Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
File:                     BG5SgQdApuwTSZPbya0RtkVNmno.cer (raw, json)
Hash identifier:          ouI7EMwaeyRF+wp6azSWI2bHdGOl/b5VCTMnXOVcMWA=
Subject key identifier:   04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCF78C4E80C28000C008EB2C867D13500
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 03 Jan 2024 13:17:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203460
                          AS: 204598
                          IP: 93.187.168.0/24
                          IP: 93.187.170.0/23
                          IP: 185.115.60.0/22
                          IP: 185.138.156.0/22
                          IP: 2a06:7580::/29
                          IP: 2a0d:6080::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:cf:78:c4:e8:0c:28:00:0c:00:8e:b2:c8:67:d1:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  3 13:17:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:e8:f2:77:f4:05:83:61:93:82:25:a7:90:
                    ab:c7:a4:71:69:5d:ab:c4:7d:f3:58:29:be:55:ac:
                    41:8c:4f:89:da:e1:a3:91:d3:00:8e:8a:ad:dd:9f:
                    d4:e3:64:77:3d:d4:40:86:bc:4d:cc:0a:9e:56:cd:
                    c7:fa:8c:08:19:2c:9e:22:24:f4:ac:cc:af:c1:d3:
                    f2:4c:fc:d1:1c:c1:86:c5:e9:da:dc:6e:20:31:ca:
                    c0:44:f9:d1:7e:52:70:b0:5d:8b:39:4b:0e:d3:b3:
                    b9:e8:5f:ab:52:e4:9d:a4:a4:bc:5d:12:8f:6a:57:
                    01:e1:94:f8:a2:1b:9c:5d:c4:e8:34:8e:9b:24:7c:
                    03:91:b6:08:5c:04:58:1e:4d:d2:79:05:77:74:7b:
                    4e:41:19:b2:a0:df:4e:4b:3b:98:e6:07:79:d4:46:
                    24:df:01:fe:8f:90:b0:f1:3f:f2:fb:96:85:51:59:
                    32:09:aa:c9:98:ef:67:f9:ce:69:bc:86:b8:f6:08:
                    bb:1b:25:e5:1c:06:a6:50:f1:f8:14:8f:2a:38:5e:
                    ea:4c:2b:89:c0:6c:34:97:9d:9f:8e:2e:e0:7e:c7:
                    ee:00:c7:6d:1e:1a:50:55:e4:0e:aa:f2:f6:b2:40:
                    fd:12:d5:6d:a0:d4:d5:2f:12:40:41:0d:53:6b:a5:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.187.168.0/24
                  93.187.170.0/23
                  185.115.60.0/22
                  185.138.156.0/22
                IPv6:
                  2a06:7580::/29
                  2a0d:6080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203460
                  204598

    Signature Algorithm: sha256WithRSAEncryption
         49:89:e0:16:0b:45:a5:a9:f0:a4:7a:52:1c:dc:9d:2a:dd:2b:
         2c:bb:05:27:21:f6:96:18:68:eb:dc:7c:2d:80:1b:00:ec:f3:
         cb:32:45:01:3b:05:15:ca:85:6a:92:bb:26:16:63:b5:22:94:
         7f:ff:7d:38:33:4c:dc:9f:46:c6:f2:16:36:f7:39:a0:40:56:
         aa:6d:ab:fe:16:4f:7a:dc:22:ac:e7:cd:fc:a2:63:56:0b:4b:
         c4:cd:50:30:9f:96:23:5a:32:46:c7:a6:50:af:95:1f:06:93:
         c4:b0:15:5b:4e:33:fd:4e:0e:50:df:11:a8:20:69:79:f7:b8:
         9f:a9:4b:95:42:6c:90:ee:d5:1b:a6:e9:15:95:ec:ce:76:91:
         19:be:57:c9:00:81:3e:98:4a:ea:8b:43:44:f2:13:aa:25:74:
         ba:bd:95:49:9c:1d:84:ed:29:d9:55:8e:cf:14:34:9a:c7:8c:
         44:4d:57:79:ed:8a:37:14:91:c8:7d:2d:88:0b:e4:2f:53:61:
         35:d6:b6:f5:32:93:ca:c4:9e:c9:9b:bb:b5:95:9d:04:c6:c5:
         c5:be:d9:4a:79:3a:58:61:78:9d:9a:d5:b8:44:e3:8a:44:95:
         9b:3b:b2:1c:48:2a:73:91:8d:40:d1:40:98:24:b1:bc:b9:95:
         c4:a6:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:56 2024 by rpki-client on console-fra.rpki-client.org