Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
File:                     3zt208DGDWY1BqJSZxxSjjQ5_3U.cer (raw, json)
Hash identifier:          LkfzwHDUGXRDkq2XbTgSOumLaCSeFQq9i0TivOKIRLg=
Subject key identifier:   DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC56301495279289AFCAF690FEEFF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:30:00 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.208.252.0/22
                          IP: 2a0b:5dc0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:56:30:14:95:27:92:89:af:ca:f6:90:fe:ef:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:30:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=df3b76d3c0c60d663506a252671c528e3439ff75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:fd:4c:f3:11:c5:1e:61:ae:a0:15:9a:8f:
                    bb:e8:0a:92:03:d5:0d:5f:cd:19:0f:bd:10:83:7e:
                    23:2f:34:7b:fc:8b:b9:8a:a2:9e:e2:5a:9b:94:19:
                    1f:41:44:a4:cb:87:26:01:59:54:2a:6e:ef:3d:dc:
                    7d:75:11:a0:13:e2:e9:c5:4d:3d:53:34:07:5c:39:
                    b7:79:cc:e3:88:0c:1c:3f:7c:88:85:fa:f3:b1:46:
                    51:ff:e8:8b:97:49:b3:94:d6:e8:2d:1b:ba:a9:a2:
                    38:91:bd:3d:2e:b5:9a:a8:0b:97:9d:c4:51:9d:4e:
                    09:1a:00:13:f8:31:ba:27:3d:5b:00:fd:15:0e:16:
                    20:1c:0d:26:2f:6c:fb:63:42:e8:ef:29:2f:f1:a6:
                    cc:5d:50:c4:b4:36:e8:af:a7:8b:5a:d8:35:70:7d:
                    6c:ac:22:ae:93:d9:41:ad:bc:7c:10:91:7d:56:7e:
                    99:ac:c7:1b:5f:e3:80:42:99:5b:29:22:00:5e:c2:
                    8a:c9:77:80:72:1f:bd:0f:f9:22:2a:01:44:31:62:
                    a2:5e:f2:e6:db:00:34:ed:2f:28:36:f0:9c:68:62:
                    84:29:08:95:7e:29:1a:9e:bd:a2:92:cc:ec:15:bb:
                    e5:4a:32:6f:dc:bc:36:38:c0:10:79:23:07:c3:8e:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.252.0/22
                IPv6:
                  2a0b:5dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:58:fd:ba:87:f1:ad:aa:ac:8f:85:0a:3b:31:80:5b:76:5e:
         92:e9:63:a2:bb:32:0b:8d:fd:c1:80:23:12:d9:72:70:75:60:
         2a:57:50:10:2b:f3:8e:0f:48:2c:88:35:ac:94:99:6a:31:45:
         df:c4:b3:5d:8f:a7:86:7e:ae:90:4c:4e:fb:28:62:1d:74:ca:
         9f:b5:a7:50:06:74:a5:f1:f1:5e:c5:03:e5:cb:bc:a3:2e:d8:
         f9:f5:63:bb:97:99:50:41:43:e1:51:57:75:a2:f0:f1:8e:9d:
         69:8e:9b:04:4e:ac:e6:1a:ed:ad:62:ac:00:f8:4e:c3:0f:7b:
         0a:82:f8:95:b5:cb:2f:79:c5:f9:62:46:f2:b4:89:32:b9:9f:
         33:bd:0b:6e:38:0c:13:f6:89:31:ac:84:84:66:ec:3c:6b:50:
         e5:57:7c:28:a1:0f:4c:b4:4b:89:e4:99:32:77:af:43:e2:35:
         e5:bb:47:ff:2e:b8:8c:41:1d:cb:41:57:f3:45:c8:a3:08:34:
         6d:a7:93:0d:d0:a6:22:75:e2:2b:44:55:80:71:c2:8f:94:06:
         f4:39:e1:aa:20:60:25:ae:d6:65:c0:4d:62:d3:ab:ba:d9:e6:
         ca:7a:07:4f:02:b7:43:53:0c:e2:e9:69:78:bd:33:04:ce:89:
         ea:39:82:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:17:42 2024 by rpki-client on console-ams.rpki-client.org