Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.cer (raw, json)
Hash identifier:          2mbXup+V4e8BdGt6MOgZ19rQ0NfKkP1qIM5/qvYHd3M=
Subject key identifier:   EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC493624942C38C5EC2605BC0FB7480DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:42 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58060

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:62:49:42:c3:8c:5e:c2:60:5b:c0:fb:74:80:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:75:9c:6e:18:58:57:cc:9d:0e:da:f8:7a:
                    aa:fe:48:df:65:b8:fe:cc:5b:21:82:bb:b5:35:86:
                    65:43:0f:5a:50:68:60:03:85:d7:85:15:73:43:0b:
                    80:b2:6e:5f:55:6d:b7:66:d3:18:25:b8:44:c3:b6:
                    ef:5f:1b:7a:2b:a7:e5:46:a2:54:39:56:de:12:5f:
                    32:a9:e5:54:c3:e5:82:cc:6b:1d:61:f0:50:a7:6f:
                    16:54:6b:de:25:b4:0e:83:56:31:6f:15:e2:40:a3:
                    07:76:85:34:1f:87:34:ec:6f:47:dc:db:a1:6a:f5:
                    a6:1f:1c:ff:44:83:47:9d:d2:a4:28:0d:ff:5f:09:
                    e8:23:a3:a6:4b:b2:83:eb:1d:61:38:b3:b0:15:c2:
                    da:a3:80:ba:2e:b9:85:6e:ed:e3:c8:cf:28:f7:1f:
                    cf:3a:35:aa:14:30:4f:92:9e:94:e6:2a:b8:14:b9:
                    a4:d4:ef:8d:36:9b:3f:07:e0:e6:85:6a:47:ce:6a:
                    63:5c:74:c4:57:e8:cd:1c:85:44:e2:ce:6c:6e:27:
                    27:5d:df:0f:05:aa:07:8f:ee:e3:34:f7:17:6e:49:
                    dc:da:20:18:d9:f7:73:7c:e8:cf:d0:5c:9b:5d:00:
                    f2:d4:92:3b:45:8a:93:a6:15:88:f6:11:9c:b2:29:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58060

    Signature Algorithm: sha256WithRSAEncryption
         1f:33:eb:6f:99:f7:3a:88:ed:a3:5a:90:15:51:0e:f7:53:24:
         5c:85:81:7e:6f:ad:fe:2d:a8:a7:d9:2f:05:50:9d:9e:27:31:
         00:cb:0b:ad:9c:2e:eb:cc:d8:a0:e4:1a:b7:41:a8:b2:7e:05:
         18:bf:8c:6b:30:42:b3:37:71:5b:f9:89:af:2c:db:bc:fc:20:
         a6:ea:e0:da:65:24:65:7b:bf:29:a1:a7:42:c8:f0:d1:20:bb:
         e9:57:b7:89:d5:11:e6:3a:1d:eb:24:0c:e5:14:6a:5c:3c:04:
         6c:0b:3a:0c:47:cd:7e:62:82:a9:76:13:fa:4d:f7:4c:27:23:
         b2:02:a6:ff:a7:6d:37:19:9c:0b:c7:45:64:14:a6:ea:27:87:
         ef:68:c5:54:4e:4a:db:22:e5:1b:bc:50:dd:00:85:86:93:e8:
         8b:e2:79:e3:a6:b4:18:bf:91:fa:29:86:a8:e0:67:ca:2d:73:
         31:cb:3b:dd:a6:d2:f2:0b:90:e2:7c:7c:91:df:01:ec:e6:8f:
         09:b0:16:60:50:ea:51:92:da:94:df:bc:18:2d:49:93:40:69:
         89:71:f5:e6:a7:06:c5:61:2b:1c:d7:e7:e3:16:27:0f:ba:41:
         13:35:04:05:fe:fe:34:82:f8:2d:d2:35:26:84:dd:8f:41:2b:
         19:a0:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 20:21:53 2024 by rpki-client on console-fra.rpki-client.org