Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
File:                     3mPrYxm6RU05dkWUXOVDlXb6x0E.cer (raw, json)
Hash identifier:          J6XgcM/AKDHmJeayORde+IKUaP7ZY/+R9gak8ys49xU=
Subject key identifier:   DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D85DA6AC012B42F2407FA435FE48B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:30:06 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 8540
                          AS: 205629
                          IP: 185.211.216.0/22
                          IP: 185.228.32.0/22
                          IP: 2a0b:6c40::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:85:da:6a:c0:12:b4:2f:24:07:fa:43:5f:e4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:30:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=de63eb6319ba454d397645945ce5439576fac741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:96:5f:b9:14:f9:bb:00:49:82:bb:0a:03:
                    f6:f5:4f:7f:c5:63:4b:29:2c:e4:de:78:8d:18:65:
                    97:2e:1d:bd:b9:2d:71:a2:c8:a2:05:91:e3:bf:8e:
                    a6:dd:e0:83:cb:77:da:65:9c:96:e2:82:e9:35:54:
                    5f:ef:24:6e:50:55:f9:db:5e:51:dc:bf:cd:18:ac:
                    7b:48:60:09:6f:fb:9a:c9:ad:b7:86:53:4e:d6:56:
                    07:f9:74:ba:e7:43:14:f0:22:2d:15:1b:f8:6b:52:
                    8e:8a:a7:3d:a5:42:68:4f:ff:82:c7:3e:81:c1:e8:
                    4d:6c:93:91:fd:99:2d:2f:14:4e:c0:2e:db:7a:1f:
                    af:08:89:7b:13:8d:ba:57:19:cc:c3:37:94:bf:6f:
                    c8:65:2e:ab:73:81:50:f3:1d:dd:f1:d2:7b:7a:4b:
                    e4:8f:b2:04:30:8a:83:76:d3:ef:c3:c2:23:df:ba:
                    27:6f:8d:a5:46:af:fa:ec:c9:97:56:a2:d5:b9:6c:
                    0e:c0:f8:8b:e3:a7:11:f2:9c:25:c5:75:92:39:0c:
                    a7:cc:64:3f:35:a1:e6:c9:c2:29:23:ef:b9:64:d0:
                    23:a4:ef:0d:66:ec:4d:b4:7e:93:57:44:de:2a:f9:
                    52:d5:e6:b1:d6:58:cc:34:28:ae:df:2d:a5:bd:bc:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.216.0/22
                  185.228.32.0/22
                IPv6:
                  2a0b:6c40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8540
                  205629

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:bc:95:89:05:aa:bd:d2:7c:fa:37:30:95:18:55:d3:b6:
         a0:42:73:7d:3e:99:36:05:8d:e8:7b:43:80:6c:7a:93:47:62:
         fa:8a:08:68:fb:10:22:62:80:56:aa:cc:1b:27:40:90:a2:90:
         7a:36:03:d5:50:9f:59:2a:a4:91:6b:16:e1:c8:43:01:b1:41:
         47:ea:4f:20:f4:53:05:16:7c:9f:cd:62:a7:96:b4:0a:84:67:
         ae:65:9e:0f:26:cf:1d:41:5c:7e:6f:cc:1a:92:42:24:b2:f3:
         f3:3a:52:07:51:0d:62:99:dc:f1:56:8f:6b:44:00:44:f4:d2:
         1d:86:ac:5a:8b:4f:76:9e:d2:97:1e:93:28:71:06:da:3d:a6:
         c0:2f:26:3e:c9:3a:2a:96:2b:fe:e6:a4:07:22:e0:81:76:01:
         7f:eb:12:79:14:92:35:5f:6e:fe:19:9b:16:d5:ac:f9:07:48:
         f6:0b:6e:3d:75:ca:15:30:65:0f:1f:3f:91:d9:a3:55:22:08:
         a9:37:b8:bf:8d:56:f9:7a:0c:46:b1:94:a5:f9:ed:f2:72:92:
         bc:fa:22:43:ad:cd:74:34:0f:f2:2f:e1:4e:61:66:f9:4c:2f:
         f6:ca:1b:a4:bf:a9:ed:b8:f3:a5:e3:94:c0:10:69:65:76:2c:
         90:ed:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 09:15:36 2024 by rpki-client on console-fra.rpki-client.org