Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
File:                     GYIE0cJaARI2vqB0HkxgE500mxA.cer (raw, json)
Hash identifier:          fc+fCllJdSyv/rBxggrtHvUdgmeh1ha/TYA91qlpiIA=
Subject key identifier:   19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DE74E9F39BD56A22A769BCED9A596D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:31:11 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34790
                          AS: 48493
                          IP: 80.74.16.0/20
                          IP: 85.234.64.0/19
                          IP: 185.2.236.0/22
                          IP: 185.188.172.0/22
                          IP: 195.162.20.0/23
                          IP: 217.72.112.0/20
                          IP: 2a00:d000::/29
                          IP: 2a00:df00::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:74:e9:f3:9b:d5:6a:22:a7:69:bc:ed:9a:59:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:31:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=198204d1c25a011236bea0741e4c60139d349b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:c9:02:18:b3:31:d1:95:ba:9c:6d:60:d2:
                    df:45:93:88:fb:aa:54:8f:53:06:e7:5a:95:27:00:
                    6b:b7:8e:bb:73:b3:38:5c:8a:48:1f:c1:22:7b:b2:
                    1c:8b:ea:46:59:c1:a0:25:2c:80:fb:aa:65:f5:a9:
                    b0:dc:a8:9a:dc:ee:56:bb:dd:ca:85:7e:4e:6f:94:
                    60:2e:59:41:70:4a:8c:cd:10:05:53:1d:25:96:d6:
                    9c:f0:e1:72:f4:8f:cc:8d:4e:3c:f1:da:22:7d:ce:
                    ef:55:59:1f:a7:f1:74:d4:e6:a7:fb:0b:ef:5f:a4:
                    65:01:4b:9a:ab:b9:73:d9:e4:4d:da:92:fc:47:57:
                    4d:65:65:e5:5d:dd:d5:f9:75:d5:c8:82:c2:c8:91:
                    3e:5d:a0:e4:09:14:41:d2:bc:c7:19:97:92:b6:44:
                    28:75:42:5a:5e:78:29:89:8e:8a:84:66:1d:b2:f8:
                    43:62:0f:4b:ff:6b:c8:99:4f:9c:56:07:6f:bc:bf:
                    cf:ba:d8:52:39:fe:36:a4:ac:af:24:6d:e2:f2:b2:
                    31:5f:70:be:d6:84:f3:78:a7:c7:15:e6:91:b5:95:
                    39:fe:d3:3d:c2:b4:37:99:0d:4a:2c:5d:33:fa:99:
                    72:c0:b8:10:5c:ad:b3:c7:da:dc:e3:fa:fd:b8:3d:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.74.16.0/20
                  85.234.64.0/19
                  185.2.236.0/22
                  185.188.172.0/22
                  195.162.20.0/23
                  217.72.112.0/20
                IPv6:
                  2a00:d000::/29
                  2a00:df00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34790
                  48493

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:a1:65:ca:77:6f:66:db:92:73:92:e4:5c:36:93:8a:c2:
         4b:2b:1f:05:6d:1e:a6:88:0c:e9:a9:d7:23:b9:d1:8a:a7:c5:
         c0:72:bf:9d:00:59:1a:22:85:b0:5f:ac:87:4c:34:c6:f7:61:
         53:8f:e0:11:ca:a6:09:4d:35:2a:24:c9:cf:63:ba:f1:e2:2b:
         bd:f0:29:36:f7:0b:9c:0e:cb:a3:d9:f1:b5:9c:75:a6:9f:98:
         30:c7:4b:3c:1f:bb:41:28:7e:6f:c1:f6:f3:6c:0e:3f:29:c3:
         06:df:64:9a:9b:0c:d5:ba:cf:dd:cb:88:8a:23:6b:a3:63:72:
         93:fc:c0:e9:f8:95:1c:3e:40:b8:ab:7f:43:1a:46:88:23:36:
         c4:4e:bb:e2:b6:1a:a5:e1:a9:49:20:4f:6e:2c:70:db:8a:db:
         47:14:5c:ae:01:5a:0e:91:95:03:f6:66:5f:0f:4b:94:4c:3d:
         d1:65:af:0a:e4:18:83:24:9f:3d:96:b2:cc:67:8d:5e:90:09:
         7f:9a:7d:e4:f7:16:fd:62:28:a7:bd:34:24:42:19:a5:40:92:
         54:a3:07:e7:1d:15:72:a3:20:c5:c9:c2:06:96:5d:47:3a:03:
         40:27:20:a2:d8:40:d8:34:5b:11:d0:1f:ef:3f:57:c0:6f:5f:
         42:87:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:06:15 2024 by rpki-client on console-fra.rpki-client.org