Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
File:                     8mAhR5HPhJn8k68B96Q_XL6QKpg.cer (raw, json)
Hash identifier:          XvV9+m+cPswRbfNf1HuZdWGQO82YRMddskrk/rRDmwo=
Subject key identifier:   F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC649B907BA3D5F927D09476555216273
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:29:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 62257

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 08:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:b9:07:ba:3d:5f:92:7d:09:47:65:55:21:62:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:4e:ff:3c:e2:8a:81:d8:9f:63:68:aa:31:
                    a6:e4:db:7f:7b:f1:c1:ce:66:78:b1:93:a3:86:56:
                    96:58:13:07:d7:ee:ba:a9:c4:3b:11:59:29:bd:2a:
                    30:33:52:cd:d2:4e:64:2a:d3:3c:e4:3a:83:58:67:
                    45:94:0c:65:6c:44:1f:47:5b:e1:7f:6c:10:d0:29:
                    d2:21:52:e4:48:27:07:5e:16:8a:ae:0c:48:03:b7:
                    70:10:03:dc:22:48:8c:66:a4:78:18:55:fd:a3:9d:
                    4f:d8:3a:b4:d9:24:dd:be:0f:e8:cd:55:37:f2:bb:
                    b3:52:b5:a7:93:3b:eb:1b:01:fb:2b:e8:14:b5:e5:
                    c8:32:34:6a:70:0a:00:c3:44:04:5b:b0:be:14:9a:
                    56:a9:4b:b9:ca:6e:d8:2a:41:09:11:54:4c:a6:d9:
                    e7:c0:48:e4:1e:78:8f:77:a7:c4:10:95:41:ac:2b:
                    fd:7f:ca:9f:a4:60:81:d2:4f:6a:99:22:20:5e:fa:
                    da:ef:bf:5d:1d:02:92:28:59:5d:7e:35:02:db:1a:
                    51:ff:bb:95:d1:e2:00:0d:45:89:4f:d6:e3:bd:31:
                    11:f3:56:55:60:51:29:c5:ca:b4:0c:e2:42:d3:01:
                    2f:18:c5:3a:9d:6a:ce:31:53:96:e6:db:f2:82:15:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62257

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:62:5c:3b:4b:19:f3:9e:7a:c8:00:b4:78:0a:f0:c3:fe:
         68:34:86:1f:6c:67:f3:61:2d:05:e0:42:c9:6e:cb:36:74:52:
         29:76:be:e0:95:0c:09:93:8a:0d:95:e8:4c:79:ae:58:f5:92:
         d7:f2:94:09:72:91:eb:c2:a5:5a:74:c9:35:ac:5e:d4:61:1d:
         d6:e5:29:ea:5d:3d:3d:b8:a7:e7:f3:bf:6b:fc:bf:56:4e:fd:
         47:0a:79:a5:e3:87:1d:bb:47:34:5b:5a:d1:5f:8e:64:86:fb:
         a8:48:07:7c:69:c1:1a:ab:1a:cf:8d:83:29:66:ef:48:b2:da:
         71:17:68:c0:91:83:07:8f:91:cc:b5:9c:06:73:b1:d2:8d:83:
         db:aa:56:32:b9:ec:59:02:1c:f6:86:11:cf:41:0b:7c:77:6a:
         07:4f:67:72:12:e1:d4:b8:c8:b7:8e:13:40:e3:57:eb:e4:1c:
         ad:ad:be:dc:7c:be:3f:0b:87:09:97:ba:49:fa:14:cf:96:3c:
         33:25:ad:26:f3:a7:aa:ee:2a:bc:48:28:a1:04:d7:37:0d:1c:
         d8:37:6c:0b:ae:21:15:18:70:69:0d:ca:22:58:69:39:be:a2:
         52:e4:27:9f:ff:53:af:3a:0e:7f:ab:ed:f6:b8:6a:47:8c:e9:
         96:fa:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:48:07 2024 by rpki-client on console-ams.rpki-client.org