Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4WXiYQLs1LriDDtz6T4hNxWZEnE.cer
File:                     4WXiYQLs1LriDDtz6T4hNxWZEnE.cer (raw, json)
Hash identifier:          tCcYdTYvBWu895TNUWAErVluOvUYzB6dCAvIN+1FOsI=
Subject key identifier:   E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC86FE09D19EC680C8138C187901D8AF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:30:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199763

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:e0:9d:19:ec:68:0c:81:38:c1:87:90:1d:8a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:30:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e165e26102ecd4bae20c3b73e93e213715991271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:ea:d5:1c:10:a3:45:da:f4:49:fc:f2:5d:
                    e9:89:ff:17:ad:8f:9b:a9:6c:58:86:21:2c:c6:78:
                    47:6f:67:ac:e4:47:25:54:1c:9d:b7:19:52:56:4a:
                    44:22:f2:bc:1f:9a:f4:28:7f:cb:65:81:03:29:1e:
                    7b:8e:f6:34:24:82:88:6e:07:5f:78:82:99:da:38:
                    c2:b8:ab:56:4d:ef:62:6f:25:8c:8d:0b:ac:1f:d8:
                    3f:a3:e0:08:8e:40:d8:f1:34:7a:5b:4a:da:3d:c1:
                    76:43:1b:ce:a2:53:c0:78:8b:be:1c:60:98:97:22:
                    a4:0b:a3:d3:eb:fe:0b:61:c4:0a:df:22:25:3d:19:
                    11:00:45:f2:4e:e6:fb:66:f7:4a:9e:3e:7f:cd:d1:
                    00:d6:02:18:34:28:0e:ff:5a:6d:64:76:39:ce:59:
                    b2:c8:cc:b9:c2:b9:68:bd:66:a8:2f:6b:de:fb:d6:
                    82:82:1e:bf:9b:7d:78:67:67:e6:94:8e:7a:1e:87:
                    3e:c5:ac:54:c4:77:4e:c6:c0:59:29:cc:85:5f:52:
                    da:0a:8a:3a:f1:6e:8d:ad:ce:fe:26:74:43:a0:de:
                    9a:ea:3f:31:11:35:32:0e:97:02:9b:58:7e:aa:0d:
                    0d:43:ae:8f:01:fb:11:d6:78:d2:65:63:53:ca:7e:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199763

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:97:b7:84:7a:2c:15:41:b1:68:3e:7e:85:09:8f:9b:fb:
         ed:42:3a:38:4a:f1:eb:80:48:5c:21:40:ec:61:0a:f4:b1:2e:
         c7:57:bd:9f:97:4a:8b:62:6e:0e:ce:e9:03:68:fa:e7:de:d6:
         4f:3f:a3:63:19:58:f7:4e:d6:97:e2:c7:70:ab:21:51:94:b5:
         dc:96:ce:10:48:ce:4f:c4:54:fd:a7:47:42:dc:c8:f7:d3:09:
         43:8b:23:09:92:a2:b0:70:62:3a:04:d7:3d:c9:f3:7b:4c:c4:
         43:c7:d2:01:f0:67:cb:1d:cd:81:c5:b1:64:29:c7:04:94:4c:
         6b:35:46:8e:05:d0:a6:8d:e5:41:14:44:bd:9a:ec:84:ef:ec:
         4e:88:a6:b0:a7:0d:71:2c:17:91:0e:9d:0d:0b:80:4f:57:e8:
         fc:54:a7:e1:b3:37:b9:3b:85:1c:c7:9a:6c:1d:09:e6:3a:a7:
         7f:b2:7d:c6:a8:ef:07:c6:e7:21:67:a8:df:05:25:a9:dd:80:
         be:a3:99:22:59:fe:7c:66:42:a8:37:05:c5:c1:2c:28:d4:df:
         6f:51:35:3a:eb:d8:3a:fe:6e:21:68:21:0e:65:0c:9c:4f:66:
         df:ec:66:e2:aa:45:08:90:fc:07:b7:10:bf:cc:e5:75:6f:17:
         7d:fe:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:20:04 2024 by rpki-client on console-ams.rpki-client.org