Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
File:                     F263G9VVdvRXY7retnbtWZkNOWo.cer (raw, json)
Hash identifier:          WbaS1hcpB7VE8fX5w/X1DGHCCic2oFrlvXtq1u/p9n8=
Subject key identifier:   17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94CA8890BE82AE1D8001B5C6F654418
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:31:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206020
                          IP: 2001:67c:9b4::/48
                          IP: 2001:67c:9b8::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4c:a8:89:0b:e8:2a:e1:d8:00:1b:5c:6f:65:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:31:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=176eb71bd55576f45763badeb676ed59990d396a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:5e:8a:63:e0:7e:c3:14:0d:0a:9e:88:40:
                    13:33:d5:55:e6:3c:69:69:23:48:02:4b:7d:63:b7:
                    2b:9d:60:da:2b:70:91:bf:d2:8c:40:f4:26:19:aa:
                    3d:e7:34:18:d1:e2:fa:cd:be:e0:ff:da:b8:2b:d8:
                    cf:25:a6:0f:5f:6f:b9:9e:10:14:6a:c7:8c:2f:97:
                    7f:38:71:ad:f6:51:a1:fd:fd:7c:9c:ba:59:a0:cb:
                    7f:5d:10:37:9f:da:15:93:a6:b2:4c:b8:d5:b0:16:
                    be:83:48:4d:36:8c:eb:7c:2e:75:24:12:6b:7c:a4:
                    02:6f:dc:b0:5f:16:de:72:c6:67:e3:d5:bf:0e:13:
                    ff:35:8d:a1:c7:1e:63:b8:33:f3:cb:73:55:31:43:
                    3d:3c:34:f1:db:0a:e8:30:4a:fd:e4:97:ee:78:78:
                    52:f3:1d:1c:2c:6a:8c:e6:7d:3a:b8:a2:b3:fe:b3:
                    6b:97:71:d4:cb:28:76:af:8d:b8:a1:27:27:1a:79:
                    fe:cf:38:74:57:20:fc:3b:3e:0c:ad:cd:3c:c9:e8:
                    0a:0e:92:99:5a:14:fe:92:5c:32:8d:85:45:5f:b7:
                    a9:4d:68:f8:43:d9:c3:0a:4e:7a:5c:f1:8c:37:17:
                    11:ca:d2:d7:06:d7:7d:62:1b:e7:4d:07:9e:e3:a3:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:9b4::/48
                  2001:67c:9b8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206020

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:0e:63:6a:96:b1:e3:e5:04:f2:a4:f5:d8:c0:ba:a4:ce:
         1f:cc:33:fb:e0:d4:fd:6e:d0:34:bc:ed:30:e3:be:dd:bd:46:
         d6:23:ff:d7:5e:fd:28:fa:96:3e:cd:2e:b3:46:1c:2f:f9:87:
         e4:a8:05:34:70:ae:98:f9:03:bc:b1:46:9f:45:48:5f:2f:46:
         1a:74:f4:1e:3d:89:e2:6d:5c:c4:a6:cb:79:7f:74:3c:49:07:
         cf:98:b1:d4:15:de:cf:8f:1a:6f:03:8f:c7:a8:21:d9:40:f1:
         3b:8a:d7:b7:8c:76:47:58:2a:5c:74:97:c5:5a:3f:b6:93:55:
         7e:d0:b4:2c:04:62:8e:79:1a:7f:5d:86:35:ee:7e:3b:b8:0f:
         07:9a:ef:5e:96:88:39:de:28:da:8f:ed:90:14:84:db:ff:bc:
         a4:69:70:70:a9:45:a2:5e:66:ac:a0:77:75:43:e8:be:97:0e:
         d4:5b:06:72:57:91:98:d2:4e:91:79:bc:e7:92:bf:ed:cc:67:
         3c:fb:ad:e3:b3:53:76:7e:7c:8c:ed:cb:1d:5d:95:bf:2c:78:
         ba:3c:05:1c:35:64:1b:b5:5e:21:1c:33:5e:b9:92:20:86:60:
         95:1a:08:98:96:2a:c4:16:eb:1c:d2:b5:42:f9:4c:d5:98:a3:
         66:f4:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:50:28 2024 by rpki-client on console-fra.rpki-client.org