Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
File:                     3ofTW9yrEjr_wakdFzaGeWlwmiM.cer (raw, json)
Hash identifier:          O5KHbDekBTjyIJF6XJTfjD7Kvf/d9fPOJYO7VCU/gjA=
Subject key identifier:   DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B8F02E4A820151FCD5C02F32A1C261
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:30:58 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 43399
                          AS: 205638
                          IP: 91.194.226.0/23
                          IP: 91.218.132.0/22
                          IP: 185.211.156.0/22
                          IP: 212.233.80.0/22
                          IP: 2001:678:278::/48
                          IP: 2a0b:66c0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:f0:2e:4a:82:01:51:fc:d5:c0:2f:32:a1:c2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:30:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=de87d35bdcab123affc1a91d1736867969709a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:6b:a8:44:3a:b7:4e:3c:73:27:06:52:ca:
                    5c:43:1c:0d:e5:77:fc:74:6d:1f:7d:fe:8b:51:5d:
                    d4:cf:2f:ec:6a:8a:5b:c2:74:06:a9:7d:b9:83:8c:
                    02:af:2c:86:58:1a:8d:2b:1a:fe:85:01:51:7a:41:
                    42:4f:cb:12:45:ea:5b:d5:92:c9:50:54:74:d2:25:
                    e7:f7:22:1e:62:fc:93:c9:49:d5:d8:af:d5:e2:07:
                    e4:1a:e0:a2:a6:b7:d8:75:42:d0:fb:0b:64:12:2e:
                    19:c5:80:d4:52:d8:11:89:ce:ac:7b:03:37:49:a8:
                    c0:b1:76:69:7f:0d:3b:12:36:db:b6:3c:c8:f2:e4:
                    d9:ad:1f:67:cb:33:25:ec:d7:ae:5e:a4:ba:d2:0c:
                    50:8c:cf:26:91:38:11:bf:b8:4e:e2:df:dc:3e:56:
                    a6:02:74:49:5e:f9:de:ed:e7:24:84:d7:39:9a:8d:
                    19:62:69:87:7b:4e:11:d5:a7:48:66:7d:74:80:d1:
                    0f:13:41:c9:f8:4d:3f:2d:e4:d9:58:aa:52:1e:19:
                    15:0a:ec:f9:9b:18:ca:87:fe:48:50:82:51:74:d4:
                    fe:8a:ad:b3:de:45:2b:4c:56:de:7a:88:5b:61:6f:
                    70:21:9f:74:35:a1:1c:64:0e:02:4d:5b:27:a1:bb:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.226.0/23
                  91.218.132.0/22
                  185.211.156.0/22
                  212.233.80.0/22
                IPv6:
                  2001:678:278::/48
                  2a0b:66c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43399
                  205638

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:25:ba:38:19:54:44:69:ae:b1:c8:73:3d:1f:65:1f:8c:
         1a:77:bc:5b:2c:2b:f9:0c:c1:3d:77:45:61:91:14:a1:5f:e4:
         2a:c9:5e:a0:e0:29:94:0a:51:1c:8f:b2:1c:ea:e5:b6:85:f2:
         21:77:c4:89:39:ef:5d:1e:b2:e8:fd:34:bd:80:12:94:44:8f:
         c5:be:7d:e1:2b:a9:a1:01:40:a1:57:72:9c:d5:57:59:14:4b:
         47:90:3f:75:5f:54:13:f7:64:5f:6e:c1:d7:5a:ba:58:e4:9e:
         8b:7b:3b:c6:0e:12:db:0a:bc:d2:42:6e:9a:86:aa:85:66:f3:
         39:8b:e5:5a:ab:31:88:23:a4:aa:03:91:82:41:7f:3c:52:32:
         a7:9c:cc:8f:9d:1c:ca:32:e5:24:e6:70:06:f6:40:b5:b3:8e:
         e2:d5:b5:d5:b6:a9:a5:f6:31:4a:6e:c1:e1:38:eb:61:4a:74:
         5f:a3:49:a2:52:07:02:71:95:a7:7b:3a:2b:d7:56:9f:7c:0c:
         b1:dc:7d:2f:fd:2b:cf:d2:51:ce:24:e1:6c:f4:c6:0b:d1:a2:
         5f:db:dd:73:8e:92:00:a1:22:49:91:6c:7d:91:33:3d:cf:65:
         a1:35:ce:60:c8:87:42:93:6a:50:46:92:de:98:6c:4e:b6:1d:
         28:a4:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:42:24 2024 by rpki-client on console-fra.rpki-client.org