Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
File:                     C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer (raw, json)
Hash identifier:          LwNJnX/ARhI9XLCgrvnRK9hA7GZiu0pzTGbLeDqflR8=
Subject key identifier:   0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DAFBF2F4F2FDD5C18ECB5A049AEC80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198023
                          IP: 178.239.0.0/20
                          IP: 185.60.184.0/22
                          IP: 2a04:e600::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 11:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:fb:f2:f4:f2:fd:d5:c1:8e:cb:5a:04:9a:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:bf:ed:92:c0:78:7f:bd:dc:97:52:ad:25:
                    af:a7:50:80:0e:3e:be:e5:15:5e:e7:8f:21:a3:59:
                    38:74:f8:27:6b:3a:a7:68:28:7e:a1:38:37:1a:34:
                    39:54:bd:49:c3:2e:a4:ea:3d:92:69:fd:80:7d:dd:
                    0e:5c:f0:8c:23:f8:af:c1:ed:ed:bb:b2:58:bc:0c:
                    be:b6:66:df:81:af:40:0e:96:4c:88:87:f3:14:ca:
                    b8:8d:54:be:3d:9d:04:05:bd:00:3c:1e:63:5b:8e:
                    7a:ef:6b:fc:68:0c:08:6e:65:3f:86:2d:d1:4a:76:
                    a9:f5:d5:88:9f:fd:51:5d:06:8a:5d:e7:df:74:1b:
                    40:08:ee:71:7a:d8:a0:29:9f:84:26:33:e9:5d:00:
                    e4:8d:43:bf:7c:40:45:5a:0e:95:0a:b2:64:6c:c3:
                    fc:c8:a6:f2:c6:45:c4:f7:55:63:75:58:54:cb:58:
                    5b:34:08:16:69:cb:77:1b:3f:14:5b:ec:c1:1b:27:
                    ed:95:12:e6:4f:a0:d8:ba:3b:d8:0e:bc:0a:ec:64:
                    6a:25:ff:a8:2a:27:c0:ea:b9:79:b7:2c:e4:9b:a1:
                    55:d2:c3:2c:b5:68:07:a9:0c:64:94:d1:bf:4c:b7:
                    39:4a:4d:70:9d:ed:fb:1d:e8:ae:ee:fc:5a:08:e4:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.239.0.0/20
                  185.60.184.0/22
                IPv6:
                  2a04:e600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198023

    Signature Algorithm: sha256WithRSAEncryption
         21:1b:16:11:90:1d:37:e5:89:eb:f3:e5:dd:bf:ae:04:86:db:
         61:c3:9f:13:5f:58:7b:a7:2d:19:92:3f:2c:29:c0:86:be:9c:
         27:2f:0b:be:43:d2:29:1d:fe:c1:55:3d:7f:0c:25:49:f0:cc:
         83:7c:4e:38:12:2f:ee:c7:16:3a:24:89:e9:57:61:6a:fb:22:
         1f:ca:bc:2d:f1:16:47:b1:5f:4f:1b:90:cc:b3:d7:fd:4b:b4:
         d0:6e:b5:41:e5:22:f8:b3:d2:58:08:0b:a4:96:b4:6e:7a:e9:
         fc:89:b1:7b:d1:6a:f1:08:06:49:4f:65:df:6e:8b:6f:cc:72:
         2a:b1:75:86:06:29:6a:46:b6:64:70:aa:23:ff:99:b5:e7:18:
         e3:f1:b7:5e:3e:4a:cc:cf:fc:f9:c7:20:15:d6:8f:b1:a4:f6:
         d4:39:17:bf:5b:b3:a0:42:4d:16:bd:c2:fc:5a:64:1a:ea:bd:
         aa:34:f8:ec:fd:43:bc:69:04:94:cb:0a:b4:68:f0:b4:1a:4d:
         ce:ba:14:cc:ca:06:17:57:7f:f0:27:2b:d7:6c:9c:e5:46:22:
         9d:4e:dd:5f:3c:3a:26:b6:35:3a:40:60:8c:55:3f:00:13:48:
         53:a3:8a:13:94:65:d9:51:02:fd:72:c5:66:57:1e:33:5c:4b:
         03:62:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:20:52 2024 by rpki-client on console-ams.rpki-client.org