Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
File:                     ABCrc5F2m18sVOM8i1p9-fN6M6g.cer (raw, json)
Hash identifier:          KRuh5G+phCaat1MSXVMog2giiNBqgSFbVHoM/qwKP2o=
Subject key identifier:   00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC2CEA58EC0C22AF36ED566C29678A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 47829
                          IP: 2.58.236.0/22
                          IP: 193.176.236.0/24
                          IP: 2001:67c:2c8::/48
                          IP: 2a09:ed40::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:2c:ea:58:ec:0c:22:af:36:ed:56:6c:29:67:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:3f:27:d4:6d:a7:80:9a:85:1c:b2:87:bb:
                    7b:74:50:3d:37:a4:c3:0c:7f:37:29:83:35:95:00:
                    3c:30:ed:52:d1:c5:ca:88:89:19:ad:de:7e:c5:4c:
                    ea:ee:2f:2f:4c:98:0f:06:b5:b7:59:a0:f4:2c:5e:
                    9b:0f:b3:64:c5:d5:c9:02:44:f7:56:eb:23:ce:4f:
                    7f:d2:51:a5:a6:ea:e8:a0:fb:68:21:00:0f:33:ce:
                    05:0c:1c:62:c3:8e:f6:e3:3a:66:d9:43:64:31:0f:
                    da:91:ad:52:12:d4:5d:62:c8:fb:49:d3:3a:35:fa:
                    52:28:9e:e2:ac:75:b0:54:72:58:6f:39:c3:ce:f9:
                    c0:b8:57:09:7d:6f:54:a6:a2:8b:3d:22:23:2d:41:
                    38:1e:59:c6:eb:61:cf:0b:15:84:80:3d:d6:99:91:
                    97:04:9e:87:78:ad:fb:bf:08:be:a1:4a:89:b9:99:
                    e3:2f:77:6e:11:c8:1a:84:32:10:0c:af:bd:2d:87:
                    07:69:7a:b8:b8:3e:81:c0:fb:22:d6:7a:a8:eb:0c:
                    6c:b8:b2:20:0b:5f:d0:91:34:a0:bc:14:ef:4d:85:
                    3b:17:df:c3:f5:38:79:0d:16:10:3d:9b:69:74:48:
                    2f:d5:55:7a:5c:72:fb:77:c0:98:d3:a1:d1:0d:94:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.236.0/22
                  193.176.236.0/24
                IPv6:
                  2001:67c:2c8::/48
                  2a09:ed40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47829

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:b5:7b:f7:31:78:5f:2f:47:1d:ab:fe:4e:3b:1b:70:45:
         87:a5:be:ba:6f:bb:61:ba:ae:e7:47:a9:51:4f:67:4a:94:55:
         e5:ef:8d:54:da:bc:c4:b9:08:97:95:41:20:46:c9:a6:68:af:
         58:f0:bb:2f:7d:ba:cc:5a:03:70:a7:08:b4:fa:b9:1f:41:80:
         6e:20:8f:6c:51:40:df:c0:c4:ed:94:4d:e9:9f:37:26:da:66:
         b6:74:b0:a5:de:d7:1a:db:2c:39:8a:27:9b:5e:42:e8:e7:a4:
         77:7f:6c:97:95:ca:da:00:44:cd:60:ce:75:63:f9:eb:42:c3:
         f2:9c:be:6e:3d:b1:a9:6d:bf:b3:18:32:a0:00:3a:fb:59:84:
         6e:61:a6:35:a6:ad:c7:68:ce:46:59:7b:54:cf:40:10:5b:dc:
         7d:ae:ed:b7:ec:10:0f:fa:3b:4b:0e:81:38:71:a7:03:0c:49:
         9e:80:22:90:b9:9c:54:bf:9d:bc:30:67:b7:b3:c2:b0:6e:74:
         61:c7:d6:7e:56:0f:44:8b:85:e3:61:47:69:e2:bc:84:05:bc:
         89:9b:a2:41:f7:53:28:10:09:fc:2e:15:50:16:03:69:03:e6:
         6f:0e:60:c3:2e:2c:95:d0:93:21:25:72:bb:31:3f:64:10:8c:
         14:c0:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:33:13 2024 by rpki-client on console-ams.rpki-client.org