Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer (raw, json)
Hash identifier:          gGU9QJ5OmSJcvNd7DJwXSKATALjiFsys0vqaGQnl5UY=
Subject key identifier:   10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC492F7A92EF6F552BFB00641D7C26F17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:15 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 50508
                          IP: 193.105.87.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:f7:a9:2e:f6:f5:52:bf:b0:06:41:d7:c2:6f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:06:79:96:45:ef:8a:43:b2:a1:8b:88:8e:
                    0e:7d:84:3a:19:35:4e:7a:6c:f9:b9:47:ca:4b:42:
                    71:1c:23:15:d5:ea:b9:c2:a3:97:2e:24:aa:ef:ec:
                    0f:4b:1b:c0:a0:5d:7d:ac:c3:47:2e:46:c5:1e:fb:
                    49:51:4c:b4:a3:66:94:66:cd:26:25:9e:5b:c0:7a:
                    2e:3d:47:19:a4:35:9e:98:4d:1f:85:1c:3a:fe:3a:
                    ce:05:e4:df:c6:ee:9c:43:7c:38:28:89:78:6d:a8:
                    7b:9f:c4:c7:f6:62:c8:ef:32:46:1c:16:6f:e4:ef:
                    3a:2a:cf:f7:61:4d:5e:4e:c4:13:ba:22:56:58:b0:
                    a5:ad:60:27:82:e2:ba:2a:cb:44:fc:4e:d9:55:00:
                    d6:e4:ee:fb:00:e1:32:5c:84:b5:da:0b:be:06:d6:
                    a1:cd:5d:ee:22:fd:99:65:53:ad:45:9c:d2:37:63:
                    96:b5:5b:64:0a:47:a3:9d:bc:70:1b:05:64:94:47:
                    3a:a0:5d:4e:f2:c3:67:be:66:ca:b5:fd:bb:ca:e3:
                    d3:33:41:a8:49:31:10:99:33:7d:ae:27:9e:b2:7c:
                    bb:90:4c:eb:0e:e4:01:d3:06:c1:02:29:d8:e5:fb:
                    3d:67:e2:70:3b:29:2f:45:3b:da:bd:04:71:a3:15:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.87.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50508

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:3d:7a:0f:0c:a3:65:88:cb:d2:c3:4a:e0:8f:87:cf:2c:
         bf:45:ae:85:41:9a:a1:97:d2:d9:d0:8a:35:29:c2:e8:c7:47:
         a8:02:61:8d:4f:9e:3f:64:03:3f:c7:56:a7:17:ae:f7:47:0e:
         ef:c8:44:67:f3:7f:73:96:5b:67:1e:5f:8e:f6:bf:76:12:60:
         46:56:c0:a2:9f:4b:9f:95:2f:64:f2:53:92:4b:ab:c0:9d:11:
         c1:79:eb:65:00:76:8d:7b:82:21:36:15:48:4f:4e:69:68:a6:
         49:8d:f8:7e:b6:44:f0:7c:1a:43:2e:9c:67:57:7e:0c:8e:91:
         43:1a:11:d0:bc:7a:c1:ba:07:eb:6c:73:10:2f:46:8d:c6:2e:
         a9:d0:b2:f8:f2:0e:59:2d:75:5c:6c:df:bb:e1:31:ba:39:10:
         2b:45:4b:28:ad:9a:d2:03:f5:16:59:9e:19:50:2a:2d:d7:d0:
         2e:b7:e1:ba:13:d9:a7:c3:0f:36:75:75:46:f4:92:b8:ab:70:
         d2:37:09:16:35:c3:86:5d:80:f8:d6:98:29:11:3d:bb:39:a5:
         ee:51:86:b4:37:ca:91:8f:23:0a:4b:a5:e0:16:38:1b:55:b9:
         81:7e:23:ac:49:50:ce:5d:75:c3:a5:7d:68:73:89:1c:4e:fe:
         06:86:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 04:25:21 2024 by rpki-client on console-ams.rpki-client.org