Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
File:                     7w7IG5xlO440BQj_hI2wZuNncrA.cer (raw, json)
Hash identifier:          528zT0WISo0XQZCFeg6QsO+K0cl+P4+FeHB4pC3nhFw=
Subject key identifier:   EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF83A978E8EA3026E8D221BFD8A579
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203641
                          IP: 5.182.160.0/22
                          IP: 185.107.160.0/22
                          IP: 185.218.252.0/22
                          IP: 193.111.170.0/23
                          IP: 193.111.196.0/23
                          IP: 2a0b:dc40::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:83:a9:78:e8:ea:30:26:e8:d2:21:bf:d8:a5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:4a:1e:a6:db:8e:4e:8a:06:1e:87:e2:43:
                    ea:81:48:72:cd:cd:d9:d5:cf:22:2a:aa:8e:49:28:
                    8e:56:cd:d3:e0:73:6d:9b:7c:ee:f5:1f:54:a0:05:
                    ad:88:8a:ad:92:b3:ed:92:89:ca:d1:ef:ae:7a:b2:
                    63:3a:4c:bd:01:d8:58:5b:ee:0b:e5:78:e2:20:e3:
                    ff:8e:d9:6f:bf:85:21:ad:c6:72:76:6a:15:0a:86:
                    57:85:c9:5e:09:29:a7:bf:63:4b:b0:bb:0b:8d:9c:
                    f1:c4:d9:dd:b4:21:cb:37:0b:4d:2c:03:68:3a:78:
                    7c:b6:2d:f3:47:49:f9:cd:9a:cc:0d:d7:be:95:3a:
                    b1:3b:b1:90:15:4f:2d:7a:0f:a4:b7:4e:2f:56:c0:
                    d0:17:23:bc:29:a4:e5:fa:ba:f4:27:b7:9b:15:e2:
                    42:aa:0b:c7:2c:d5:86:20:ba:f7:2c:8d:c6:f6:da:
                    a9:41:ea:9c:00:30:15:ea:a3:a9:ca:74:c7:61:1e:
                    eb:f1:7b:a1:80:20:e7:76:72:d2:82:6a:1f:d1:07:
                    15:a4:47:de:a9:99:49:49:60:e7:e9:c1:09:a7:7e:
                    e7:8e:e6:0e:ac:b4:e2:a1:67:cc:7e:72:aa:fd:85:
                    b3:7a:62:c5:2a:56:4c:54:e2:af:3d:38:ce:31:cf:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.160.0/22
                  185.107.160.0/22
                  185.218.252.0/22
                  193.111.170.0/23
                  193.111.196.0/23
                IPv6:
                  2a0b:dc40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203641

    Signature Algorithm: sha256WithRSAEncryption
         68:20:f2:cc:da:b8:50:17:ae:a1:a9:c8:7c:da:0a:c6:52:5f:
         f6:0c:0c:6e:95:f7:0d:ea:d8:ed:93:30:cb:a5:91:c2:35:f8:
         0f:53:a4:c5:05:27:97:60:77:6e:59:ed:9c:9b:33:63:83:18:
         e4:81:e0:45:cc:af:5d:cf:b5:05:8f:f6:a6:de:a8:cb:75:d6:
         0f:ac:1f:6a:21:c2:af:52:1f:8f:63:36:4f:05:41:9b:dc:e6:
         e3:d0:d1:35:86:0d:fa:0c:43:73:97:7c:02:91:3e:d8:91:74:
         e4:0c:95:ca:31:c5:1a:cc:53:01:83:66:73:1e:f0:63:b3:06:
         69:18:95:9a:fc:62:26:b6:62:c7:b4:59:da:38:7d:ba:cc:9b:
         5f:58:bc:d7:c8:4f:ba:34:6c:5f:3f:8c:50:cf:c2:31:08:fd:
         e3:01:4c:08:cd:90:9e:0c:aa:27:86:14:f4:6d:84:87:25:17:
         67:fd:c6:79:d4:2c:c8:30:45:5e:2a:fc:5b:60:05:90:3f:8f:
         90:14:5e:89:b1:06:d9:2f:26:05:71:08:80:5f:69:6f:06:28:
         66:fc:6a:c8:2a:d6:b9:8f:74:25:f0:28:2d:49:e1:15:c4:45:
         b4:26:ba:91:66:c5:3a:eb:91:d0:c5:4d:a8:42:1e:0c:bc:8d:
         e1:0f:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:50:28 2024 by rpki-client on console-fra.rpki-client.org