Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72SpHiOLNAocRdvsX5ci5dIcpo0.cer
File:                     72SpHiOLNAocRdvsX5ci5dIcpo0.cer (raw, json)
Hash identifier:          dzg6gkBI+iCpQL+V0C1iQAyBjZZofMHXzYXHVpAWih4=
Subject key identifier:   EF:64:A9:1E:23:8B:34:0A:1C:45:DB:EC:5F:97:22:E5:D2:1C:A6:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC37BD3771D70A4B636CFA3FA78830BEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Matt/3/EF64A91E238B340A1C45DBEC5F9722E5D21CA68D.mft
caRepository:             rsync://rpki.co/repo/Matt/3/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 01 Jan 2024 05:25:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49592

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:7b:d3:77:1d:70:a4:b6:36:cf:a3:fa:78:83:0b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:25:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef64a91e238b340a1c45dbec5f9722e5d21ca68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:56:61:ca:b7:20:e4:09:69:1b:f4:e7:aa:
                    db:25:97:b2:09:9d:85:a8:0e:ae:f5:5b:c6:11:4e:
                    ba:2c:f4:1e:58:4d:68:ad:7c:d2:9f:19:b4:ca:e8:
                    53:c1:e9:bb:84:fe:f0:e4:80:fc:d9:7e:f7:6b:23:
                    4b:e8:63:ba:06:59:2b:96:64:f1:05:71:15:33:f5:
                    4a:12:dc:c9:bb:da:34:06:5f:1f:31:04:79:9e:89:
                    12:b9:05:b7:a5:f4:6c:ab:9f:47:92:02:a4:84:81:
                    ce:f0:e0:08:7f:24:e5:cc:18:a6:2b:a1:c1:fb:ca:
                    bc:c6:74:92:19:ab:86:28:2d:19:b8:c5:91:11:6e:
                    0b:7e:b7:07:dd:10:db:e2:1a:af:7f:42:f4:1a:79:
                    49:f9:98:a2:e2:3f:e9:90:9d:89:33:bf:d1:a0:f2:
                    14:db:2d:43:4a:af:65:b2:26:90:b9:c5:7c:d6:48:
                    bc:ee:75:85:a0:fe:f9:ec:e1:91:34:98:4c:80:05:
                    ff:0a:5c:35:6c:22:6f:d8:c3:91:17:b7:61:e2:19:
                    73:c7:4f:bd:98:b6:5a:39:51:d4:d1:f5:8b:5d:42:
                    9b:17:d3:13:ad:2a:98:a5:53:58:7e:ef:01:5b:ab:
                    e1:b6:37:d5:31:10:81:97:00:48:0e:c8:59:97:42:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:A9:1E:23:8B:34:0A:1C:45:DB:EC:5F:97:22:E5:D2:1C:A6:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Matt/3/
                RPKI Manifest - URI:rsync://rpki.co/repo/Matt/3/EF64A91E238B340A1C45DBEC5F9722E5D21CA68D.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49592

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:41:b2:f2:6c:af:0c:41:3c:c8:f7:9a:a0:fc:4f:cf:9b:
         91:a4:22:80:27:1a:d0:4d:c3:28:e3:c2:70:68:7e:5e:49:05:
         1e:fe:cc:42:ca:fe:da:36:c1:66:7c:65:22:c8:a1:1c:30:96:
         57:57:a9:04:56:7c:d2:82:b5:7e:28:46:c2:4e:9f:c9:2d:56:
         63:31:d4:25:14:f4:b0:45:e8:a6:16:cc:6e:6f:d8:63:04:0a:
         15:e6:5b:7f:b0:a5:ca:d9:ac:63:14:b9:59:8b:76:dc:b2:2a:
         78:eb:52:4c:e6:8a:19:0e:95:c0:2d:9d:19:b1:cc:dd:e1:a3:
         4f:b8:b0:7f:2a:aa:20:c7:8a:e5:10:89:e1:53:48:14:12:f3:
         c7:b8:04:65:60:0f:46:2b:c5:e7:9a:11:a5:55:d3:0a:01:d7:
         be:9e:59:db:ee:56:ef:d0:0d:55:3f:63:05:25:12:4f:cc:ce:
         3c:f9:38:06:b0:c1:d1:cb:87:dd:c5:31:45:3b:a1:b5:35:ba:
         71:fb:80:27:f5:fa:78:2c:a1:08:09:18:b0:6b:6a:95:a3:5c:
         07:49:7a:8b:12:15:4c:f7:e4:30:13:51:ed:d7:aa:8c:5f:03:
         09:fd:42:d9:a9:8f:26:70:eb:0e:c8:ef:1f:2a:d1:9f:8b:91:
         e9:f6:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:30:46 2024 by rpki-client on console-ams.rpki-client.org