Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
File:                     4FdMKHjWtTYTm4lfCMnG2xjhKps.cer (raw, json)
Hash identifier:          2InrpPqUyo5zzWksTMOIkzf28HHgEqTWupS1grF3UaM=
Subject key identifier:   E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B6BDB509447D60609DC35A1EB5582
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:31:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 21500
                          AS: 24618
                          IP: 62.106.68.0/24
                          IP: 81.17.128.0/20
                          IP: 85.90.200.0/22
                          IP: 92.118.136.0/22
                          IP: 92.118.224.0/22
                          IP: 94.124.164.0/23
                          IP: 185.112.12.0/22
                          IP: 195.69.184.0/22
                          IP: 195.234.220.0/22
                          IP: 2a06:6200::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:6b:db:50:94:47:d6:06:09:dc:35:a1:eb:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:31:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:7a:67:73:c4:44:84:c3:95:4a:6d:a2:3e:
                    8b:45:a6:8b:ec:a5:93:aa:9e:68:aa:62:bb:74:b9:
                    60:26:6f:d0:39:7b:72:a5:5e:d8:ed:bc:b5:1e:29:
                    bc:cf:fc:55:26:9d:57:26:eb:4c:75:19:ce:f8:a5:
                    fe:e0:5f:d8:35:3f:6a:74:c8:50:ff:09:3f:7c:90:
                    1c:bd:c2:a6:7d:e4:98:78:54:06:34:da:e7:d2:59:
                    af:36:34:4a:66:ed:af:69:ca:68:ae:60:1c:dd:3a:
                    bc:2a:ae:55:f5:f3:45:08:71:47:42:c0:da:29:fc:
                    07:64:0b:80:ef:7e:62:58:20:71:ad:81:a4:82:cf:
                    e5:50:7f:bc:47:d7:8c:af:ac:7e:78:c5:77:06:a0:
                    6e:05:a9:e1:0c:de:86:40:d3:ab:af:68:c5:35:b9:
                    5d:ad:41:35:59:de:3b:9a:84:29:7f:bb:31:a6:9f:
                    14:eb:7d:5d:1c:cd:2f:ed:e9:11:8a:53:92:08:ce:
                    6c:8e:15:c0:8c:69:7c:bc:f7:2e:a9:ab:bc:bc:01:
                    1d:72:8e:88:48:87:c2:88:1c:90:27:33:3d:79:84:
                    61:c9:5c:37:45:db:52:01:2c:ce:a0:10:84:83:27:
                    91:85:7f:22:b6:b9:33:b9:35:d3:73:c3:de:3e:6b:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.68.0/24
                  81.17.128.0/20
                  85.90.200.0/22
                  92.118.136.0/22
                  92.118.224.0/22
                  94.124.164.0/23
                  185.112.12.0/22
                  195.69.184.0/22
                  195.234.220.0/22
                IPv6:
                  2a06:6200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21500
                  24618

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:ef:7a:6b:44:9d:61:ee:b9:93:de:b4:9c:c7:40:15:9e:
         d0:31:ab:42:ef:ff:26:64:04:16:d9:14:de:60:93:bc:37:93:
         18:04:c9:8d:c5:8e:2e:3d:1d:78:33:bc:38:43:df:bf:ee:66:
         0a:b9:82:05:e0:6b:9f:81:c7:56:d5:a5:0d:d0:69:f8:98:df:
         4d:c8:b6:63:fe:a3:5c:f1:c9:8c:5b:2a:80:c5:1e:c6:6c:39:
         ec:92:b2:9f:f9:8c:54:a0:1e:b3:3d:d5:6f:4d:de:ab:7e:7c:
         fb:23:14:b8:93:12:ed:0e:d2:ea:e3:94:f7:2d:5a:39:18:d2:
         62:1a:3f:ab:ac:80:d2:27:05:4c:9d:e3:7b:d7:42:91:12:2f:
         1f:12:1b:f9:6f:53:e0:44:f9:ab:fa:a9:65:b1:c0:e7:2f:12:
         5e:f3:69:c9:1e:54:93:53:71:f3:8e:43:96:86:9f:4b:93:83:
         af:d7:54:6b:db:df:4b:d2:93:97:af:00:18:03:45:2f:57:d5:
         a3:8f:bc:c6:0b:a7:30:c8:b8:38:07:9b:7a:63:e1:8e:90:bb:
         95:f8:3d:45:a7:22:04:c3:03:53:dd:e6:9e:e0:b1:25:af:a0:
         c5:ef:4d:61:27:3f:af:93:e8:4b:e2:59:39:19:b8:ed:15:0b:
         22:58:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:23:13 2024 by rpki-client on console-fra.rpki-client.org