Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
File:                     F92cI69p7Czbb-K5k260lM_RYh8.cer (raw, json)
Hash identifier:          Bs9jsJpwFPagoLCELFB0ufg3SMhNgHvGbU6umPJagGU=
Subject key identifier:   17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC870451247308E451EC7243CB56433F3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:30:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 35788
                          AS: 42465
                          AS: 44444
                          IP: 85.115.32.0/19
                          IP: 86.111.216.0/21
                          IP: 157.167.0.0/16
                          IP: 185.4.96.0/22
                          IP: 2001:67c:22c::/48
                          IP: 2001:4010::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:70:45:12:47:30:8e:45:1e:c7:24:3c:b5:64:33:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:30:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:4a:45:b4:56:db:6f:9c:2d:75:a1:f6:fc:
                    12:cd:f7:07:53:ae:90:40:a7:45:e2:61:4b:fe:8c:
                    fe:45:8c:f5:58:be:ed:6d:56:9f:d6:92:64:f8:82:
                    ba:cd:1b:f6:38:94:86:99:3f:ce:66:dd:70:46:5b:
                    1f:a3:19:d2:d3:51:53:fb:4d:39:9d:03:4b:cf:30:
                    71:90:a9:47:f3:84:a7:6d:c5:b4:47:92:58:f6:21:
                    10:4b:d7:79:3d:b4:63:92:6c:c2:fd:53:48:0e:94:
                    70:9a:f4:29:a7:34:15:62:84:04:b8:4b:e0:c9:f8:
                    56:1c:04:c6:1c:88:19:a6:20:30:2c:5d:f5:dc:e5:
                    36:95:2d:2a:58:e2:e0:79:f0:93:43:00:a0:f4:de:
                    2d:e6:bb:78:63:a9:c7:00:15:82:41:b8:90:31:05:
                    ca:83:80:e8:e5:eb:62:a8:8c:79:ba:ed:7e:1f:13:
                    1e:a9:40:ba:30:4a:19:6e:ab:9f:b1:ef:3a:84:a2:
                    da:82:97:c2:32:ce:14:4a:0b:1a:15:5a:00:bd:5a:
                    73:c0:76:e1:6f:b9:e1:35:69:9a:c8:2d:1c:55:35:
                    df:68:79:34:d3:55:1d:0f:54:14:34:90:da:be:4c:
                    09:b8:44:30:5f:05:99:8b:5a:f0:32:2e:63:56:8e:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.32.0/19
                  86.111.216.0/21
                  157.167.0.0/16
                  185.4.96.0/22
                IPv6:
                  2001:67c:22c::/48
                  2001:4010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35788
                  42465
                  44444

    Signature Algorithm: sha256WithRSAEncryption
         92:9e:19:16:1e:e2:99:75:3f:d2:21:f3:78:3c:d7:49:7d:a0:
         52:8e:db:3d:b5:0e:b6:e5:c4:b3:2c:34:78:ff:7b:32:d6:82:
         d3:d9:7f:52:38:9f:c2:aa:7f:ab:c0:24:bc:3c:f5:f7:11:4a:
         0b:2a:6e:0c:f9:5e:5c:47:bc:b6:72:f5:b4:75:98:11:a4:7a:
         14:ff:98:0e:66:ce:ab:00:29:a9:6f:b3:e8:25:bc:c7:e1:3a:
         04:13:17:ef:32:d1:39:5b:d6:07:54:d7:d1:15:d7:49:27:aa:
         40:b0:c6:68:b9:8a:6b:9c:91:05:56:84:25:b7:fe:ee:f9:96:
         74:59:31:23:76:f2:d3:8a:bd:d4:cd:a1:4f:0e:32:c1:43:36:
         40:3a:d3:16:10:31:e0:db:23:34:6c:23:49:ed:1f:27:40:6f:
         8f:bb:cd:a8:b9:fe:25:b7:eb:92:da:1c:54:9e:de:9a:5b:34:
         ff:7d:89:e7:28:9f:1c:61:7e:5a:96:85:d1:a3:dc:65:bb:3b:
         05:77:d0:2d:23:a9:26:e0:da:cb:7a:75:14:4b:02:c6:6f:8f:
         f4:c1:5e:aa:1d:72:ac:5c:9d:e2:b1:d3:a4:08:06:3b:54:e7:
         fc:b7:e2:cf:83:25:8c:bf:e9:64:53:50:cb:62:ef:75:ee:cc:
         cb:31:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:57:42 2024 by rpki-client on console-ams.rpki-client.org