Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
File:                     72eEaVdKzAPXguYygf9E-qqz-Ec.cer (raw, json)
Hash identifier:          QO7/myOrmbnzCkJxPxkwbY5MTvtWsFeDkkBu5R/HsU0=
Subject key identifier:   EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA29133265857FE9205ADA70943367B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:32:18 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 207440
                          AS: 208037
                          AS: 209231
                          IP: 2.56.140.0/22
                          IP: 86.110.204.0/22
                          IP: 89.232.172.0/22
                          IP: 185.161.236.0/22
                          IP: 185.251.36.0/24
                          IP: 2a09:c540::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:13:32:65:85:7f:e9:20:5a:da:70:94:33:67:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:32:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef678469574acc03d782e63281ff44faaab3f847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:d9:5b:da:8c:d0:51:ba:7f:8e:f9:b4:48:
                    28:c6:3c:4a:a0:c8:27:5e:71:d3:7d:b2:d1:1e:3b:
                    c9:6a:d7:c2:65:0f:c4:6e:f9:86:14:24:da:5c:7f:
                    1d:e2:34:b2:6e:6f:60:62:f9:0d:e3:42:ed:37:c5:
                    23:cf:04:20:85:9a:2f:62:5e:5f:12:0d:3e:8f:83:
                    45:4a:07:07:bd:af:4a:3e:56:8e:50:c2:7b:be:67:
                    9b:e4:c5:19:6d:44:b3:b6:89:88:ec:f7:ba:ea:f8:
                    0c:33:50:c7:fd:66:fd:f1:bf:ce:d8:ec:82:db:d7:
                    de:c8:e0:d8:42:24:f7:f9:f6:d9:1f:ab:42:16:b2:
                    d1:7e:ed:fc:e0:0b:3f:f5:38:bb:ee:c2:ec:d7:5a:
                    1f:7f:01:04:01:85:03:d6:02:34:c8:0c:b2:45:d4:
                    70:b4:42:18:bb:27:10:3b:ef:44:bd:cb:e5:de:29:
                    fe:14:db:4b:55:7e:3f:3d:c8:14:dd:96:9c:35:24:
                    32:89:f0:88:4e:4a:d5:92:c7:f1:a4:e5:d9:71:1d:
                    a4:04:34:ac:68:85:52:31:a2:02:f3:0e:63:cf:15:
                    cb:a2:65:11:ba:ae:cf:e6:e1:18:7b:45:3a:f4:34:
                    3c:30:ec:87:20:02:e8:dd:8d:23:13:27:f6:a9:f2:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.140.0/22
                  86.110.204.0/22
                  89.232.172.0/22
                  185.161.236.0/22
                  185.251.36.0/24
                IPv6:
                  2a09:c540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207440
                  208037
                  209231

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:cd:1e:fe:31:02:f3:81:c7:4c:9b:6b:96:b0:70:d3:74:
         b3:e4:50:d2:03:6b:be:5b:f9:d4:82:f0:ec:19:53:8d:f9:a5:
         74:7d:d7:b4:01:f6:6a:cb:00:5d:12:c7:ed:70:68:5a:78:9e:
         46:21:6c:6b:26:08:d9:8a:04:f6:3f:c9:e7:0d:bd:dc:00:b3:
         4f:d4:46:07:3a:f8:cd:98:d7:89:0b:38:5d:8a:65:3e:88:db:
         38:5b:87:e1:5b:3c:28:11:b2:de:68:9d:b9:3a:ce:20:ff:58:
         e4:48:6c:99:96:64:75:18:44:62:1b:38:71:0e:80:76:f0:e4:
         63:f0:1e:f6:e3:d4:0e:9e:83:4d:df:ac:b0:95:8d:c7:34:55:
         60:17:c2:73:7a:7e:a0:74:2d:e8:3e:d9:cc:96:bc:fb:6d:7e:
         c8:d8:96:30:15:65:4e:bc:80:43:3a:47:ec:7a:69:6d:92:ad:
         0e:07:14:25:ac:90:48:36:bf:43:9e:67:0c:2d:aa:45:04:ff:
         a2:7a:01:d6:48:2d:69:d2:7a:8d:90:4e:63:cb:9e:94:ae:1d:
         65:04:57:a2:b9:53:fd:a4:d5:e7:c3:03:f7:8c:df:ac:d5:52:
         40:69:6f:b2:ea:93:7d:60:54:a0:a0:40:e0:c9:b7:65:ea:9e:
         f0:04:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:23:11 2024 by rpki-client on console-fra.rpki-client.org