Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
File:                     CaT39OTp5yw6M5P7XW6nQrwbTCg.cer (raw, json)
Hash identifier:          Lh2VGcoRhBhsaKBIQMVvuXB9iDDyhZEPq/mgiz/P+Ow=
Subject key identifier:   09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BCF495AC7BB4641F50858201D3D0F6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:34:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 87.236.164.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:f4:95:ac:7b:b4:64:1f:50:85:82:01:d3:d0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:34:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:3c:09:94:ed:48:d2:e2:79:53:56:74:f2:
                    55:91:92:8b:40:bc:93:14:f7:a6:a1:c8:2a:87:dd:
                    30:72:8c:f6:1a:45:49:53:da:bf:98:2d:0e:d3:29:
                    40:bd:dc:f7:93:14:e3:66:6a:ee:32:aa:9e:6b:d8:
                    e1:64:a1:bc:95:d7:a7:52:e6:07:f0:c5:d2:6f:bc:
                    d4:06:6e:e5:55:38:d2:09:0b:84:ba:8e:8a:16:dd:
                    57:9a:ab:cd:26:5e:ed:3f:72:b8:94:e7:b6:2a:37:
                    f0:c6:70:b7:1d:31:c8:16:16:75:75:8c:c9:2b:7a:
                    85:bb:46:db:ea:50:d6:e7:68:f5:2f:8a:64:ef:ab:
                    1a:b5:97:2d:ed:7d:89:ff:22:96:94:79:0d:32:10:
                    6d:00:80:5f:dc:f0:89:2e:42:90:b0:74:62:63:50:
                    4a:b9:78:85:72:ae:78:b2:bd:4a:02:ae:44:d5:ac:
                    83:4d:70:1f:dd:db:25:91:c1:cb:b8:a0:bd:e0:69:
                    f9:3f:43:d0:bf:54:f2:03:cc:8f:7d:63:51:87:27:
                    84:29:02:2e:cd:5f:19:b0:ad:8b:d9:23:03:69:79:
                    69:94:34:4b:73:50:82:2b:cb:a1:03:85:30:5d:3e:
                    41:4f:d4:08:dc:62:26:61:2b:40:30:51:1f:28:b8:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:08:69:7f:40:fd:61:85:13:eb:6b:cc:cf:c5:68:10:cf:
         98:73:24:f8:f8:72:4f:36:ab:d3:fe:27:d6:b6:2e:22:5b:6e:
         7e:14:a2:e9:03:a2:df:9a:37:fe:10:32:d4:a9:35:b7:55:fb:
         1b:2a:aa:b9:5f:d3:6e:2a:d8:36:f0:96:53:21:87:76:ad:1f:
         99:db:16:65:f3:b0:58:c7:0a:04:0d:c6:04:d0:97:86:52:ae:
         2a:89:39:5e:8b:0d:53:1c:71:a6:07:68:c4:cd:79:a7:8d:7d:
         30:e2:2b:57:f2:4c:71:88:19:ce:23:01:3b:6b:29:b8:89:20:
         fd:05:db:0d:4e:86:38:0a:2b:8d:f3:77:28:c5:ff:82:7a:e0:
         a8:d8:c7:0b:fb:ff:f9:5f:fa:ec:f6:e8:c3:6d:0d:51:75:ae:
         e5:d9:f1:88:c5:84:73:4b:ea:59:7e:75:c3:bb:66:82:35:05:
         aa:e5:d0:eb:03:1a:32:6f:9c:68:55:3c:c4:84:b4:43:cd:0c:
         ec:64:58:06:88:16:08:39:9f:00:7a:72:7a:dd:ce:f9:96:a1:
         4c:b6:79:35:59:3e:70:db:6b:65:91:9e:06:3e:0b:7f:91:6c:
         9a:86:d2:26:7c:82:04:d7:1c:11:89:98:6c:3b:16:eb:10:92:
         fb:dd:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:35:15 2024 by rpki-client on console-ams.rpki-client.org