Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
File:                     2S5c30xU_4aM6JUxXqtY8tiGUMI.cer (raw, json)
Hash identifier:          uuM2OSS4AUbyqNVFAL/5sY7AOEtWqjKkle0MAWWCDUY=
Subject key identifier:   D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56DDA820379FD1681D793E6BFD6903E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 200585
                          IP: 185.89.232.0/22
                          IP: 2a03:8560::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Dec 2024 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6d:da:82:03:79:fd:16:81:d7:93:e6:bf:d6:90:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:d9:7a:dc:8e:4b:1e:4f:65:6a:2a:af:27:
                    35:42:04:ef:98:5c:a5:1b:63:f8:51:c2:b7:6b:dd:
                    07:45:11:83:35:c5:65:be:29:44:b7:6f:80:72:bc:
                    ad:e7:ee:2b:de:a6:73:4b:e0:b2:e8:9f:22:14:3f:
                    57:07:59:e2:ff:56:58:05:8b:53:48:c1:af:69:33:
                    dd:3b:65:9c:a1:3c:b1:14:cd:19:16:d2:c1:52:c4:
                    47:00:55:da:61:8c:c5:20:9c:ad:b8:b1:bd:95:56:
                    d1:7e:82:9b:1c:35:f1:0b:0a:53:d0:5a:6f:62:19:
                    f5:fb:f5:9b:45:cf:cc:60:9e:35:f3:71:bf:4c:05:
                    88:39:98:85:8b:f8:2e:e8:79:d6:c0:4e:f8:0e:3c:
                    86:ac:48:0c:59:ec:d2:1e:32:0f:ab:a3:f5:52:6b:
                    04:58:2d:f3:f8:64:16:d6:b7:47:a6:27:4b:2c:b7:
                    33:39:00:03:15:30:e3:a1:9f:af:3e:2a:c6:b0:6c:
                    21:39:7a:b0:8d:bc:86:22:5d:5d:dc:00:e5:09:fc:
                    7a:7b:a3:d0:c9:68:a2:a8:73:d2:9f:88:42:78:17:
                    93:56:31:97:eb:ff:28:ae:32:31:52:4c:01:93:2a:
                    27:62:81:06:e1:bf:a8:d4:a1:d6:e7:4b:f0:ab:68:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.232.0/22
                IPv6:
                  2a03:8560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200585

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:41:a5:b9:60:a9:48:af:7c:9b:17:85:e7:df:2e:12:fb:
         8f:29:34:16:d0:f5:7f:ee:1b:c1:e3:5b:48:3d:6d:1d:19:74:
         50:e3:5f:07:ed:82:d8:74:93:5d:b8:0b:9d:78:ac:a4:83:d9:
         a8:16:9f:7e:02:80:2d:ef:15:ba:c3:91:32:d9:b9:55:60:37:
         60:25:6d:88:1f:44:8d:e7:f0:f3:ed:d7:32:73:89:22:3d:30:
         ec:15:19:f2:13:ed:17:ce:cf:04:f3:60:66:ac:0a:05:32:39:
         6a:ca:ee:e3:9f:0a:40:16:b3:ac:48:89:9a:b0:3a:9f:d4:78:
         ff:8d:72:15:42:d0:79:9c:35:ec:d3:78:2f:1a:87:40:25:87:
         51:c4:40:12:2c:f6:1c:ad:ce:07:17:a7:5d:5e:19:67:86:b4:
         2a:a1:00:4e:f5:10:fd:00:1d:38:4d:ad:7c:bc:e4:db:b0:3c:
         f9:c7:d0:36:ec:a2:0e:f2:9c:49:d7:ca:bc:a6:09:47:5f:f4:
         e9:dd:e0:94:ea:fd:15:df:f8:f7:15:88:0a:ad:da:a9:f0:1c:
         32:e3:77:59:34:0d:5e:c5:42:b9:81:36:81:4e:ca:81:2a:b1:
         59:10:3c:e9:19:83:82:d9:95:e6:39:53:14:89:03:24:71:1a:
         b2:a5:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:51:06 2024 by rpki-client on console-fra.rpki-client.org