Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
File:                     3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer (raw, json)
Hash identifier:          Xsjug8dOspmMeZpHPQz5irRgahNZAm58417GBhqH30g=
Subject key identifier:   DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D034E12C6251E9122B80CC7C0D48A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213392

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:03:4e:12:c6:25:1e:91:22:b8:0c:c7:c0:d4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:6c:e3:5c:0f:0a:f0:ff:f1:9c:5a:c9:22:
                    ed:4c:2b:52:bc:4f:bb:88:fc:92:24:fe:0e:06:9b:
                    d8:7a:75:61:5a:d8:ee:73:a0:0c:61:89:b3:36:4b:
                    0d:49:18:e6:c8:5e:63:62:1d:f9:8e:7c:d2:b0:0a:
                    b2:18:db:29:60:87:de:7a:8f:b0:c2:0c:41:fa:b3:
                    ff:c5:c0:9a:15:7a:bc:6f:48:c2:27:f9:77:db:55:
                    9f:ae:ae:01:9b:37:ae:b1:37:36:0c:43:9f:38:70:
                    46:53:46:7b:ff:f7:5e:03:43:cc:e1:9a:af:f8:ae:
                    32:e9:cc:59:a8:9c:3a:c3:4e:16:7e:b9:bd:8e:b5:
                    27:18:fb:b3:7c:15:f2:c5:22:9d:7d:cf:93:4c:f0:
                    45:9b:8b:bd:4a:54:0f:d5:68:54:68:f5:84:67:6f:
                    de:f5:0d:a5:8c:fe:5f:45:4e:78:c9:75:ee:42:53:
                    23:34:c3:db:1e:83:39:42:66:b3:43:2b:fd:33:99:
                    f5:47:21:8d:0e:95:8d:a0:55:50:85:d0:b5:a8:26:
                    5d:b9:7f:38:7b:2a:f6:ef:c2:ca:36:74:c5:11:46:
                    13:05:13:ce:43:1a:2e:20:b9:d9:30:d8:4d:55:c1:
                    1e:eb:ab:83:bb:c7:72:a9:f7:1e:ad:7c:fb:ed:05:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213392

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:e4:71:1b:49:20:1b:ac:ea:11:95:29:0d:14:c5:09:c5:
         3c:6c:47:e6:11:65:15:7f:9b:e5:e7:c2:60:91:14:79:db:fd:
         d0:17:c8:ee:d9:e2:07:89:fe:ec:fb:02:e2:bb:d0:3e:91:18:
         e9:e1:31:9a:7a:0a:f7:93:49:a5:ef:a1:fb:a5:45:0a:e9:f3:
         be:11:c3:fa:64:bf:83:cf:15:b5:ef:dc:52:53:cf:79:b5:15:
         5d:21:45:b1:02:9e:04:e7:f8:93:14:16:43:83:20:bf:9b:42:
         c5:12:e7:71:b6:2f:ce:65:99:6a:fa:dd:cc:85:56:dc:a7:6d:
         24:89:43:03:55:34:38:2e:95:1e:f0:21:14:1e:23:63:c2:bc:
         b8:e7:c4:bf:68:f9:ac:e4:05:fd:84:09:fd:0d:99:39:8b:f5:
         1a:9e:15:43:4c:68:db:83:49:0f:a7:4e:20:6f:64:71:c3:3a:
         e9:7f:36:f9:40:52:66:f0:4b:e6:4d:7e:be:ba:7a:77:b6:1b:
         d3:17:13:a9:4c:31:7f:f6:5f:e7:c0:46:75:7e:3e:2c:2b:4f:
         54:34:f4:8d:fd:0c:fe:1d:78:dd:c6:0d:01:d3:0e:d4:08:72:
         ad:42:00:a8:1a:af:25:02:9e:03:c5:5d:e3:23:a1:35:c2:c2:
         83:13:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:17:33 2024 by rpki-client on console-ams.rpki-client.org