Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
File:                     7iUCbllV3N0RFHb5toSdcoGFRps.cer (raw, json)
Hash identifier:          vIW8GX6dgt3HDN+pUdDsASJIRGYTa3Y9vOhoibg9IDM=
Subject key identifier:   EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FBF8BC1C9761217B57EDE472EA52FD0A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 28 May 2024 14:12:38 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 200683
                          IP: 185.68.4.0/22
                          IP: 185.231.67.0/24
                          IP: 188.64.212.0/22
                          IP: 2a05:1400::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bf:8b:c1:c9:76:12:17:b5:7e:de:47:2e:a5:2f:d0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 28 14:12:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee25026e5955dcdd111476f9b6849d728185469b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:82:5d:3b:5b:6f:9a:d2:97:1a:7c:b2:f1:
                    20:5e:38:58:c6:3d:01:c2:82:16:3f:d0:fd:98:d9:
                    06:ea:f9:af:f2:ce:7a:97:e9:41:02:e5:60:69:73:
                    69:66:cc:c4:25:78:36:77:97:25:9a:03:f1:83:65:
                    45:97:86:62:66:d9:60:0f:9d:14:4c:61:c8:03:16:
                    3e:e6:6f:a2:93:f2:8c:b6:25:7b:4e:d1:5a:8b:fc:
                    7f:95:f8:21:2b:64:aa:57:c8:45:c0:4f:65:ed:04:
                    6d:8b:f4:b9:58:2a:f1:24:be:13:6c:59:7a:d2:40:
                    b3:74:2e:1e:79:c8:eb:08:2d:47:a7:25:b2:c5:2e:
                    09:50:ae:07:08:7b:36:b2:cc:b2:fe:4d:41:c1:33:
                    87:4f:b8:49:3c:b9:3c:25:9c:17:a1:c6:fb:ff:98:
                    08:19:55:45:18:ed:db:58:d6:25:72:ef:00:26:5a:
                    60:8e:a0:c8:9e:3c:b5:3e:82:fc:94:52:b4:68:d6:
                    14:1d:90:d8:21:81:7f:a7:64:6d:f1:2b:8e:fd:c5:
                    f6:28:fe:4f:f8:25:d9:c3:c3:a1:4b:f3:95:2a:4d:
                    c3:3f:f0:f8:fe:5a:2a:a6:2c:df:1d:06:a5:b2:97:
                    8a:d0:1e:50:58:bc:be:8c:5e:74:97:37:9e:96:62:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.4.0/22
                  185.231.67.0/24
                  188.64.212.0/22
                IPv6:
                  2a05:1400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200683

    Signature Algorithm: sha256WithRSAEncryption
         05:27:65:ba:9c:2e:1b:3b:bb:a1:c7:34:5f:5b:8a:de:77:d3:
         bf:f2:d8:03:0f:59:e3:df:4e:52:ee:6a:8e:ad:03:d8:57:d0:
         e3:c4:04:32:b8:43:3d:c8:1e:ec:79:6f:cb:f6:11:96:ac:fb:
         84:80:05:ff:f2:ff:52:24:6f:85:f0:3b:66:10:85:19:54:32:
         1f:33:7d:7b:d7:08:f5:89:c2:93:f7:db:25:9f:91:ed:0d:28:
         42:09:72:82:09:f5:fc:0f:fc:12:c7:83:e8:63:cc:a2:d8:0d:
         95:f5:93:c8:7a:79:78:d2:af:e5:1f:a9:9a:3b:d5:0b:c2:86:
         55:50:03:26:c3:f2:da:70:db:4e:f9:65:cf:dc:16:6b:b5:3a:
         01:ef:d2:bb:1a:06:13:79:77:76:26:af:9e:56:d6:30:e0:46:
         bd:7d:cb:0c:55:c3:2e:44:5e:25:3a:77:3f:91:3c:ee:04:44:
         8a:1a:7b:1b:52:0a:43:84:37:fb:ad:8e:d6:fb:57:8f:3d:d4:
         fd:75:ca:21:b3:f7:d0:dd:87:ed:87:5b:95:10:c0:00:31:01:
         b5:a9:94:60:68:8f:9e:df:6a:d5:db:0d:54:42:6c:7a:af:b2:
         78:d4:71:8a:da:d8:9a:6d:04:f7:f2:7d:a6:8a:d5:48:1f:98:
         4d:a0:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:56:46 2024 by rpki-client on console-fra.rpki-client.org