Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
File:                     1-V055baJCkbIzlyQN-bSY2XoV7w.cer (raw, json)
Hash identifier:          if/X+PxRE/SGtwrFi0jeeM9kNeiGBbiI0gu0CsI4UOw=
Subject key identifier:   F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DB33D139A87C0442C5CF37D1E83CD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213027
                          IP: 91.203.106.0/24
                          IP: 2001:678:f70::/48
                          IP: 2001:678:f74::/48
                          IP: 2a11:a00::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:33:d1:39:a8:7c:04:42:c5:cf:37:d1:e8:3c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:84:11:f6:42:67:80:97:3c:db:07:9e:57:
                    b3:8d:6a:bf:f8:f1:e3:18:b4:ef:83:8b:e6:30:37:
                    68:ac:dc:89:1a:d3:09:09:90:60:0c:f3:42:1c:14:
                    b0:c8:f2:8e:0d:20:68:35:de:da:00:a9:84:25:96:
                    9d:8a:b3:d4:eb:f9:aa:6a:9e:d8:b9:db:d5:0f:c8:
                    0c:50:39:1b:31:e2:d6:4c:6a:8d:2d:b7:4e:b8:2e:
                    fa:84:43:7b:bd:6a:2f:fb:46:42:6c:d1:09:87:ad:
                    8e:c9:f6:e0:cc:d7:aa:6e:47:2c:3d:9b:18:c7:3b:
                    56:e4:c2:f5:b9:06:dd:85:54:74:2c:61:41:af:f8:
                    3b:62:4c:ec:55:3c:ba:8e:a1:e9:d8:d1:26:1c:06:
                    74:9e:31:74:ea:25:8e:74:e9:b4:40:1f:ce:15:c4:
                    43:64:1d:9b:9f:99:85:ef:27:19:ba:2c:9d:70:2c:
                    39:f2:2a:e8:25:92:d2:38:4e:cd:11:77:40:c3:4a:
                    72:10:45:91:88:37:23:8e:a9:08:e6:40:98:c5:5d:
                    16:cd:f2:83:c6:b5:bd:43:17:a6:7b:d9:fa:ad:65:
                    da:cc:ea:5f:60:81:da:61:25:f8:5d:9e:41:42:bc:
                    e6:2c:50:ea:e7:69:63:79:b3:d4:2e:a9:34:d1:cf:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.203.106.0/24
                IPv6:
                  2001:678:f70::/48
                  2001:678:f74::/48
                  2a11:a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213027

    Signature Algorithm: sha256WithRSAEncryption
         08:b0:31:0d:3e:51:fb:4b:ea:15:d1:d8:25:37:16:1a:11:5f:
         5b:1f:f0:27:58:3e:f8:a0:50:22:f4:a7:f6:b4:60:8b:d5:d2:
         a2:48:2a:6f:2f:d0:49:7d:6c:1d:82:3d:d5:b1:be:f4:f0:b2:
         55:34:ba:50:a8:00:94:de:30:39:b6:a0:d4:7b:18:48:46:7e:
         27:5d:e1:a2:42:d2:50:9a:5b:95:6a:49:b6:80:ff:6b:f6:99:
         26:01:64:98:99:27:78:3f:3c:67:34:07:e5:b0:e8:be:b5:96:
         b1:75:ce:6f:f8:f5:6f:ec:02:ac:91:5f:9e:70:0f:ea:10:69:
         71:da:a6:b2:46:ba:c0:e4:7f:f8:1a:1b:10:46:80:f2:40:3a:
         6a:26:04:25:48:8a:ee:57:41:c9:9c:c5:5d:98:41:fc:82:83:
         f5:1f:b0:62:9d:eb:66:88:d9:51:4e:34:1a:eb:5b:db:37:b7:
         36:64:ea:0d:28:ee:f6:de:f9:7c:7c:c0:1f:c7:b3:64:a5:ad:
         f3:14:c8:4d:21:ae:93:b5:67:81:63:f3:4e:ae:88:90:c8:d6:
         bf:7c:2f:cd:78:95:e2:16:24:bf:be:e6:0e:ad:04:1b:6c:15:
         f9:0b:f8:3d:45:a6:0b:31:38:59:9c:81:60:c3:14:59:04:08:
         26:f5:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:49:36 2024 by rpki-client on console-fra.rpki-client.org