Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.cer (raw, json)
Hash identifier:          kbQbKchU8g5m6SkfEJH58ma3/BkGYcAMXXsRd/U17bY=
Subject key identifier:   23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC833DC2EE5FD506612D4DA0DB477B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:30:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 29576
                          IP: 93.157.24.0/21
                          IP: 194.146.132.0/22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Oct 2024 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:83:3d:c2:ee:5f:d5:06:61:2d:4d:a0:db:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:e8:2b:b3:d3:e2:74:34:6f:bf:20:71:ea:
                    74:6d:bd:16:9d:7b:82:41:8d:a1:15:2f:cf:ae:af:
                    49:8a:9e:ea:58:3b:fd:34:68:a3:e5:fa:a6:cc:e3:
                    97:e1:f2:5b:b3:7b:b6:cf:49:11:07:c7:17:c9:21:
                    87:15:e1:8f:84:69:7b:91:4d:13:3c:f7:64:85:30:
                    d6:45:ef:e3:9d:d0:d2:f1:13:6d:e4:26:d1:83:18:
                    a2:72:ea:d6:6a:d9:28:9e:0f:c3:83:5e:da:13:7e:
                    73:26:3f:81:82:2b:2b:38:3e:e9:79:fe:a4:f3:f8:
                    b6:d2:e6:69:87:8a:6a:80:b8:7a:49:f4:d5:39:a5:
                    c3:94:5e:21:46:0d:1c:db:d0:d4:ba:90:e5:4c:e7:
                    ff:09:bb:f7:a8:cf:d9:d7:c7:4b:e9:86:d9:07:37:
                    9a:09:83:21:86:9b:3d:12:7b:b9:05:37:4e:5f:08:
                    60:5f:2c:c5:11:70:0e:22:af:33:56:20:87:38:fc:
                    28:43:bb:08:d7:ab:2c:9f:89:79:78:54:a2:fd:a9:
                    9e:6d:c4:a0:c5:73:12:f8:3b:bf:d0:c8:7c:b9:da:
                    26:88:20:b1:df:f5:2f:6d:4e:2f:57:2b:83:aa:af:
                    03:0b:f3:c5:b3:7b:99:7e:fb:7d:9d:0f:c0:d2:67:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.24.0/21
                  194.146.132.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29576

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:79:ac:45:e3:8f:48:d0:a9:34:29:43:ff:82:2b:89:12:
         e6:7e:03:8f:5e:76:85:16:29:17:b3:2d:2b:88:52:91:80:8e:
         ff:17:02:c8:6e:62:95:50:5d:b7:53:f7:1e:30:86:cd:ff:8a:
         c2:3e:57:22:9a:97:d2:57:da:13:f3:d5:ac:bf:48:ce:c3:7a:
         24:c8:2f:20:62:2e:bd:1b:95:d5:af:c1:ec:48:e6:ea:93:b5:
         a9:31:1e:2e:b3:2a:67:24:a2:c9:16:c1:3a:64:65:c9:a3:e0:
         c9:c2:a5:36:64:61:51:24:22:70:38:3a:2a:a6:96:75:1b:60:
         4b:85:fa:8c:3b:d9:6d:eb:53:6c:c8:8a:a4:dd:1d:ff:1a:3b:
         87:95:51:4c:f8:a6:bd:83:87:07:11:f1:d7:e0:82:f6:39:89:
         03:14:b7:2f:ba:b6:4a:96:e6:6a:a7:f3:69:7e:6f:79:d4:f0:
         f2:1d:92:11:ba:b4:cc:67:99:f6:00:58:78:d7:0e:e4:e6:c7:
         bb:97:b7:f0:d3:e2:55:36:d2:d3:50:59:d5:d3:a8:da:dd:8e:
         65:2c:a7:86:29:f4:4f:61:d6:7f:5e:2e:8e:9b:f8:2c:bb:45:
         07:bd:9b:dc:91:25:04:0a:98:ec:73:76:14:83:2f:74:31:0c:
         56:23:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 10:39:40 2024 by rpki-client on console-ams.rpki-client.org