Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
File:                     Hw94pVpb5cAduAP0OMphG38VAwc.cer (raw, json)
Hash identifier:          CawY/FFczoV6SOnbDcYX811reYpCuCDZZc2dj8v/a/M=
Subject key identifier:   1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F100C0D392BA016CFE98BFB1B44470C06
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 Apr 2024 12:19:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209653
                          IP: 87.120.160.0/23
                          IP: 87.121.16.0/23
                          IP: 91.220.30.0/24
                          IP: 2a00:b500::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:10:0c:0d:39:2b:a0:16:cf:e9:8b:fb:1b:44:47:0c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 24 12:19:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:77:01:67:57:89:05:41:07:1e:5c:da:9c:
                    39:f5:d4:38:7e:d7:f3:57:50:0c:1b:c1:1b:7a:fd:
                    47:7c:99:ae:57:cb:28:20:02:51:d0:9e:b9:9c:21:
                    7d:f0:b4:13:01:47:34:c5:18:e6:f9:d4:c7:62:52:
                    97:a7:bb:fd:81:e9:06:a3:3f:9e:63:79:9c:ba:28:
                    4c:70:6a:00:26:3d:48:fc:97:e6:36:7a:7b:0d:9e:
                    2e:42:94:2a:d8:8b:6f:fa:03:d1:8b:a2:d7:3a:1c:
                    d2:f7:92:4f:af:5a:88:82:73:1a:6c:2c:99:bd:3d:
                    af:57:90:e2:e2:d0:53:7e:8f:ca:f2:3c:77:75:62:
                    ef:29:c6:2c:68:8b:84:35:07:56:18:78:b2:86:1e:
                    b3:72:fc:3f:01:39:a2:da:34:ba:b6:05:9b:58:00:
                    93:95:4a:da:a9:42:54:47:0a:7b:89:27:b9:37:48:
                    fa:34:85:0e:6e:c4:79:f4:f0:76:2a:d7:ce:4a:23:
                    cb:3a:b5:d4:6b:85:10:f8:d6:0d:62:33:e5:1d:36:
                    b8:61:30:4d:6d:4e:02:b6:9f:bd:07:f7:ef:97:83:
                    66:44:35:94:38:db:88:b9:cc:2f:a8:10:54:e8:63:
                    af:e7:25:7e:0b:dc:10:f4:40:ed:95:da:cf:1a:ae:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.120.160.0/23
                  87.121.16.0/23
                  91.220.30.0/24
                IPv6:
                  2a00:b500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209653

    Signature Algorithm: sha256WithRSAEncryption
         41:54:c3:1c:bf:8d:df:a8:7d:3b:8b:9a:6e:c9:48:1b:c2:a1:
         af:9d:3c:f1:24:26:07:3c:44:fb:86:1d:47:bf:68:99:18:27:
         30:7a:d5:78:1b:70:06:9a:26:56:ff:e6:c1:0c:62:45:30:4c:
         80:ad:28:da:a8:84:5c:9e:b1:f2:fc:cd:91:e6:cc:ba:f9:ef:
         07:c7:22:4f:a8:5d:d8:ad:df:d6:d5:59:ed:79:d2:33:33:52:
         90:73:cd:38:3d:75:13:9d:49:78:8b:35:4b:cd:d2:ff:73:28:
         14:e8:ea:c4:04:8f:65:16:21:38:67:55:a6:9d:fd:3a:0c:97:
         87:ec:5e:05:72:50:10:94:1a:e8:f6:ae:2d:14:2f:54:cd:38:
         94:8b:e0:cb:f1:93:99:ae:30:f8:3e:ae:21:1f:88:ad:06:85:
         83:78:3b:b0:b9:13:2f:c5:a0:1e:bc:06:20:c4:60:a9:54:76:
         69:2f:cd:ae:40:87:38:b2:ac:1e:ad:82:e8:3d:a4:36:57:d9:
         4a:5b:45:9d:b7:19:85:b3:91:17:2d:8e:be:d0:fd:31:bf:f8:
         29:44:aa:2c:65:3a:78:3f:9d:fd:39:c5:d5:1c:2b:03:07:e5:
         d6:93:b4:74:29:df:74:f0:30:0c:4c:3b:e2:74:2f:d5:ce:9c:
         ca:74:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:55 2024 by rpki-client on console-ams.rpki-client.org