Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
File:                     7fVL4bXtX9WS-spGjfERAJXz6go.cer (raw, json)
Hash identifier:          ywmCjedSZ+2DVHKDOLdh+XBIw+kKFR2ajAMo/PJ0vcg=
Subject key identifier:   ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BA64D090388CE4B92E3927CEF79368
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:31:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208550
                          IP: 45.129.52.0/22
                          IP: 2a0e:4440::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:ba:64:d0:90:38:8c:e4:b9:2e:39:27:ce:f7:93:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:31:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:a6:ec:a1:f9:45:ca:e4:d3:da:f1:f0:09:
                    4f:15:61:47:24:b8:2c:5a:0d:db:ea:54:9e:c3:b7:
                    f4:c5:35:9e:39:ef:c2:10:7a:3d:98:ad:50:64:91:
                    f4:62:e5:38:bb:95:d9:a6:29:cd:9c:49:b9:76:5e:
                    45:5e:e2:3b:d8:6f:9d:e0:df:07:35:21:08:9f:22:
                    d7:91:e2:74:a2:5c:19:aa:93:cf:db:34:62:22:fb:
                    86:13:eb:13:95:f2:8b:fa:c3:9a:35:cf:47:f2:f8:
                    4e:de:26:78:bf:cb:f2:22:61:e8:78:16:12:d5:19:
                    bd:f9:34:3a:34:9e:83:fd:7d:cf:06:f7:86:78:51:
                    c2:7e:b7:66:2c:28:77:85:5f:81:09:2f:98:e3:42:
                    ab:fb:df:3d:dd:cd:9e:55:58:df:2e:28:6d:08:0f:
                    ad:3f:cc:d2:86:a0:06:6c:a6:16:98:06:f6:8b:2b:
                    db:21:36:24:23:49:8f:d6:34:31:e5:29:37:b3:0d:
                    e4:e2:72:2f:99:c9:ef:e1:93:b1:85:7d:17:2e:06:
                    89:b6:02:ce:b6:65:e1:fb:b7:87:bc:68:82:a9:a6:
                    2b:50:57:95:b7:40:a2:88:e5:ba:aa:c5:bb:07:55:
                    63:c9:df:ca:63:da:a6:55:93:08:2c:cf:78:0b:f9:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.52.0/22
                IPv6:
                  2a0e:4440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208550

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:81:23:d2:bd:51:98:79:a5:84:60:f8:6c:6e:84:21:d9:
         93:00:2c:8e:70:5b:96:e8:6e:1f:cd:a1:c6:41:4e:7b:a0:75:
         af:00:e0:48:9c:4c:4a:cd:ce:ce:83:3d:f3:ba:9a:2b:52:dd:
         cf:ac:92:78:8f:fa:65:03:4e:87:52:e3:ba:c9:a0:2e:6d:d5:
         64:b9:57:da:d3:26:01:2e:cc:e6:3b:a5:9b:79:47:37:06:a3:
         20:d7:55:6d:c4:c8:a3:d9:22:97:c6:a9:d1:61:37:84:23:ba:
         91:c3:44:87:39:f1:29:f3:90:ec:7c:15:5d:79:3b:bc:71:1e:
         2a:29:f3:67:a0:7c:5f:75:a6:b0:c3:b5:49:9b:ce:26:e1:1d:
         c1:09:ff:b9:33:56:30:35:01:cc:0b:d2:c7:b8:cf:0d:87:0b:
         d3:45:b0:c7:7d:bf:a7:2c:92:99:e1:8f:e5:62:47:70:05:96:
         f6:22:41:35:39:cf:48:66:ff:f1:f9:47:c7:4c:2c:6e:91:4b:
         99:82:be:8e:8f:55:78:86:e7:e6:72:d7:26:88:83:00:29:1f:
         38:f5:e6:70:c8:e4:fe:f3:8a:a5:f3:47:1c:35:f5:52:7f:67:
         a2:0a:5b:d4:9d:f9:e0:a1:d3:29:e8:35:96:2c:cd:6b:82:84:
         a8:d8:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:24:51 2024 by rpki-client on console-ams.rpki-client.org