Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
File:                     4PcIYcfPbv530i_HBJvpbGdopQA.cer (raw, json)
Hash identifier:          8DNuPvG+OTlsWPsfV9VSvDyXPfzQkkOC87WdPdOjekE=
Subject key identifier:   E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D2850B0478B348FF088D115A3E153AC6B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 20 Jan 2024 19:19:53 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215769

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:28:50:b0:47:8b:34:8f:f0:88:d1:15:a3:e1:53:ac:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 20 19:19:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:91:dd:5b:b7:5e:ac:9f:b5:26:27:39:88:
                    94:42:67:35:0c:76:f4:d4:7d:30:4d:22:5f:7a:a5:
                    ad:d5:22:23:50:d0:d0:ac:70:4a:f4:dc:1c:53:1b:
                    89:4b:34:f6:93:16:f8:38:e6:92:e9:3c:13:14:23:
                    5f:23:35:52:66:1c:4d:80:a4:92:88:d7:8e:b0:05:
                    c0:5c:bf:5c:51:9d:7e:5f:7a:72:6a:11:2e:50:6f:
                    f7:9a:87:b7:40:8c:33:ff:f6:ab:ba:43:5c:55:75:
                    42:df:bf:a4:3e:ba:b2:ee:e8:83:72:a8:30:69:29:
                    12:79:a4:b4:bd:e8:95:29:ab:e8:e9:38:89:4e:3b:
                    28:b9:65:d0:27:bf:ea:7b:b5:93:af:81:b8:6e:9c:
                    c9:64:66:56:0f:92:f7:5a:ce:8a:be:9a:8a:40:60:
                    43:f5:c3:e6:66:6b:6a:a8:be:b5:ec:84:29:f5:20:
                    36:b2:46:a0:47:c2:78:04:63:d3:ec:e1:87:64:e8:
                    a2:b8:9e:6b:7c:88:1c:45:fb:7d:77:61:24:f0:35:
                    92:68:91:9a:e6:93:81:61:01:a0:d4:51:a3:3d:ec:
                    f4:84:f7:02:b4:25:8a:5d:19:c3:8d:fa:b7:b7:97:
                    32:cf:9a:a3:88:02:ec:82:2e:fa:30:ee:71:a4:7f:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215769

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:a7:5a:fd:73:0a:bb:74:6e:68:3d:29:80:01:26:a4:d0:
         d7:70:21:3c:61:e5:7d:10:41:66:5e:b0:c4:e9:52:90:49:30:
         8c:bf:2b:14:bd:fb:f4:14:ad:6d:6f:df:df:4d:08:62:68:21:
         a6:81:45:3f:bc:0f:26:c5:ff:c4:47:c0:ae:4b:e8:41:89:02:
         96:96:cf:d3:a0:15:ed:80:b8:48:ec:d4:41:ec:f7:86:f7:36:
         2d:1b:64:dd:5a:98:87:10:bf:aa:fd:7e:51:d7:57:bd:de:f2:
         6e:76:c3:c6:74:73:5a:20:bf:a2:ee:a8:03:b3:b5:4d:27:9a:
         14:81:4f:c6:47:da:66:af:aa:71:91:4f:96:dd:73:4a:07:6a:
         4a:59:2b:23:2e:f8:de:b0:d5:2f:c8:57:5a:0e:de:eb:c6:06:
         22:c1:44:da:ff:fc:27:1b:2a:75:64:6c:47:b7:43:92:5d:f1:
         e7:76:28:b6:9d:72:03:57:f9:05:8a:3a:c0:c5:00:ab:ce:57:
         7f:f9:d6:6e:ab:9d:f4:07:7c:7a:b0:1b:82:2b:00:3e:b8:c1:
         0c:7b:ed:c3:29:2d:83:73:1d:1e:b8:a6:14:16:c2:cc:26:25:
         fa:ea:f8:99:32:b2:77:45:e7:4f:ba:00:12:80:db:4d:08:6b:
         6c:00:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:18:09 2024 by rpki-client on console-ams.rpki-client.org