Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
File:                     1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer (raw, json)
Hash identifier:          3moeSvLF7bDB2AKWWrtyh96+Eq3i0ayeW0A/7RHRXU4=
Subject key identifier:   D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BC3C84FDF71BFD38AF541FEF48C18D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 39121
                          IP: 193.105.126.0/24
                          IP: 195.66.89.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:3c:84:fd:f7:1b:fd:38:af:54:1f:ef:48:c1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:43:80:56:98:42:33:3c:80:a7:88:bd:e2:
                    9a:c2:b2:f4:2b:09:6f:5c:bc:12:db:75:ae:de:8f:
                    0b:e3:2d:b7:1b:60:e2:9d:45:c0:ad:5b:b9:31:76:
                    b5:fb:ed:3a:b4:d9:e9:1d:c5:38:fb:2a:db:41:e6:
                    93:49:b2:18:17:ed:57:43:14:7a:1f:cd:91:ed:b7:
                    82:81:0e:89:b0:b1:e1:14:b0:62:27:d9:e4:04:15:
                    31:c6:ea:ab:e0:ee:0f:fa:19:b9:b5:52:be:7a:52:
                    aa:f5:a4:6c:9e:c2:e1:d1:37:c9:49:75:43:87:9b:
                    68:5d:4a:67:e5:b9:3d:54:dc:9b:90:5a:85:59:c8:
                    18:1c:0b:41:39:ac:e0:c2:38:dc:81:dd:77:96:72:
                    e1:e1:be:56:c1:ea:28:02:86:07:e9:80:87:f8:e0:
                    99:e7:73:f2:04:89:74:d6:17:75:00:27:d4:c1:3b:
                    0d:1c:ac:7c:92:b8:a7:59:d4:a6:01:81:d6:7e:50:
                    c1:4d:ca:4b:10:c3:2b:83:a6:6d:15:5b:f1:50:bb:
                    00:88:a9:fe:e7:97:71:ff:c0:93:3f:88:9a:0d:c6:
                    0a:15:f1:7e:84:af:45:d6:ed:85:2a:33:a5:36:40:
                    9b:15:5b:2c:66:67:b3:85:79:03:8a:1a:fe:9d:6f:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.126.0/24
                  195.66.89.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39121

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:b6:c4:09:1f:4c:c8:f2:91:f8:5a:22:d6:82:7e:b6:7c:
         8b:43:2d:db:46:d1:02:fe:37:67:b4:57:e5:7c:45:08:43:1f:
         2d:10:42:cf:f1:52:a8:1c:12:72:9e:c9:c4:66:51:06:7e:54:
         72:b6:25:7a:b5:42:e2:bf:b6:eb:1d:72:9a:53:5d:79:a1:3a:
         f4:4b:56:24:43:83:05:2e:88:c8:2c:c6:79:3d:98:69:c8:55:
         4b:20:5c:82:9e:a2:7d:3c:5b:c7:6d:86:c9:d6:7a:36:20:eb:
         53:48:2a:fb:ca:36:5d:7f:f0:52:01:78:2f:17:9f:5b:a7:84:
         d0:4a:d3:e1:2a:3f:24:99:74:9c:7c:93:bb:76:04:f9:a2:c2:
         42:ee:4d:84:06:42:ce:df:2f:d1:1d:0c:b6:f6:37:05:6d:94:
         bb:a2:f7:05:f0:62:41:35:fd:87:a8:6c:8c:b0:46:80:3c:7f:
         c3:a5:ed:5f:ae:fc:6a:22:19:6d:55:a3:9e:8f:21:ee:75:70:
         37:ab:f2:96:be:bb:ed:32:14:dc:3b:bc:ee:dc:8d:bc:be:c0:
         b5:af:22:e1:c1:da:e2:57:dc:2a:ba:7c:1b:69:ce:51:51:7d:
         db:25:73:79:63:2d:ce:5d:53:0f:10:d0:9d:c5:6e:27:5d:66:
         e9:f6:a7:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:07:48 2024 by rpki-client on console-ams.rpki-client.org