Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.cer (raw, json)
Hash identifier:          1HTvU7LyH5ByG0shF0OY7YM1GRpBJ84JngcKXZCAqyQ=
Subject key identifier:   F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC870F80EA81759A27629EEBA52BFFAB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:31:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.28.190.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:70:f8:0e:a8:17:59:a2:76:29:ee:ba:52:bf:fa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:31:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:8c:cc:18:99:03:d4:a6:87:76:3f:63:6c:
                    fa:9f:2d:30:b8:6b:0f:b9:ae:59:4f:63:46:a6:40:
                    92:de:17:b6:d7:f1:22:8f:59:33:e9:45:51:41:69:
                    5f:d4:9e:ff:80:f4:53:d8:cc:71:3f:8f:c8:df:92:
                    38:0d:0d:4a:d1:1e:44:80:07:40:df:62:5d:75:98:
                    1c:42:06:54:64:44:67:22:91:a1:8a:15:f0:68:f0:
                    d4:bb:0f:73:ba:7e:73:f2:98:d9:9f:1b:56:13:b4:
                    07:a7:95:a7:2e:2a:a9:44:13:cd:29:52:3d:89:24:
                    ce:8f:ec:61:88:7a:2a:de:82:93:c8:1d:fe:93:0b:
                    ce:9e:15:da:af:bd:f2:6d:87:f9:35:4f:59:21:32:
                    b3:40:6a:fc:6f:f5:bf:f7:1c:69:5c:fa:2b:37:58:
                    70:78:c8:4e:f6:c1:7a:e7:57:f5:74:8a:c2:9a:e9:
                    9f:a9:aa:be:09:27:0b:fc:39:61:82:77:c1:83:1c:
                    83:05:f8:59:cc:73:83:6a:c1:75:62:03:66:50:61:
                    bb:cc:f5:85:e1:80:0b:0b:40:62:c0:5e:f8:2b:ef:
                    46:66:68:4d:de:2a:b5:ee:a4:43:67:76:1a:88:bd:
                    d2:9f:dd:f0:2e:25:a5:b6:88:53:1d:b2:d3:c4:93:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:36:9c:a2:89:74:f6:c2:5b:a5:bb:be:7c:84:29:d6:ce:06:
         e6:28:c4:b9:11:4c:cc:de:7b:e7:b1:cc:af:97:eb:d6:60:69:
         ab:5e:51:7f:39:24:73:0b:0f:02:c6:4d:7f:d7:6d:9c:33:4c:
         1e:97:db:7e:4e:75:97:a5:2d:5a:dc:57:eb:a9:47:68:5a:fa:
         3f:10:eb:83:6a:4f:7c:61:17:b7:9b:2c:29:77:24:85:d1:c1:
         70:8a:9f:c5:16:cd:af:e1:dc:cb:ae:1a:0c:bd:54:74:8a:79:
         03:be:5b:ab:06:95:bf:13:2d:5f:14:d4:d3:d0:e3:24:bd:89:
         aa:4e:7f:b2:ff:15:f8:fb:1c:0f:c7:6b:74:b2:79:0d:46:c1:
         be:71:6e:91:9c:f9:39:66:47:77:7b:38:dd:bf:73:e4:38:77:
         30:b5:fd:e1:0c:e0:74:1f:a8:2b:e9:6c:d6:12:0b:b4:3a:fe:
         80:93:57:9d:d3:4a:a3:dc:43:2e:96:22:8c:cb:f1:1e:e8:a4:
         75:02:d0:1d:32:16:90:d5:22:45:b3:0f:ea:2b:5a:7c:49:81:
         7f:75:26:92:d5:52:6b:15:b0:4c:cd:eb:d3:dc:ae:31:2f:c3:
         68:1f:49:ff:1a:0d:a8:16:3f:ad:04:f1:10:07:fa:ab:40:3e:
         cd:69:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:58:08 2024 by rpki-client on console-ams.rpki-client.org