Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer (raw, json)
Hash identifier:          7YAnL2+wVGYlPblQxbOayXOF3QmxAIqlqHhmCutb38w=
Subject key identifier:   02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF5F8A43D3922E7D06B9E7F006A6A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:11 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.110.83.0/24
                          IP: 2a11:440::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:5f:8a:43:d3:92:2e:7d:06:b9:e7:f0:06:a6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:0e:e2:56:72:2c:cd:04:82:c8:78:40:71:
                    86:b1:4f:79:5e:eb:70:8e:c8:f8:89:73:5d:ad:59:
                    ab:69:df:ce:55:9e:08:ca:1e:30:15:40:31:6c:90:
                    38:8c:a3:fd:da:f1:51:5a:32:7a:f9:b4:9a:dd:fe:
                    fb:63:48:07:14:a7:65:95:38:df:d6:ca:98:eb:8d:
                    e1:9a:c3:43:91:97:6c:8a:28:17:76:c2:a4:a5:d6:
                    95:24:87:97:84:aa:16:02:ca:c3:39:54:f4:42:e1:
                    44:0c:7d:dc:dd:7d:cb:fc:e5:fd:ea:f2:0a:77:66:
                    dd:70:02:d8:e1:dc:da:66:ac:55:12:c3:f4:e4:18:
                    82:30:8b:97:7c:1b:f6:45:7b:7a:0f:86:75:ac:7a:
                    08:75:aa:fe:87:b6:65:4a:55:80:07:31:c0:03:3c:
                    b3:42:b2:11:3a:00:5c:ce:c5:9f:06:9b:96:8a:52:
                    c2:8b:5d:38:40:e1:d7:96:5f:63:ad:6c:81:e6:ec:
                    8a:f6:30:5b:d2:1e:11:76:86:c1:1d:ab:12:57:49:
                    e5:4f:17:7b:47:fe:de:55:9e:3e:11:cb:37:c2:61:
                    f7:ee:fe:47:74:70:6a:20:62:ee:0e:98:7d:aa:3a:
                    8a:b7:76:aa:dd:b2:5d:d0:cd:e0:66:c0:38:29:93:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.83.0/24
                IPv6:
                  2a11:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:38:e3:68:37:93:fa:e4:66:f1:e7:53:1e:5b:f2:7f:1a:
         4e:17:d9:1a:9f:52:2d:b4:3f:7b:64:0e:36:61:be:b0:2e:38:
         81:31:08:1b:96:0e:e8:06:60:99:8b:dd:13:0f:1b:28:a1:b8:
         12:21:56:d2:79:bc:3a:63:d3:cc:30:6a:dc:dd:44:f4:6d:b9:
         31:a2:59:ea:62:62:90:62:7a:5c:53:7f:0f:31:7b:1c:09:d2:
         38:c6:a8:8c:8f:b9:f9:f5:f5:ff:bb:d9:8f:41:40:61:3d:7b:
         50:b8:46:49:65:ed:0c:2d:8c:2e:0c:bb:18:9b:97:f2:ec:64:
         a8:7d:7f:f6:7d:32:55:91:a6:f6:d7:84:e1:25:da:86:f0:61:
         71:ac:ff:ac:bd:6b:3e:53:49:7d:92:c2:b5:fb:cb:1e:b9:f0:
         5c:a6:88:ab:94:cc:81:5c:82:04:f8:5e:e2:fb:8d:2b:dd:94:
         52:dd:41:c6:1d:34:61:10:fd:85:14:99:ae:ba:76:e3:ce:73:
         81:b0:04:08:30:e2:7f:f3:bd:44:99:48:42:1e:57:64:09:55:
         9f:08:32:9b:65:92:b4:17:f6:d4:1a:e0:78:75:99:9d:dc:4b:
         a1:ca:a5:22:83:65:46:5e:aa:b0:9f:78:44:b9:fa:10:33:c1:
         45:3e:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 09:23:55 2024 by rpki-client on console-ams.rpki-client.org