Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
File:                     2Bytep8KCbPVTabNzedDEvrMbXc.cer (raw, json)
Hash identifier:          WJbtPZmFE97NjRaGurzbnU8yoS7yf8/XBSIrZSxgU6Q=
Subject key identifier:   D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B6A14EA74C089322FCEA3B6F82C751
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:29:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 59867

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:a1:4e:a7:4c:08:93:22:fc:ea:3b:6f:82:c7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:8d:e0:99:d5:30:42:fe:0e:ed:b3:46:56:
                    a2:b1:49:ae:b0:6a:ee:67:c0:7f:c3:0d:62:d2:c9:
                    78:ac:e7:46:04:d6:32:3c:f7:1b:c5:42:f8:19:07:
                    e8:5e:2d:c8:13:aa:f2:f3:3f:0f:db:ac:b3:08:9f:
                    8b:01:00:ad:f9:42:86:0e:7b:11:4c:8a:cb:55:f9:
                    fa:db:42:a4:bc:23:79:86:4f:26:fa:e6:3e:96:9e:
                    8f:a6:81:e3:b5:d6:86:cc:d6:b2:e9:60:3f:3b:9a:
                    5d:a7:68:d2:d0:b5:4f:1b:a5:76:3b:eb:9f:50:79:
                    eb:0d:2e:93:fb:fe:4d:89:4f:bd:7e:68:e7:04:84:
                    33:95:2d:92:5c:37:09:4a:14:57:36:cd:e0:b3:71:
                    97:47:32:df:a3:f2:c4:81:35:26:b1:a8:dc:2e:de:
                    85:7a:f3:b0:c5:0c:af:60:55:43:4e:4c:07:a2:f7:
                    62:d8:5b:63:de:25:a9:bd:d4:9d:d0:72:3d:c5:2f:
                    46:da:15:cd:1e:6a:68:e9:5f:aa:fc:70:55:f3:c4:
                    fc:6a:0b:15:27:75:5c:19:7b:f5:7c:ad:cf:e6:fa:
                    f1:26:c4:64:44:5e:07:80:6c:87:d9:3b:5d:cb:7e:
                    6e:81:40:15:38:b5:1f:1a:74:04:cb:6a:bc:31:27:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59867

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:05:a1:e7:4c:3b:7f:4d:5e:51:9c:5f:59:1c:ee:55:b4:
         43:14:95:e2:9e:1b:a6:7e:8c:73:b2:72:9f:f2:f7:36:35:28:
         07:c8:f2:87:13:a8:96:78:23:d2:d2:22:73:b1:23:4f:2f:70:
         30:b1:92:4a:83:8a:0d:5c:7f:85:ac:f3:51:fb:fb:90:38:48:
         bf:36:14:f0:ca:c3:10:0c:ec:55:72:4c:ba:b0:bd:f4:02:9a:
         0d:b2:97:8e:f2:30:bc:b7:27:e1:5e:2d:24:91:45:41:8c:07:
         2e:54:1a:af:22:d7:7e:87:f9:03:bb:86:d5:f8:71:5e:fb:36:
         ce:2d:1c:e1:3c:dd:30:04:d0:c5:fc:8f:03:71:1d:f6:10:1f:
         af:a7:af:7a:21:de:6b:da:ab:da:89:76:27:f8:64:43:f9:a8:
         17:ac:b3:c0:68:cf:cd:d9:a0:d5:79:72:9e:97:70:c0:b1:36:
         a9:1f:0b:85:d2:3f:33:01:ce:26:f0:f7:64:f6:81:e7:a2:01:
         a5:0f:bc:b8:c4:07:59:80:db:0d:ac:3d:33:ab:8a:98:dc:82:
         05:a6:53:42:82:99:db:5f:40:ed:31:a4:24:e2:c5:87:ea:d8:
         80:bd:eb:d1:c4:2a:d2:a4:01:aa:4d:ee:82:cf:6e:41:5d:9e:
         a1:f4:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:13:12 2024 by rpki-client on console-fra.rpki-client.org