Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
File:                     5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer (raw, json)
Hash identifier:          KVmtbseoGFTjrRdcIXcnurlYg4aVEM/tMkNrdKNaFGU=
Subject key identifier:   E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC649A4FC1761E81343DCB0BCBE880842
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:29:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 194.56.215.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:a4:fc:17:61:e8:13:43:dc:b0:bc:be:88:08:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:60:0b:e7:b4:30:a7:4a:32:f7:a8:bb:2f:
                    fa:08:88:34:d2:2c:da:58:70:41:1b:23:97:a0:7a:
                    d7:32:21:7e:d0:16:df:d3:4e:87:ea:4c:06:5f:f3:
                    dd:e7:c7:92:ea:66:ad:f9:4b:25:7b:a0:f9:52:1f:
                    56:c3:af:23:df:b3:75:95:36:f8:df:1d:14:06:a7:
                    bd:c1:20:3b:dc:37:b9:83:3a:17:33:04:7a:df:fd:
                    02:a5:44:f1:dd:3e:78:da:19:2b:7c:1d:b7:8a:ae:
                    43:f0:be:b4:2d:13:77:9c:39:0b:db:64:ee:bf:bf:
                    48:6a:1e:d8:22:9f:58:4f:1e:e4:71:b1:67:79:d4:
                    ed:f8:93:ab:c2:5c:66:68:b9:2f:88:8d:c9:14:1d:
                    a2:2b:c2:58:0f:ae:a4:0e:53:5d:2f:30:97:dd:99:
                    c6:1e:48:1b:34:b4:0d:f8:3a:eb:a6:bd:26:5a:df:
                    5a:bd:c0:f8:4b:23:34:30:ed:eb:f0:d6:e9:02:bd:
                    64:72:da:53:d8:c1:56:8f:91:72:48:34:37:30:0d:
                    cd:fb:e2:82:90:23:84:d0:47:a8:4e:79:ec:80:8c:
                    71:02:d4:2b:b1:dc:42:59:c9:f0:8a:cc:25:db:c0:
                    bc:96:d9:de:94:d4:eb:54:ed:e2:96:3d:3f:b8:23:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:25:48:9f:76:59:4e:07:02:b4:63:fe:d6:d8:4c:de:b4:
         eb:3d:8e:cc:a9:20:e2:fb:46:d8:4a:98:58:eb:00:7c:cf:50:
         c5:c1:ab:e8:e5:f4:7e:4c:b2:44:06:5e:82:d7:a5:4f:9d:34:
         a0:0d:63:70:27:76:5b:3c:a0:e8:10:48:22:45:a4:d9:8b:ab:
         9e:8f:1a:6c:a7:91:0b:f1:57:d1:63:13:c1:4a:3b:f1:96:f3:
         e5:5d:4c:a4:11:a7:05:37:95:44:20:d2:a2:f6:c4:16:fd:4d:
         b6:95:5f:1b:2c:69:d7:69:72:1b:87:7a:aa:03:4a:ec:95:db:
         85:2e:42:06:ea:9b:8f:db:26:29:f2:62:31:0b:87:d3:96:b6:
         ff:88:cb:b3:4d:ac:9b:4a:f6:8b:44:78:81:c5:f6:fa:c6:09:
         01:c1:02:2e:e6:33:05:6f:58:d2:64:a1:0d:7a:94:68:09:d8:
         61:20:70:26:c9:18:fc:7d:79:20:c6:70:99:7e:35:90:55:22:
         9e:64:1a:9c:b9:36:ce:73:1d:b8:d1:5e:07:a6:39:ea:88:bd:
         b8:0b:0b:81:ad:c3:a6:04:16:9d:8c:6b:98:c0:ea:dc:60:24:
         a1:47:f1:fa:ff:fc:b9:90:f1:3e:ce:55:bb:ff:02:ef:0a:bf:
         d3:d5:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:21:44 2024 by rpki-client on console-ams.rpki-client.org