Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
File:                     BZdoATY9N1eGFS5NBh51yL6zUFg.cer (raw, json)
Hash identifier:          uIQRJ9lIlSLxRBP0UIam+PacXIqcFVfHbkfjlg2XEjQ=
Subject key identifier:   05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC80141BC662E082F566D49BF1C0E484D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34872
                          AS: 205523
                          AS: 208210
                          AS: 209643
                          IP: 45.13.116.0/22
                          IP: 45.154.96.0/22
                          IP: 62.3.50.0/24
                          IP: 185.1.138.0/24
                          IP: 194.28.96.0/22
                          IP: 2a0c:b640::/29
                          IP: 2a0d:ef00::/29
                          IP: 2a0f:8400::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 11:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:41:bc:66:2e:08:2f:56:6d:49:bf:1c:0e:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=05976801363d375786152e4d061e75c8beb35058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:73:20:31:d0:fe:15:2c:9a:d7:ce:7b:3b:
                    32:ec:f8:bd:3f:a2:c9:fd:9e:c0:3b:21:e5:d9:7b:
                    7f:0b:a0:1b:0e:66:8c:06:28:dd:16:ad:fa:2d:e6:
                    de:05:54:99:af:dc:dc:24:c7:00:4e:a0:d4:74:83:
                    9b:34:7a:84:88:bb:2f:f2:95:0a:ef:b9:f7:90:84:
                    0d:15:1f:10:94:0b:09:6f:46:25:bf:a2:ce:59:2a:
                    94:b6:af:9d:fb:6b:6c:83:5a:d0:0a:f6:43:e9:88:
                    4f:2e:3e:3f:a5:3b:08:15:45:42:df:de:a4:bc:0c:
                    c9:62:ff:12:91:39:05:10:19:db:3d:35:88:e5:b5:
                    83:18:6c:1e:32:a5:a5:d0:69:69:3b:9e:1f:65:1e:
                    3f:4a:6a:bc:00:5a:82:6f:17:4b:58:6b:ae:99:b9:
                    3f:4b:59:7b:a1:f4:64:7c:ea:50:f8:be:50:94:c3:
                    b7:1a:b1:88:9b:2d:2a:a5:d9:de:2d:7f:e2:f7:76:
                    23:bc:3d:5b:64:12:57:20:68:73:be:d6:2a:cf:94:
                    4d:f4:d2:e0:33:34:9c:75:be:ab:44:86:39:7a:2c:
                    45:2e:d4:f9:1c:5c:9f:48:a6:a0:ee:10:ef:ef:b0:
                    1b:05:3c:6d:ec:ef:e7:97:2f:03:b9:76:2b:34:2a:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.116.0/22
                  45.154.96.0/22
                  62.3.50.0/24
                  185.1.138.0/24
                  194.28.96.0/22
                IPv6:
                  2a0c:b640::/29
                  2a0d:ef00::/29
                  2a0f:8400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34872
                  205523
                  208210
                  209643

    Signature Algorithm: sha256WithRSAEncryption
         70:f5:67:42:14:cc:8c:21:5b:97:56:74:4c:68:b3:ae:6f:10:
         92:ef:a1:29:05:75:fd:25:6d:5f:c0:12:1c:4d:54:b6:98:df:
         e2:bf:66:65:e8:f6:6c:22:45:41:9e:71:00:b0:5c:1b:b0:a6:
         60:c0:38:fb:6c:64:8f:09:0c:a3:04:40:c0:26:20:fb:39:da:
         08:f2:48:07:9a:89:62:fd:02:78:83:77:ef:7a:b5:ef:e2:09:
         18:10:dc:a8:3b:f1:0f:bc:ad:44:11:6b:d2:4e:e2:9f:b5:4a:
         e8:dc:14:f0:0f:8f:ea:06:09:3b:85:fe:f7:46:15:78:93:1e:
         fa:fc:5d:d6:47:72:08:a7:5f:08:db:d3:35:d9:43:f3:be:d1:
         62:93:18:46:99:c1:d3:29:90:e5:74:44:e0:a4:f5:05:ac:22:
         37:b2:ce:31:15:8f:7a:0a:3c:85:ec:94:22:d4:64:3f:31:2f:
         4b:91:a2:98:1d:01:0b:67:73:9f:2a:50:46:02:e6:25:4f:86:
         5e:b9:44:3a:f3:01:a9:55:a3:95:43:d1:06:81:e7:44:59:a8:
         f9:df:0c:12:c0:9a:9d:5c:ed:57:bb:c0:95:e2:4e:16:05:cb:
         42:a6:ce:7d:27:29:1b:05:80:a7:91:b8:47:20:8d:28:90:96:
         4e:55:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:20:25 2024 by rpki-client on console-ams.rpki-client.org