71:93:64:17:60:1e:da:0e:
         68:09:d1:71:09:a6:39:78:ab:cc:c7:a5:c8:3a:8f:d2:f9:59:
         e7:cc:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----