Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
File:                     3F-syhTeCBdO9clskfHngl9C0Hs.cer (raw, json)
Hash identifier:          +9RhBNUZLn1EowL6E/nmCmAewUYHcDexwj+KWrfJj/4=
Subject key identifier:   DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DCD2B06FF2CB89DC215292835EBDB6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:30:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 205330
                          IP: 37.130.216.0/21
                          IP: 185.109.56.0/22
                          IP: 2a0f:cec0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:d2:b0:6f:f2:cb:89:dc:21:52:92:83:5e:bd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:30:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:24:fa:cb:07:9b:84:c1:3f:ae:37:cf:7e:
                    17:02:9b:34:3e:18:b8:03:2e:a5:ae:36:fb:44:b0:
                    7f:ec:b2:1f:32:bc:77:8f:7a:43:30:f4:a2:09:54:
                    b6:a6:d0:bc:fb:f6:cd:e9:1e:69:53:1b:7c:09:f6:
                    04:8d:b3:2f:99:ab:c9:b4:03:da:5e:fd:c4:4d:b6:
                    d2:c3:d4:c4:85:09:c0:d7:d9:98:a7:55:99:b5:a8:
                    7b:16:1e:cd:03:a2:94:d6:1a:25:82:5f:28:fe:fd:
                    59:5b:0d:b4:23:d8:db:5d:bc:10:79:0a:85:50:29:
                    38:4c:8e:14:a1:66:34:54:8b:bd:1f:28:91:a2:97:
                    e1:8e:96:0f:07:87:ea:7e:32:c2:5c:d2:24:a3:c0:
                    c6:e6:44:a6:5b:a5:fb:a9:4a:92:82:45:c6:c4:dd:
                    fa:42:60:d5:66:0b:65:02:96:a3:07:86:f6:ec:f1:
                    36:fb:8d:9e:27:33:9c:ce:7e:88:eb:67:4d:dc:56:
                    9b:88:60:fd:52:66:19:cd:bc:ce:e0:b6:10:21:e2:
                    51:36:e0:45:ab:5e:1a:17:a0:d6:e0:f1:c3:a3:a9:
                    86:53:c6:97:01:d6:e9:ec:a8:cf:2f:93:93:73:80:
                    a2:85:82:bd:c3:52:52:32:20:09:7f:15:40:d8:d6:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.130.216.0/21
                  185.109.56.0/22
                IPv6:
                  2a0f:cec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205330

    Signature Algorithm: sha256WithRSAEncryption
         a5:3c:7f:5c:49:d8:ad:20:86:e6:0e:2c:ea:60:b6:1f:98:f8:
         fe:93:fb:d2:29:70:d8:99:c5:16:05:b6:3c:24:bf:c3:23:76:
         70:b8:11:4a:3a:87:6c:43:8a:95:f8:74:18:b3:d8:37:49:6f:
         ad:fd:31:99:fe:fe:aa:aa:2c:7c:b1:2a:60:e6:a2:96:db:20:
         02:91:d5:a3:94:77:26:a5:51:99:c1:01:50:e2:92:8c:13:e8:
         c0:f0:14:f7:26:b1:ef:3d:60:3e:28:db:93:a6:2f:ab:a3:f3:
         ba:8c:0e:15:c2:54:04:5b:22:7b:29:cf:6b:c6:ff:d5:bc:e9:
         33:99:7e:01:15:c6:45:18:bb:e9:89:3a:35:c1:ed:f9:e8:2a:
         5c:aa:ce:3a:20:74:7e:72:f4:f3:10:22:0f:39:b4:b7:bf:b5:
         05:5b:59:e1:0f:d1:54:a8:92:16:11:c2:a2:f7:81:ac:85:93:
         12:d3:bf:25:f9:d0:8e:e6:94:71:ef:49:63:17:17:4d:33:cc:
         a4:1e:e0:a8:48:8a:6c:f1:78:7d:0e:b3:18:15:03:b0:d6:75:
         51:b5:bf:c3:10:c8:1c:bc:e7:9a:98:ce:8a:bb:d3:94:c0:8e:
         e5:61:21:e6:e3:f9:73:ed:bb:c0:95:b1:74:7e:e8:96:ec:5d:
         88:aa:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:06:59 2024 by rpki-client on console-ams.rpki-client.org