Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
File:                     1-x_03y78aezBkupa79ezuX9YCQE.cer (raw, json)
Hash identifier:          o5/ARRaP00PJ7O2OmplnwxmjFauKn7lbDKr3p505UlU=
Subject key identifier:   FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01914B65EA97CA657F0C97CF21261B55936F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 13 Aug 2024 11:00:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197437
                          IP: 46.151.136.0/21

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4b:65:ea:97:ca:65:7f:0c:97:cf:21:26:1b:55:93:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 13 11:00:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:20:0a:6f:ee:eb:8c:f1:2d:c0:12:ae:4d:
                    ed:75:b3:96:b7:aa:88:09:6e:65:9b:c9:e8:d3:10:
                    77:6f:cb:0b:2c:cc:a9:f6:9e:41:31:08:08:e0:fb:
                    7f:7f:35:fd:29:4b:35:0e:9b:29:7c:0b:86:c9:15:
                    e0:49:b8:fa:b1:9c:01:a8:75:79:66:ce:ed:02:10:
                    d5:91:af:97:4f:0f:8a:80:b7:87:96:c1:2c:70:ab:
                    2a:fb:1c:4d:04:68:b7:ad:22:80:8e:57:8e:0c:73:
                    7e:da:65:4f:49:ea:0c:b3:04:87:7e:9c:bc:31:af:
                    f7:ed:cc:4d:0b:cb:bc:76:12:b6:7a:26:69:54:c1:
                    62:a1:a6:65:6f:52:08:25:79:5d:82:06:3f:ac:f5:
                    18:71:70:e7:b2:50:c0:47:a1:1c:35:5b:34:f3:9a:
                    29:68:13:b8:fb:6f:1d:6d:ca:0e:30:30:18:f7:d7:
                    dc:ce:83:43:0b:ee:70:c4:19:4b:4a:e9:fd:64:ca:
                    85:9a:8a:29:c1:83:68:b5:d0:45:6a:5e:85:23:c4:
                    81:84:57:1e:4b:5f:3e:5c:16:5f:19:2a:08:5f:cd:
                    ce:f6:df:f5:e1:68:72:04:63:f1:8a:93:94:de:37:
                    cf:9d:88:e6:51:c1:38:08:d7:26:7d:7e:29:04:df:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.136.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197437

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:9d:98:88:69:e6:90:37:e2:17:0b:7c:bd:c2:88:25:c4:
         ee:41:c9:8d:21:57:c3:41:7b:1a:1e:8a:f1:c1:31:54:ee:23:
         f1:a1:bf:ed:3a:48:4c:21:ae:5b:d7:c9:ae:43:94:b9:39:75:
         e0:59:ff:95:7d:c4:d7:14:ad:33:ca:4f:89:03:a6:28:8f:f3:
         06:07:74:43:09:8a:92:7e:08:99:0c:fc:7d:bf:e2:48:35:8f:
         f1:6e:52:ea:3b:e0:61:3b:2d:0b:b3:fc:51:90:0f:25:79:1e:
         ae:27:46:9a:be:80:67:8a:63:bd:82:5f:5f:4b:4f:03:cb:24:
         ba:90:72:55:bc:a6:51:5a:db:b8:98:2d:6e:e1:7d:2d:4a:ae:
         7a:df:8a:d3:2c:1a:f8:1a:6f:53:b9:cf:37:e1:1a:0b:6a:fe:
         65:10:69:2b:4a:55:bc:bb:46:2a:36:4d:de:e9:e5:55:9f:dd:
         13:0d:80:a2:d5:db:61:26:44:a4:40:de:da:87:e1:dd:9a:0b:
         88:74:0e:74:50:83:af:e3:54:5a:68:29:e8:76:a3:20:ed:18:
         6d:1f:3e:60:9c:b9:4d:ca:ae:10:59:bd:dc:db:92:84:05:41:
         5d:84:1e:2a:a6:20:91:19:c6:4e:7b:78:6f:f2:43:79:bd:2a:
         57:4a:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:52 2024 by rpki-client on console-ams.rpki-client.org