Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.cer (raw, json)
Hash identifier:          2iPv8riintwVq8kYE9z73m9tRii9JZ5Lct8DTQ0zqqQ=
Subject key identifier:   0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8010D41EA7B635FD145A5B91EE34386
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 201909
                          AS: 212192
                          IP: 2001:67c:624::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:0d:41:ea:7b:63:5f:d1:45:a5:b9:1e:e3:43:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:01:b4:13:f3:5f:3f:bd:38:78:89:c6:53:
                    e1:87:95:fa:99:3c:d9:34:4e:c6:90:a5:2e:9c:14:
                    18:ec:1a:cf:15:7b:af:c7:5e:64:41:28:63:48:05:
                    fd:18:a7:51:de:6b:40:b5:72:1b:c3:cd:0d:f1:8d:
                    32:41:31:1b:6b:58:e4:20:b4:81:5b:13:fd:0c:ad:
                    86:c0:1e:29:63:70:21:62:a1:d6:6f:08:2c:ea:fe:
                    2d:a9:cd:f5:0c:25:9c:91:6e:5d:61:35:40:28:de:
                    bf:ee:69:0d:a0:81:93:98:64:1c:67:72:bb:69:ef:
                    0a:dd:9f:f8:10:1b:b3:26:91:0b:cb:ee:de:7b:6c:
                    1a:a8:f2:4c:d4:11:cc:7d:e3:f0:b8:83:34:3f:54:
                    69:b6:b1:84:5b:cd:17:9d:c9:71:f4:a3:e7:93:32:
                    93:70:18:4a:7a:37:b6:88:47:9f:a9:3a:fc:2b:40:
                    9b:16:18:20:f0:b4:4b:cb:f8:8f:be:3a:e9:17:5d:
                    37:ff:e7:55:e6:67:da:7f:ec:05:b7:69:d6:09:ac:
                    b5:38:8b:a0:81:06:f3:75:76:88:38:60:92:09:5e:
                    0b:66:ea:f5:2d:7b:7f:11:60:ea:21:59:13:78:43:
                    ee:45:5c:b2:93:60:59:3f:85:b1:6a:bb:29:58:87:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:624::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201909
                  212192

    Signature Algorithm: sha256WithRSAEncryption
         66:ce:0c:cb:6d:6c:22:47:73:04:07:49:f2:b0:b2:33:11:54:
         4a:a1:36:67:f3:01:26:c9:33:25:33:a3:ee:14:30:ae:bb:b2:
         e7:d9:c7:b0:91:e3:4e:81:f2:04:6c:bd:44:52:7c:71:b2:11:
         08:18:ca:1f:b0:96:90:b0:97:ce:47:d3:a6:08:88:8d:33:4f:
         ad:6a:f8:eb:b4:60:13:99:d6:f9:f0:a1:e5:97:cb:5b:2c:7e:
         f9:a7:a8:c0:d9:3a:3a:0c:6d:89:cb:40:68:71:df:53:ae:7f:
         bf:1a:44:e8:f0:58:29:18:f9:2d:bf:90:70:f4:59:c6:01:4a:
         b2:fa:07:fc:65:b7:24:27:f4:71:50:27:a7:b8:fe:c0:de:10:
         8c:8b:e1:f3:83:35:44:c3:ba:b7:ba:c9:22:1e:ee:a6:8d:3d:
         fe:4f:f1:59:9e:9e:bf:ce:c2:ec:09:f0:f7:87:fd:ad:e9:98:
         97:92:c6:08:49:39:dc:73:30:e9:83:ac:ae:d5:4b:18:5e:a6:
         27:6b:2b:c5:df:d7:0c:21:11:80:f3:9a:bf:b7:87:75:cb:8a:
         2c:a8:03:b5:7b:2d:93:57:53:a4:c0:20:51:fd:c3:a2:0a:57:
         33:20:e7:48:64:9b:72:2f:5b:54:07:f2:06:82:27:0c:a0:44:
         ff:9c:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:09:01 2024 by rpki-client on console-fra.rpki-client.org