Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
File:                     5aJ1VcGlxd3396zIOfpXeqfuepw.cer (raw, json)
Hash identifier:          oMzpeDhw0/fPbIhMOxN48SncTnYb565w+qgbcfreIiY=
Subject key identifier:   E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5001CF1885B50F1E7E52AC18629149D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 33907
                          AS: 34025
                          IP: 193.26.17.0/24
                          IP: 194.145.172.0/22
                          IP: 2001:67c:2968::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:1c:f1:88:5b:50:f1:e7:e5:2a:c1:86:29:14:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:a2:6e:35:a9:86:3e:3a:e4:06:2d:a5:43:
                    c3:eb:a0:b6:9a:e0:6c:b8:0a:98:15:d0:55:79:bb:
                    55:98:f5:91:5f:91:f5:66:97:a2:0e:51:aa:25:39:
                    b4:84:09:d8:57:45:93:18:d3:c5:8c:f9:de:8b:50:
                    ba:3c:82:c5:2a:ee:d3:04:b7:63:5c:32:56:3b:76:
                    d1:d0:7b:c7:91:c4:6e:6f:cb:68:c0:d8:38:8d:b1:
                    9a:1e:6a:e1:f7:62:51:39:bf:a6:90:22:b5:0c:9a:
                    33:bf:3e:33:cd:43:6f:0f:14:49:67:bd:8d:c2:93:
                    f0:22:51:e0:28:ff:5c:bd:85:d9:c3:f0:e3:5f:34:
                    f4:3c:0b:9a:a2:47:1a:4d:54:d6:ea:a3:94:e8:23:
                    b9:8c:36:e0:29:13:eb:04:89:41:75:e7:2a:af:14:
                    2e:01:94:67:a4:57:97:08:c1:5e:da:ad:5a:fd:23:
                    85:23:54:fe:90:3f:a4:94:77:87:55:06:37:38:f3:
                    9a:ef:85:4f:e3:2d:f2:ee:98:b0:ed:d6:30:b8:01:
                    b0:b6:72:70:52:08:30:14:37:8d:02:c2:19:60:5b:
                    6e:97:86:26:90:bd:14:b8:0f:09:71:0b:fb:ff:d4:
                    8b:ee:de:86:fd:d3:87:78:91:93:46:54:82:db:25:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.17.0/24
                  194.145.172.0/22
                IPv6:
                  2001:67c:2968::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33907
                  34025

    Signature Algorithm: sha256WithRSAEncryption
         a4:0b:9e:99:f1:e2:fa:69:e2:05:ad:bf:72:50:51:57:ba:61:
         3a:4f:11:75:b3:94:3e:3b:d0:a6:6e:9f:83:fe:81:4f:26:c6:
         8f:28:5c:e3:b7:56:e7:65:04:22:f1:f2:0c:7f:e9:8e:55:ae:
         c9:f2:ca:10:a8:63:da:02:8f:09:6f:20:36:1c:b0:cf:d7:f6:
         9f:bd:ad:10:b3:ee:2f:2f:e8:c1:01:6a:fe:ae:63:b2:bc:85:
         c7:b1:12:5d:12:d4:4f:7f:d0:6d:98:2c:79:d6:3c:2a:bf:d7:
         ea:33:c0:68:cf:20:a7:8b:ce:15:3c:40:3d:b7:d2:41:8a:61:
         4e:ee:79:5d:dc:cd:c7:10:35:19:43:29:ad:59:88:68:a5:ef:
         c3:0d:5b:a5:48:e4:7b:57:7f:1e:03:2b:eb:37:cf:d5:f8:17:
         72:c1:72:25:07:bd:8e:2a:df:50:d2:f7:a4:f0:19:09:62:ac:
         63:dc:af:83:00:e4:3d:b4:3e:53:54:29:6a:1d:7c:3e:1e:fa:
         67:81:88:e7:b1:ef:c7:91:d7:b7:52:76:d4:dd:ae:6e:c4:dc:
         7b:2b:81:94:2d:51:3b:80:e8:e1:a9:d9:ae:17:df:38:ea:53:
         15:b6:94:aa:6f:c4:5c:1e:60:56:ab:6f:8f:ab:b2:c1:e5:34:
         f0:c5:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 09:23:23 2024 by rpki-client on console-fra.rpki-client.org