Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
File:                     2j0-lJKxHEZpFVt8juTxR1S4UiI.cer (raw, json)
Hash identifier:          951Jt0bzJqUYTov13N7jtfTU+8gxiixLC4Z9gS2Z8NE=
Subject key identifier:   DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B693C05A40DCA73255B5C1E1C084CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49491
                          IP: 193.169.80.0/23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:93:c0:5a:40:dc:a7:32:55:b5:c1:e1:c0:84:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:ad:98:97:28:b7:13:fb:fb:28:61:83:b2:
                    57:18:69:04:8d:73:39:20:46:de:f0:c2:ea:70:c2:
                    83:91:9f:9d:dd:0d:95:b8:27:dd:a8:3c:04:cf:6e:
                    0a:34:d8:bb:80:2d:02:67:08:4c:46:90:d3:6e:a1:
                    ef:26:36:93:9c:75:03:a3:09:e0:38:92:cc:2f:91:
                    dc:ce:93:28:eb:71:16:58:d8:a0:ce:07:7c:b4:38:
                    65:e3:98:60:3c:41:27:90:68:f7:31:d5:2a:b5:68:
                    e3:3b:b3:1e:f6:b4:25:dd:cb:9d:c8:fd:c4:b5:9f:
                    51:51:c7:d5:4c:ba:7e:7d:92:69:5f:4a:63:80:34:
                    90:16:95:81:d1:52:95:ba:f0:84:36:26:a4:8d:97:
                    62:32:61:5e:e5:e0:bf:0d:62:8e:ea:dc:24:24:d1:
                    c7:f6:57:7e:bd:24:96:d7:8f:3a:85:50:e6:59:e2:
                    5e:56:74:59:43:9c:99:f3:ec:14:53:82:a0:49:c3:
                    5f:5c:b6:62:db:f9:8a:fb:e2:ce:96:26:74:1c:49:
                    be:3c:47:29:54:6a:38:50:28:05:3e:61:f3:88:37:
                    f0:9a:2b:7a:04:96:56:1f:10:2c:7d:56:35:09:7f:
                    d2:f4:44:30:d0:7a:6e:e8:f8:64:d2:85:5f:29:db:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.80.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49491

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:0c:59:ae:8d:3b:1b:ea:c7:af:1c:22:a8:98:c8:40:26:
         c8:f0:08:01:98:97:bf:b9:32:85:ec:61:00:29:62:c5:6c:ea:
         7e:29:fc:e1:cb:c0:16:38:d5:c3:3b:1f:ae:46:15:aa:81:e0:
         b3:69:3b:38:4e:0e:28:d7:36:32:05:ee:b5:46:70:67:a1:7a:
         bd:02:25:8e:55:ed:cb:a1:b0:f4:20:ad:ec:3d:01:3f:d6:ba:
         07:8c:f9:7d:92:e8:27:66:34:98:42:41:89:6c:56:e7:45:54:
         83:46:17:df:77:e7:f9:54:4f:fd:c5:fd:ff:58:1b:c5:1b:d3:
         21:a2:4b:33:56:d9:52:3e:04:b4:dd:19:78:7a:de:2c:32:c3:
         af:f5:e2:d8:01:29:64:06:ff:cc:24:11:d8:97:34:db:bb:95:
         f2:c2:e3:87:71:71:3c:5e:01:8f:1b:31:36:a9:34:85:02:c5:
         a6:77:c1:d1:4c:56:2b:c1:04:3c:88:31:f6:79:f9:ee:23:6a:
         65:fb:c2:89:ed:c8:98:66:81:e5:04:87:87:ed:5a:0b:b8:6e:
         18:74:be:ba:81:3f:95:29:8f:75:a4:cd:18:53:d7:80:8d:88:
         a2:64:b4:bc:36:4e:62:ad:29:68:ad:63:3a:5c:13:97:65:58:
         b0:08:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:04:24 2024 by rpki-client on console-ams.rpki-client.org