Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
File:                     8tWTsch7gXOexBkQKVvzhfLJqZI.cer (raw, json)
Hash identifier:          kcEMb1PsCsjW5/R9QKDbQ/YkOj1aBfUgjQtYh1aiHxM=
Subject key identifier:   F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E13449D8D6790873E89625FAFA983CC38
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 06 Mar 2024 10:17:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210892
                          IP: 5.1.45.0/24
                          IP: 37.235.120.0/21
                          IP: 79.135.124.0/22
                          IP: 109.224.223.0/24
                          IP: 109.224.232.0/24
                          IP: 213.254.180.0/22
                          IP: 2a11:2b00::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:13:44:9d:8d:67:90:87:3e:89:62:5f:af:a9:83:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  6 10:17:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:30:b0:01:51:ce:6b:31:5f:30:5c:b1:12:
                    f9:a1:50:ce:d1:7b:7f:5c:a5:d9:a4:e7:72:98:67:
                    32:56:be:ec:ba:d9:88:b6:02:72:7c:51:da:b8:0b:
                    69:de:8c:b3:b3:c1:b1:5a:3a:e7:89:ea:41:25:ed:
                    db:f2:a0:10:90:d7:c7:8d:f1:16:39:c8:fb:0f:7e:
                    6a:bc:91:64:f5:0c:cf:e0:b1:23:46:0e:d1:35:b6:
                    98:1c:be:f6:74:a1:b9:e4:8f:c2:1a:91:d8:59:2e:
                    78:16:64:72:1b:b3:db:b0:63:7c:44:2c:5b:90:fb:
                    d8:69:c7:d6:09:3f:0d:a9:61:db:6a:45:c4:62:a9:
                    8b:db:19:47:4c:10:7f:b4:16:d7:b4:96:8e:e6:01:
                    a6:8b:20:6d:fb:b9:90:1f:26:43:1d:7a:f8:8c:17:
                    7b:98:91:f5:eb:9f:0d:18:ae:7c:a0:78:c8:23:ce:
                    14:1d:30:48:30:12:60:33:7c:8d:2c:cd:4e:13:82:
                    8c:a6:12:4b:76:b9:16:a0:d5:92:4d:46:84:f7:8e:
                    a1:91:24:7b:47:56:c4:ec:2c:1c:14:a9:57:31:a6:
                    98:72:51:8a:82:0c:b4:76:44:f8:de:de:41:db:45:
                    67:91:b3:e9:03:09:ce:13:1b:48:f7:9d:68:64:bf:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.45.0/24
                  37.235.120.0/21
                  79.135.124.0/22
                  109.224.223.0/24
                  109.224.232.0/24
                  213.254.180.0/22
                IPv6:
                  2a11:2b00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210892

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:97:d1:f1:ee:46:5c:d2:3a:0a:86:97:c1:e8:41:0f:83:
         07:04:6b:17:a4:f8:d3:0c:a6:6f:aa:54:91:81:57:53:5d:a6:
         13:67:41:e4:c9:4c:56:a1:4d:25:4e:41:3d:23:49:62:6b:5b:
         dc:93:68:fb:db:27:ce:c3:f0:92:4c:c1:7b:04:a1:e5:76:48:
         25:63:31:86:6b:fc:60:98:25:03:a2:b3:33:1d:00:cf:21:fc:
         87:eb:04:a4:fe:65:0a:fb:02:dd:32:bd:3e:91:5e:73:df:e4:
         e5:37:04:23:1d:2d:66:8c:e8:a1:23:3e:6b:11:71:46:57:4c:
         e5:a8:3b:d2:fc:da:d0:d5:df:30:22:24:55:57:f8:ca:4e:81:
         5e:60:7c:24:41:f7:e3:31:02:ca:9b:12:f7:5c:8f:0a:80:4e:
         21:ee:ab:0c:f0:bd:7c:ea:46:80:55:7e:28:f6:d3:ff:d2:27:
         0c:fc:f0:33:2d:45:f4:0f:d7:5e:61:f1:b2:b1:d8:df:58:39:
         ed:a1:ae:af:28:bd:44:58:48:c3:c2:49:0f:43:a1:8b:d4:81:
         07:ae:36:b8:eb:1d:e3:eb:6b:9e:7d:82:5b:96:36:9b:db:8e:
         62:de:a6:7d:cb:be:df:d6:74:df:05:4f:25:c1:17:82:9b:e1:
         c7:8e:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:17:18 2024 by rpki-client on console-ams.rpki-client.org