Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
File:                     7gWBdnr0V55E2pd7EILZSzx7kpg.cer (raw, json)
Hash identifier:          yQyEDndhlzBB5ex1d6VSNKXlkQDytrfjLRX1DN7wXk4=
Subject key identifier:   EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC349188EEAC4EC909C69561B372F6B9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.105.119.0/24
                          IP: 195.85.224.0/24
                          IP: 2001:678:39c::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:18:8e:ea:c4:ec:90:9c:69:56:1b:37:2f:6b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee0581767af4579e44da977b1082d94b3c7b9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:fd:5b:55:10:80:93:ee:7b:1c:51:5a:cd:
                    a0:c7:ba:89:e9:45:3a:4f:20:8f:33:df:c7:ea:ff:
                    df:00:9c:00:c8:26:6c:7a:9e:59:72:b0:88:db:87:
                    de:99:82:ad:39:d1:82:02:78:b7:76:5d:b0:7c:74:
                    3a:93:3e:2c:4c:57:24:65:60:23:95:42:70:b4:e3:
                    f3:c2:20:79:c4:4c:3a:5c:ef:d9:2a:33:81:b1:e8:
                    1b:c2:91:04:a7:e9:85:29:a9:21:3f:8c:13:e5:78:
                    b1:b4:24:33:7b:12:df:1c:ce:e0:b6:04:7c:27:1f:
                    cd:56:6a:bb:b9:ca:ca:17:37:b7:36:75:ed:6d:ff:
                    c3:7d:53:8e:c4:5c:20:1b:81:56:7b:72:3a:ee:5a:
                    d9:e1:37:fa:79:d4:17:76:85:4f:36:1f:4a:6a:6b:
                    77:1d:68:00:54:23:04:21:57:3a:08:e8:5f:28:ee:
                    8f:b8:a8:13:f0:70:89:d6:42:24:42:d3:be:12:f0:
                    1c:5c:e8:b2:14:b3:a9:0a:f3:0f:94:05:09:14:6a:
                    e3:2e:f4:18:03:85:43:db:c5:f9:6c:0a:43:85:ff:
                    f1:3d:e6:bb:97:a9:73:cf:6d:8a:18:48:45:04:11:
                    92:4e:0c:f8:ab:e0:93:f9:95:f4:0a:80:1d:5f:64:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.119.0/24
                  195.85.224.0/24
                IPv6:
                  2001:678:39c::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:17:8d:87:4f:e8:86:f4:15:91:84:74:59:3e:d1:ff:07:c4:
         30:59:6b:53:cf:31:cb:10:1d:ab:50:b9:4d:51:f5:11:2e:da:
         58:5d:f5:c9:e6:5d:72:77:92:12:7f:b8:dc:d6:80:1b:60:c3:
         5b:99:ce:ad:53:27:d8:13:5d:16:a0:f0:fe:cc:7b:50:b5:d0:
         ff:01:ef:bb:76:51:28:11:41:1f:0d:ea:4e:e1:ae:21:e5:b1:
         aa:23:83:87:57:a9:b7:70:59:ba:29:ce:8c:aa:57:7d:ad:f5:
         6a:41:88:82:9b:bf:89:8a:89:d9:72:0b:75:dd:e9:b7:38:b0:
         94:29:88:51:81:78:53:df:67:25:12:61:0d:f4:7f:62:b3:6f:
         93:28:1e:71:58:5a:9d:f1:4b:16:08:cb:6d:6c:17:bf:90:07:
         c6:2d:e2:59:1d:5f:24:8a:85:6c:1c:dc:6c:8e:38:02:04:51:
         de:3b:13:32:16:a2:98:a6:c2:04:f1:72:a4:ef:cf:12:38:40:
         05:3b:4e:db:a1:b8:0d:6c:74:96:b6:bf:29:09:53:39:0e:26:
         70:0a:83:b7:ed:6e:cf:b4:60:6f:b4:f4:12:c8:d7:18:99:5b:
         ad:3a:1b:0e:ce:b8:24:e2:92:c4:9d:c3:9d:93:86:17:65:3e:
         a6:04:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:37:11 2024 by rpki-client on console-fra.rpki-client.org