Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6A8lWyHapqvh1gwBXeRdIco8EmM.cer
File:                     6A8lWyHapqvh1gwBXeRdIco8EmM.cer (raw, json)
Hash identifier:          hiZ1y9874V9vDweQU93f2XUZBIbwMOJ/fqsB2ZYm5Xc=
Subject key identifier:   E8:0F:25:5B:21:DA:A6:AB:E1:D6:0C:01:5D:E4:5D:21:CA:3C:12:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC86F53C086B9BD5B25570EC21F599633
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b9/c97172-d959-4032-b090-2fc7c1ecd715/1/6A8lWyHapqvh1gwBXeRdIco8EmM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b9/c97172-d959-4032-b090-2fc7c1ecd715/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:29:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212185

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 11:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:53:c0:86:b9:bd:5b:25:57:0e:c2:1f:59:96:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e80f255b21daa6abe1d60c015de45d21ca3c1263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0c:1c:9e:e4:87:0a:91:ce:78:a4:9d:06:43:
                    78:8b:01:ea:da:c1:63:2b:fd:5e:79:82:06:5a:c4:
                    9b:4b:81:50:3d:95:4c:ab:18:53:15:6c:4e:01:58:
                    95:8a:a6:fb:0b:a7:b2:7b:03:45:58:be:92:da:3a:
                    3b:a4:33:79:aa:db:d2:00:ae:61:c0:0f:ba:78:7a:
                    b8:ea:89:56:df:1e:f8:56:62:e8:ed:27:dc:ac:e7:
                    62:90:1f:7d:f0:f9:80:d5:c8:38:e7:0d:21:d3:e8:
                    9d:60:bb:5a:e6:df:5b:cb:df:7f:ff:aa:ce:67:24:
                    d9:4f:62:e9:58:de:7e:66:dc:ef:08:7f:b6:c6:9d:
                    6d:50:6f:07:59:ce:d8:92:2b:fc:96:d7:a2:4a:8d:
                    82:2f:76:1d:05:9e:fd:29:35:e8:ea:a4:fa:cc:dd:
                    eb:8f:98:52:08:59:b8:44:c9:38:d3:0a:0b:ba:f1:
                    6e:c7:04:07:23:57:55:07:15:2c:3d:cf:2a:f9:d7:
                    ee:e8:4c:c7:f0:69:33:42:5b:d5:8e:f5:39:aa:ba:
                    5b:e0:c9:ba:9e:6f:ac:96:6b:cd:61:2c:b8:6f:40:
                    5b:bf:50:f4:27:54:4b:55:c2:eb:c6:69:dc:0c:01:
                    b4:3a:83:2b:84:83:27:0d:ff:5a:3c:ec:cb:43:a7:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:25:5B:21:DA:A6:AB:E1:D6:0C:01:5D:E4:5D:21:CA:3C:12:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c97172-d959-4032-b090-2fc7c1ecd715/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c97172-d959-4032-b090-2fc7c1ecd715/1/6A8lWyHapqvh1gwBXeRdIco8EmM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212185

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:6f:fc:d1:45:9c:03:26:ce:12:e9:8d:db:2e:ff:74:03:
         7b:69:b3:1f:25:ed:17:1a:10:45:16:98:1a:ab:41:02:6c:c5:
         fa:e1:03:f6:8a:b0:a9:69:46:1a:97:70:52:0d:b6:f6:d0:93:
         0f:c4:7a:07:43:ab:38:cd:de:c8:bf:63:05:4a:b7:9e:3f:26:
         cf:fa:88:59:82:11:73:e6:6d:8e:42:4f:8f:63:7d:39:ee:52:
         71:34:ba:b9:0b:5e:27:0a:70:4a:dc:f4:49:ff:fe:bc:b9:9e:
         cc:fc:54:ff:1e:13:be:a3:f1:51:0c:ba:fb:f2:53:92:04:66:
         1d:23:66:48:32:76:dd:11:4c:69:a3:7b:3b:5d:25:e9:04:8a:
         16:6e:d0:2a:5d:76:b3:3b:f0:3a:3b:f5:d9:a3:e7:df:32:4a:
         ae:d2:f9:06:e9:4b:22:97:80:22:0b:3c:13:9d:06:f0:e6:d2:
         25:b0:5d:02:54:26:64:52:e1:56:4d:47:f9:e6:89:5b:f0:45:
         33:0d:45:0d:a7:19:46:78:ba:04:18:f8:c5:b3:54:58:f4:65:
         27:d9:72:a1:21:0f:28:7f:c2:fb:0a:76:95:96:84:a7:52:b9:
         19:78:05:da:48:52:a1:6c:51:5c:ff:a9:07:22:e5:87:79:4a:
         41:5b:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:05:09 2024 by rpki-client on console-ams.rpki-client.org