Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.cer (raw, json)
Hash identifier:          YHoFn63FhdG2IHe2XgvngnUMnrBHUEIZtMvH/zW2wM0=
Subject key identifier:   0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191E633F9DC66831CF24F1776B0D6FAC056
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 12:27:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 57801
                          IP: 91.212.112.0/24
                          IP: 194.0.45.0/24
                          IP: 2001:678:70::/48
                          IP: 2001:678:90::/48
                          IP: 2001:678:9c::/48
                          IP: 2001:67c:26d4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Dec 2024 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:e6:33:f9:dc:66:83:1c:f2:4f:17:76:b0:d6:fa:c0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 12 12:27:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:45:f8:3b:08:61:dc:17:03:e8:97:6e:d6:
                    dd:94:b4:94:b9:7a:75:aa:6b:6e:b5:70:d8:61:1f:
                    c7:6a:d5:70:48:32:c0:e6:60:f3:32:87:fd:0b:18:
                    2f:33:47:27:70:b4:1c:ae:13:7c:02:f4:e1:9a:a5:
                    13:77:6c:b3:37:32:75:a8:06:eb:a2:12:a6:6b:da:
                    85:6f:1d:96:6f:e2:08:39:60:0b:53:58:8f:e5:56:
                    3f:a6:ca:6b:e5:fd:75:c2:ff:bd:d4:f6:eb:36:12:
                    a0:f9:9c:4b:f7:8c:fa:81:43:29:4e:cb:47:c4:62:
                    c3:73:be:14:cd:04:b3:35:36:b7:b3:d4:62:91:e1:
                    7d:dd:74:91:a3:62:f9:06:e4:67:45:e6:0e:bc:9b:
                    33:3a:7c:e1:f3:df:99:bb:82:7b:3d:5c:ff:80:76:
                    30:b6:b5:f8:d1:67:de:e1:37:b2:9d:cd:7b:40:e6:
                    63:1d:eb:b0:b3:89:9e:98:72:c2:af:b2:23:73:40:
                    4a:80:62:a4:e2:77:f1:d5:b9:13:06:e1:c1:a2:f5:
                    2b:ca:9f:9e:5a:de:b1:10:6e:77:67:72:c6:cf:81:
                    5f:4b:90:b5:96:ca:5c:e5:4f:90:cf:1f:fe:da:64:
                    3f:34:4b:04:32:16:60:07:83:47:37:ed:88:86:e6:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.112.0/24
                  194.0.45.0/24
                IPv6:
                  2001:678:70::/48
                  2001:678:90::/48
                  2001:678:9c::/48
                  2001:67c:26d4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57801

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:11:4a:71:6d:67:2d:06:37:19:d7:37:08:08:22:92:17:
         58:ce:71:6a:91:df:c4:34:20:22:2e:db:46:90:8d:d8:90:ae:
         94:47:50:6b:c3:13:f4:b9:d5:c1:d6:d9:f6:cb:c9:27:d2:70:
         43:dd:84:d6:a6:5b:85:34:3b:ef:e2:a9:9d:16:62:5a:8b:dd:
         ae:e0:75:37:32:0b:3b:89:4d:82:41:99:6c:67:72:11:16:fc:
         07:b1:a4:33:90:3c:ad:e8:f5:e3:8f:86:9c:9b:83:5f:ff:6b:
         35:77:25:55:b8:a4:16:06:53:01:7c:2e:93:df:9f:47:bb:2c:
         12:8c:08:1f:fa:ce:b2:09:e4:ac:cf:40:a7:61:20:26:db:f7:
         7a:6a:c6:3b:eb:46:d9:0a:10:5f:3b:96:8e:9f:d4:50:93:d8:
         36:dc:2a:16:29:45:2b:f3:9e:d1:8d:b5:be:10:a4:e0:50:de:
         10:4a:f7:08:c3:02:ed:a2:98:e8:35:c3:56:ef:bc:4a:fe:f4:
         1d:ab:21:4b:e3:a9:7e:a6:34:07:22:9e:cd:e3:63:b5:68:86:
         95:de:79:b4:42:18:79:2f:80:f6:d1:b0:b7:a6:13:27:86:ba:
         90:8b:dd:aa:52:4d:59:e5:b7:6d:69:91:83:a8:20:e1:4a:68:
         ed:30:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:30:10 2024 by rpki-client on console-ams.rpki-client.org