Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
File:                     CY97o0vGVnvTYW1XT3KF3XVW2_0.cer (raw, json)
Hash identifier:          vrE5X2fyH/MIOcRdqekHdw8or8s1Ny/Ly15x0uDUFbY=
Subject key identifier:   09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E07DCBEC2890173D95372EA2FC819
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.93.192.0/20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:07:dc:be:c2:89:01:73:d9:53:72:ea:2f:c8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:d8:f8:1d:c5:56:cd:ed:39:90:ca:d1:eb:
                    64:cd:e2:78:0e:59:b4:28:60:87:a7:e9:8c:eb:04:
                    7d:b0:8a:35:13:cc:ae:77:9c:fb:b5:5a:2d:29:52:
                    e9:18:02:d7:69:73:d9:87:f9:ba:72:11:5f:7b:34:
                    dc:65:6f:91:ed:30:ad:97:fb:bd:be:64:24:7f:89:
                    ff:08:21:a3:66:35:d8:51:26:69:f7:bf:33:a7:de:
                    bc:ab:f9:57:14:6b:59:90:b1:0f:14:56:c6:c7:95:
                    2b:5a:96:57:c2:b8:81:e7:96:ba:04:fc:61:4b:51:
                    6b:ef:69:ba:18:45:84:67:99:4f:f2:d4:a1:96:69:
                    42:2e:eb:f2:4e:f7:00:07:95:d0:14:55:6b:cf:83:
                    36:07:32:8e:28:f3:fa:1e:20:00:06:0e:8f:2a:ea:
                    2f:fb:9f:ab:aa:77:fd:de:af:6c:bf:da:58:9b:2a:
                    cb:f7:3a:e4:c7:76:17:a5:e8:55:e0:2f:f2:80:09:
                    09:83:ab:ed:cd:3d:9a:e2:70:4c:c1:49:94:cc:0c:
                    b5:a2:18:d4:f4:c1:83:09:fa:e8:d7:84:be:91:d1:
                    7f:5f:9b:0a:8b:5c:48:d8:94:26:3b:06:08:f9:c4:
                    be:ea:9e:6b:38:2c:b2:22:b7:92:34:09:2e:42:9e:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:ca:7b:d7:53:11:74:80:6f:cf:85:6e:51:ad:b0:89:fe:
         ba:06:de:f3:3f:bf:1b:01:40:ff:97:0b:ad:73:18:82:8d:69:
         cd:14:9f:36:20:e4:de:e7:c1:b4:b6:66:9f:6e:84:ef:78:cd:
         00:5b:c4:ad:88:de:bc:14:01:32:52:fc:cb:89:36:40:4a:86:
         18:48:40:23:07:9c:45:3b:81:af:69:61:e8:00:76:45:09:36:
         d5:76:7d:82:cb:19:b7:67:a4:ad:ca:ed:cc:45:99:3b:6f:d6:
         83:ca:7d:be:0a:08:8b:03:66:92:dd:e3:cf:ba:af:8c:16:9b:
         4f:6a:0a:97:8d:12:e4:b7:a4:0d:57:6b:32:a2:44:46:ba:76:
         ed:ee:77:c7:87:13:e5:4a:f8:b0:3a:8d:8c:98:45:2f:65:01:
         f8:d9:2c:7d:32:48:d3:21:d1:c5:21:9f:2f:31:54:9c:e4:18:
         ff:be:3a:8f:15:cc:31:88:d2:4c:7d:e2:05:e0:1d:75:31:45:
         72:96:49:1c:7e:f8:c0:b8:bd:62:9d:66:d5:9d:86:98:ea:e9:
         11:57:9c:f2:e7:d6:6f:af:94:ad:ba:50:b8:1b:20:14:c2:19:
         71:2e:35:33:94:7e:98:65:b9:42:ea:2e:36:16:21:f1:31:47:
         85:53:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 09:25:28 2024 by rpki-client on console-ams.rpki-client.org