Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer (raw, json)
Hash identifier:          e9F+9/hR9Z+7hz49zDnd63WEJ7IUN6Jy8/Xi4eE7GFs=
Subject key identifier:   D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5010704250894156EDCFA9A1F86F7F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 31303
                          IP: 217.174.16.0/20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:07:04:25:08:94:15:6e:dc:fa:9a:1f:86:f7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:61:db:f8:5b:cd:36:20:16:1a:16:0f:10:
                    32:5f:21:45:57:72:87:06:a4:64:8a:dc:ce:bc:cf:
                    44:39:c3:6b:21:05:67:01:24:b5:5d:95:72:c6:b2:
                    1f:11:2d:e3:f5:8c:b0:58:62:52:aa:25:3f:f7:a9:
                    92:1b:ac:f2:a1:3a:d3:c6:28:f7:8a:80:c6:68:cf:
                    da:d3:b0:0a:b4:a1:57:51:5c:c5:a2:ea:f5:08:4b:
                    7a:72:7a:68:0b:33:88:92:46:60:66:72:03:3f:ce:
                    b8:22:18:c6:22:ea:e9:86:75:0f:84:21:4e:de:d9:
                    4e:04:ed:b2:87:de:58:37:8e:67:96:54:a7:ff:a8:
                    d7:5b:28:20:71:aa:16:14:e1:d4:36:15:7d:52:cc:
                    48:72:80:41:7d:be:64:3f:9f:a3:13:67:e0:76:8c:
                    22:f7:86:c6:d7:1a:98:8a:53:fb:cc:a2:2f:8b:23:
                    47:29:f6:66:b6:8d:de:2a:81:87:01:ec:d2:fa:88:
                    b6:63:6a:6f:e7:7d:0a:6b:91:50:62:d5:39:05:8a:
                    dc:2f:72:67:4a:0f:7c:23:69:83:14:07:4c:fe:1f:
                    19:58:12:f0:a4:b2:60:4c:b5:f7:d8:bb:6e:5f:8a:
                    18:5d:cd:8c:44:a4:57:18:29:af:da:ac:c8:b6:79:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.174.16.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31303

    Signature Algorithm: sha256WithRSAEncryption
         b1:b2:0c:ac:d2:12:82:52:07:35:7c:93:b6:f9:2b:e2:63:8b:
         48:5a:2d:b1:a6:7e:6e:1e:a9:59:6a:05:52:91:ae:99:f0:0c:
         92:8e:5b:49:d8:39:18:14:47:80:e6:d9:52:84:29:4c:0f:7a:
         42:be:e7:7b:28:01:e0:15:10:7b:ad:b2:fa:bd:24:ce:ef:5f:
         47:d6:ab:8a:70:d4:1d:b0:9a:65:02:ce:7c:bf:fc:70:dd:92:
         43:f1:51:19:db:17:04:ab:05:f7:2c:7c:e4:5d:25:9d:fa:08:
         83:1b:21:8d:29:23:94:5f:7e:c4:9d:2a:b6:20:06:e6:71:20:
         5a:6d:d3:1f:7b:8d:32:10:7a:fb:83:f5:90:e8:0d:2f:2c:59:
         72:a3:0e:5c:a2:d8:fd:3d:7f:54:ab:17:b6:85:fd:b4:64:18:
         81:7b:6e:58:e3:2c:c3:43:95:fd:a0:a6:72:c4:57:9f:0d:db:
         48:5a:ca:a1:de:72:9b:27:9e:f7:e8:a0:cb:23:08:9a:d6:b6:
         1e:b8:e5:4e:56:eb:d6:0d:b9:b2:61:c1:17:b4:c8:8d:16:08:
         22:aa:b7:4d:b0:5b:72:8c:09:96:0f:84:4b:58:d5:ec:e9:c9:
         08:e2:c5:c0:6d:a8:cb:0e:f6:46:09:ac:3d:1a:ef:b7:25:f8:
         54:5c:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:53:49 2024 by rpki-client on console-ams.rpki-client.org