Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.cer (raw, json)
Hash identifier:          Voh2ktYsltMWjATGWugUPiI6+gVuUMwhNFHmL7D4wbY=
Subject key identifier:   EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D08AC2CD8AF53CB3ABCDAF323F33D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 16085
                          IP: 193.109.229.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:08:ac:2c:d8:af:53:cb:3a:bc:da:f3:23:f3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:a1:3c:4e:47:14:ec:22:38:f1:70:02:49:
                    d6:17:a4:68:2a:83:1e:44:5e:33:35:70:1f:e2:56:
                    fa:35:f5:64:94:07:33:1c:db:76:c5:a2:d0:ce:76:
                    49:80:a6:61:7c:b8:7d:ae:61:31:32:31:84:97:ec:
                    12:77:24:68:24:15:02:76:ed:ec:40:25:d9:f2:7e:
                    6e:97:32:2f:73:ed:f4:7f:e5:25:93:2a:b2:cf:85:
                    25:f1:9c:a5:ef:2f:1a:78:3b:54:72:f1:a8:b3:6e:
                    c3:9c:7e:43:18:b3:7f:5a:03:bb:db:fe:2f:46:21:
                    ac:c5:71:2c:54:a5:f5:37:db:59:21:b6:e6:1e:8a:
                    75:80:78:e8:eb:ca:42:3a:e2:92:9c:13:82:21:d3:
                    ef:22:a1:74:ef:cc:67:4f:26:3b:86:ee:d7:fa:a5:
                    be:47:28:2e:5c:e2:2d:c0:c4:27:64:ad:b1:dc:51:
                    71:12:f1:98:75:ff:7a:2e:13:50:c6:42:0b:9e:51:
                    c1:4c:7a:87:f7:9b:f6:c4:5d:b4:6e:f9:48:67:22:
                    9f:8c:1a:83:82:53:fc:0f:bf:79:3f:5c:2f:b7:2a:
                    66:e3:e8:79:d2:7b:0e:92:64:fe:e8:1a:65:1c:ba:
                    94:21:c7:4b:88:0d:55:02:50:c5:fb:bd:a7:aa:22:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.229.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16085

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:30:42:1a:f1:2c:04:f4:1f:33:be:31:24:36:9f:95:b2:
         f8:ad:02:01:d0:cc:1e:ad:56:05:c8:d3:37:0c:17:3e:e7:aa:
         29:7f:c2:83:0e:f6:44:a0:a6:51:d2:06:8b:c6:0d:68:15:bc:
         29:8e:56:1f:3f:33:d9:d9:e3:96:50:aa:24:39:c1:08:f6:9e:
         30:7a:6c:57:38:d2:ef:2a:64:32:7b:39:17:f6:aa:80:40:8a:
         0f:43:a8:af:9b:7a:20:b3:08:ce:54:b5:04:8c:da:d9:59:84:
         c3:67:3d:fa:06:3b:6f:94:21:ee:80:a0:4e:54:51:d3:c9:f2:
         ab:f2:69:c8:ef:a6:af:1c:61:88:58:e4:24:9c:39:d7:f8:ea:
         b2:1d:1d:a7:ae:5c:19:e3:70:bd:86:5d:ef:b2:e5:c4:dd:b4:
         11:42:32:09:6c:5f:14:9d:3b:56:7c:7b:b2:a9:e8:84:8f:1b:
         4b:21:7c:70:4a:28:5f:cb:37:c6:a7:80:f2:9f:09:99:3f:df:
         74:dc:cf:a0:a0:c3:ba:82:0d:e1:e2:1e:3d:76:57:a7:3f:20:
         8c:b1:6b:85:2b:97:6f:42:9d:64:ea:c1:b0:c2:59:94:f7:fa:
         6e:cd:1e:f3:9e:57:93:92:40:64:3d:9b:35:ab:16:b1:67:16:
         4d:99:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:56 2024 by rpki-client on console-fra.rpki-client.org