Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
File:                     7t3kHzYumK430e_HyvPn08FlPuI.cer (raw, json)
Hash identifier:          lJcNsguGlggNASmFuUcaG7HsPthWbEOpa1TyZjCsHOQ=
Subject key identifier:   EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC50104F863937EEBC8F2C6FDC5F1EB80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 24676
                          AS: 31103
                          IP: 62.141.48.0/20
                          IP: 84.19.160.0/19
                          IP: 87.118.64.0/18
                          IP: 95.169.160.0/19
                          IP: 217.114.208.0/20
                          IP: 2001:1b60::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:04:f8:63:93:7e:eb:c8:f2:c6:fd:c5:f1:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:92:79:d9:20:43:7e:91:53:63:1b:2f:d4:
                    d1:11:bd:17:18:b6:18:2d:e3:81:de:cd:d4:06:42:
                    66:d2:10:59:7c:88:89:f2:22:61:5b:1f:43:62:f4:
                    8d:5c:02:4a:46:80:fc:c6:5e:db:80:42:13:b8:46:
                    18:26:ff:f2:cf:e2:2b:da:78:49:76:25:9f:24:51:
                    67:9b:2e:41:79:e3:0a:7a:3c:7a:2a:86:ca:61:b1:
                    e1:be:5f:29:97:bf:df:0c:ee:1f:dc:16:74:f0:fc:
                    ac:05:2a:25:39:01:5d:c3:bf:4b:7b:19:d4:8a:13:
                    fd:77:39:a2:2d:58:f5:8a:e3:23:72:8a:0b:e6:b4:
                    2c:c5:4d:9c:88:80:b9:f1:d2:22:b1:90:43:b2:7d:
                    50:74:c8:c9:ce:b3:d1:c1:2f:73:ae:2d:87:7e:f8:
                    8c:13:f8:8e:03:2e:b1:b0:dc:7e:e8:5c:69:3d:52:
                    4a:dc:54:6a:25:59:0b:4a:8b:a2:64:9c:c2:ea:b4:
                    4b:01:14:29:1a:87:90:8d:1f:ec:05:1b:8d:f3:3f:
                    69:0f:ae:02:37:d8:57:97:e3:d3:fc:f8:4a:08:dd:
                    ba:5e:7d:a3:dd:90:b9:f5:96:a9:89:42:6a:15:81:
                    e4:2b:1d:dc:35:ac:1e:01:68:8c:0f:ac:f0:5c:b6:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.141.48.0/20
                  84.19.160.0/19
                  87.118.64.0/18
                  95.169.160.0/19
                  217.114.208.0/20
                IPv6:
                  2001:1b60::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24676
                  31103

    Signature Algorithm: sha256WithRSAEncryption
         3d:f4:02:a8:d3:d8:61:74:aa:07:71:0a:2f:ab:24:41:c3:2b:
         04:5a:c6:3b:5d:0e:fa:b4:fa:ba:be:a2:72:4c:fb:98:17:0a:
         24:ec:2b:96:7d:7c:fc:d0:b1:8a:21:5c:6a:c5:fb:b2:e1:07:
         8e:da:51:7f:42:92:6b:13:39:58:fd:6f:72:70:c5:2f:33:da:
         e1:52:ae:4c:59:e5:f7:98:63:c7:14:e1:02:b3:c7:ca:31:8f:
         7c:88:b1:a6:df:58:d5:3e:42:13:6a:6c:1f:13:c5:f8:bd:de:
         37:8f:ec:77:29:0f:2a:29:6d:aa:6e:dd:9e:97:07:59:5c:75:
         4c:e7:67:77:50:83:a7:bd:ef:17:0c:bd:d1:54:bb:53:19:ad:
         a7:e9:4f:89:60:80:4f:f4:e0:a2:3c:5a:9d:0d:c9:38:35:34:
         99:f3:4c:e6:54:3d:50:f7:8e:9c:c4:fe:cf:c8:36:94:6d:ab:
         5f:d4:88:ba:82:ec:6f:23:36:53:4d:f7:18:20:63:8c:c6:64:
         0a:bf:58:84:44:a6:ce:58:c8:be:e5:eb:d3:32:6a:b8:c8:0a:
         ae:fa:81:75:04:f5:fa:ee:9d:ec:e4:bd:d5:24:d0:d6:75:39:
         02:c5:76:5d:87:60:ce:e1:fc:6f:59:cd:ae:a3:19:aa:35:04:
         27:d7:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:43:48 2024 by rpki-client on console-fra.rpki-client.org