Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.cer (raw, json)
Hash identifier:          Wk4ag2aohcmWNDSFytMtJTPs7aaf3b8Ihy/mv+KI3K0=
Subject key identifier:   E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DCE1DA170F4FA2B8C7B31E69BDBA1C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.232.82.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dc:e1:da:17:0f:4f:a2:b8:c7:b3:1e:69:bd:ba:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:b9:6b:eb:b3:e0:c2:0f:ad:71:93:56:e3:
                    60:b8:d7:45:8f:f7:75:ac:76:a8:eb:37:6d:c0:84:
                    a4:b2:6a:da:7b:14:3b:af:76:e1:95:9f:32:a5:5e:
                    be:06:42:ff:fc:df:86:fc:ec:8d:39:d7:5f:56:ac:
                    07:b0:50:29:94:d8:33:9f:a1:e4:33:c2:79:e0:a3:
                    31:a4:a8:89:d3:dd:4b:51:09:43:29:5d:36:18:71:
                    1e:59:b3:68:60:d7:74:dc:a8:23:38:80:24:6c:d4:
                    ae:2a:01:8a:60:1a:d6:b8:d0:41:db:48:57:23:10:
                    c8:b8:3b:f4:ac:2e:ea:c1:9c:80:a8:42:fc:3f:43:
                    b8:4a:df:88:d7:ea:c9:54:6b:bc:9c:96:b0:fe:96:
                    16:b4:14:3f:c8:72:ba:86:d7:ef:dc:68:7d:2a:1c:
                    2f:82:24:a8:21:a3:f7:1c:db:d6:12:d2:6a:65:29:
                    ab:07:dd:87:18:64:2d:41:ef:c3:c5:e8:1d:d5:6d:
                    31:18:a0:7e:53:c8:db:7f:ef:e1:42:5a:55:bb:71:
                    60:02:ff:ab:3b:ad:8d:8f:dd:dd:cc:ef:00:04:d5:
                    33:17:49:c7:47:03:73:36:21:26:92:b4:96:52:9d:
                    39:fd:72:7a:29:b6:d6:2e:b9:ba:92:a6:d6:12:a9:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:3f:57:c6:99:3b:d4:9a:b6:40:98:e7:40:92:47:17:64:26:
         5d:b5:bb:e9:4b:d2:5d:42:f5:cc:4b:4b:34:fa:4d:33:80:d2:
         d4:3f:13:9e:e1:d4:22:c3:5f:a7:10:4e:de:f0:d2:a3:41:18:
         e1:6e:1a:3d:73:69:6c:7e:63:e3:fa:d1:2b:57:bb:15:43:4f:
         97:01:79:db:d0:5f:37:23:f2:9d:43:21:fb:e6:74:a1:c9:93:
         00:2e:d1:4e:92:c9:83:1e:d0:53:c6:8e:cb:61:71:c5:26:5f:
         9d:62:9d:45:4d:54:d2:14:c4:38:8a:ba:c6:e5:38:a2:70:6c:
         5c:95:1e:35:29:42:30:8c:0c:7c:7f:eb:ca:e4:0c:a8:67:b8:
         30:90:cc:76:e8:37:17:8a:bf:9e:3c:30:61:38:b0:8f:8a:8e:
         a8:fc:21:5b:f2:0b:90:64:2f:a5:47:35:94:8e:24:9e:52:53:
         bd:a3:4c:66:75:11:ff:0d:e5:14:77:89:ac:85:d3:a5:ab:6d:
         1f:45:97:57:75:39:04:5b:8a:5c:6a:09:ae:b6:48:96:10:c9:
         b2:05:0b:c8:f7:a0:13:7b:bb:59:62:ef:31:e9:d3:8c:98:af:
         0b:f5:7d:14:e3:ac:55:81:ac:4c:b3:03:e6:80:55:0c:dc:72:
         50:16:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 12:00:33 2024 by rpki-client on console-fra.rpki-client.org