Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
File:                     3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer (raw, json)
Hash identifier:          u//BdWT0HWljmCUbwr1P/ayH2e/1K22DQTvhdGyrFts=
Subject key identifier:   DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94C98E49F018C7572C614A258AD531E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:31:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206003

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4c:98:e4:9f:01:8c:75:72:c6:14:a2:58:ad:53:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:31:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:8f:c5:ba:68:04:44:6b:3b:c2:49:79:b7:
                    9b:4e:ca:75:fc:cb:e7:2e:2b:17:cd:a0:d0:1a:80:
                    a8:47:e4:58:a0:0b:38:44:ff:50:ba:16:6a:ec:83:
                    d8:2b:20:0b:05:b7:f9:b7:80:7b:27:ea:56:4a:ad:
                    e2:57:99:35:48:45:77:25:ea:51:9c:00:49:ea:01:
                    76:86:04:d5:2b:3f:1b:62:8f:66:16:92:42:ef:08:
                    74:83:25:45:a2:15:72:4f:60:c4:75:13:15:99:9a:
                    86:74:51:ab:84:32:17:6f:ad:68:22:99:e6:7e:8b:
                    87:ef:bc:2c:fd:78:51:75:04:7e:b6:2e:23:85:c2:
                    f4:49:14:b5:cf:36:8d:e9:85:e7:ac:8a:36:04:0d:
                    c9:1e:72:eb:90:3f:cc:25:4d:ec:18:37:73:79:89:
                    0d:f5:cc:05:d5:2f:b2:57:b0:e2:46:d4:86:4d:7f:
                    70:e4:ed:c7:da:81:26:6f:9f:a8:c0:98:6e:a1:0e:
                    17:a0:54:7f:4b:5d:6a:f0:e1:d5:6e:4f:36:b9:4e:
                    b8:ad:ba:da:86:b4:e4:bd:a6:da:4c:30:df:4c:5e:
                    fa:21:db:d2:35:4f:be:e4:96:ab:08:5a:ba:25:fb:
                    22:46:55:af:a9:05:cc:41:01:cb:bc:72:25:ec:12:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206003

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:2e:9f:16:65:8b:e8:36:42:97:b1:f8:49:2f:15:c4:a1:
         13:79:11:5b:a0:e6:10:5b:10:54:5b:ac:c2:8e:4d:6f:25:0d:
         5d:90:97:15:ec:05:f5:60:c1:ba:6b:dc:aa:a9:62:bf:37:80:
         4d:69:d6:8b:44:db:1b:06:a6:1f:cb:a0:80:71:ea:0e:71:e9:
         b3:82:04:60:16:60:b5:92:66:44:bb:3e:de:97:8f:11:b3:5c:
         75:78:02:cd:d0:d0:0a:57:a6:e0:57:05:fc:68:fb:4f:7b:e5:
         6b:ae:99:1c:74:ac:49:25:44:47:42:55:e1:8d:ee:20:41:06:
         22:14:7b:ee:85:b0:cd:92:5c:d6:ac:a1:5f:c7:56:2b:0a:f0:
         04:c8:d8:e8:e3:1a:d9:9f:ff:b3:71:0e:57:f0:30:61:54:7a:
         ed:c6:5a:9c:23:0d:db:60:2e:c8:ed:75:c7:0e:68:04:df:95:
         ba:5e:f8:51:42:0e:0a:cd:59:74:ff:ee:35:e0:03:87:2b:0d:
         ea:ba:8a:11:7d:d4:74:43:52:fa:b1:72:47:ef:91:97:1b:dc:
         2a:15:98:86:39:b0:ee:0d:28:c1:c7:a2:b7:9b:47:b3:6a:fe:
         ee:33:2a:08:a0:49:b5:99:16:3c:6f:58:c7:ba:87:db:15:53:
         84:8b:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:17:34 2024 by rpki-client on console-fra.rpki-client.org