Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.cer (raw, json)
Hash identifier:          PnutMuS8epdpuEa7SYvSRu9Zm+xUBF4g6Iuo0IbMcHk=
Subject key identifier:   0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC86F4338E29898CC86629ED62B0FC900
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:29:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34648

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:43:38:e2:98:98:cc:86:62:9e:d6:2b:0f:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:29:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:05:29:cc:b5:07:ed:bd:0c:4f:bd:b3:03:
                    58:32:19:c4:00:3d:fa:b1:4e:03:e1:a4:c5:c2:99:
                    81:17:92:b9:39:33:f1:fc:a9:95:85:8a:7e:30:9a:
                    54:da:92:27:3a:6e:8c:7a:9b:d6:03:39:40:96:76:
                    c1:d9:a1:56:b1:03:c7:f4:83:0c:f3:60:c3:7b:9b:
                    17:da:b5:fd:e3:bf:3c:1b:a6:c1:00:16:0c:cd:ad:
                    70:00:71:d5:63:f5:dc:76:11:af:4a:9a:44:98:46:
                    a4:60:31:bf:4a:3c:86:d9:60:59:4c:a1:e3:f7:de:
                    26:8d:fb:5f:c9:63:f7:62:5a:49:39:05:70:07:12:
                    41:60:03:6b:ea:44:34:38:5c:14:ab:e0:ce:ed:29:
                    86:95:28:93:2b:54:b0:12:d3:94:72:40:f3:5d:69:
                    dc:d5:39:04:ac:e7:01:2b:85:63:d3:93:a8:d2:fb:
                    91:a2:dd:b6:99:bb:56:83:53:cc:9a:2c:08:00:9a:
                    9d:ce:7f:e2:6f:09:0a:2e:8b:27:75:64:c7:bb:cb:
                    57:9c:0b:92:a8:a8:3c:a2:41:11:2a:fe:88:de:f4:
                    30:16:fc:c4:0a:cf:4f:b6:f6:fc:75:f5:50:6a:30:
                    9d:73:45:b9:96:d0:20:93:ec:fc:a9:2d:c7:c6:4c:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34648

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:b8:2b:2b:9a:1b:22:65:95:07:04:9b:36:a1:11:8f:db:
         bd:0b:90:4f:e4:54:aa:90:75:c3:33:5e:9f:a4:65:2c:26:fd:
         b0:98:c3:03:32:98:6b:91:9b:02:66:50:ed:fb:1b:6e:3b:1e:
         e9:33:27:05:4c:44:d4:a5:03:34:b4:0f:3c:bf:82:f8:bd:53:
         ec:e1:bb:a2:90:8f:d6:6e:30:a9:20:c3:79:ea:96:77:e3:2e:
         33:90:1a:4e:b9:c1:24:ff:31:41:4b:11:fa:b0:33:43:39:25:
         70:7d:ea:74:23:94:3e:f9:9e:90:f0:7f:b4:28:22:38:f6:c3:
         cd:00:3d:33:2e:43:8f:d9:2d:e1:e2:3a:4b:58:e8:fc:fc:3e:
         bf:a0:58:1c:87:c0:d9:42:fd:0d:bc:33:5b:8b:dc:fc:61:a4:
         a5:9a:78:f2:78:fc:c8:46:c5:99:3e:7b:e0:5d:d4:fc:7c:b1:
         0f:63:30:80:05:00:1d:cb:e6:ad:53:e2:ad:57:6b:62:df:2c:
         a9:f2:8d:61:e3:5d:46:db:30:e6:92:5f:33:e4:e6:e1:f5:db:
         12:ae:90:14:1d:94:c0:4c:fe:25:de:60:06:00:01:09:a9:9b:
         04:4f:7d:4b:c1:fa:60:4c:86:68:0c:f8:11:b3:0b:b3:0b:57:
         87:95:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:08 2024 by rpki-client on console-fra.rpki-client.org