Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
File:                     J0hgAkaZUbaABwTI8CysdLX4KQU.cer (raw, json)
Hash identifier:          uvMocvJRid12ujtvgAb6+KHWAw0CCveg61sGPXGaGPg=
Subject key identifier:   27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F1AEDB2C885E299366574F75F69EC96D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 26 Apr 2024 15:02:16 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 39400

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1a:ed:b2:c8:85:e2:99:36:65:74:f7:5f:69:ec:96:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 26 15:02:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=27486002469951b6800704c8f02cac74b5f82905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:46:6a:77:7b:12:ce:ea:a5:86:26:b9:fa:
                    d1:33:dd:18:be:4f:97:a6:02:dc:7b:b7:01:fd:e1:
                    4e:0f:f3:2a:93:41:9a:74:c4:81:97:05:9e:9a:ea:
                    d9:c8:d9:b9:f3:90:1f:7e:5c:ce:57:08:4a:0a:b0:
                    51:1d:36:d7:06:c1:83:11:3f:17:dd:86:27:5e:00:
                    d4:52:9b:f1:d6:95:26:4e:89:5c:15:14:25:76:71:
                    24:f3:d2:ce:a8:32:7e:45:1b:3b:28:62:83:7b:48:
                    41:6d:6f:ac:ab:40:e9:57:9a:e6:85:2b:c7:d6:e9:
                    28:a3:d8:2a:35:56:9d:ed:85:f2:61:f3:60:72:1f:
                    00:85:48:16:ef:95:de:30:e8:91:8e:8c:b1:6c:7d:
                    97:0e:4f:8f:25:b5:dc:1e:8c:e1:af:23:de:17:1b:
                    ca:3b:a8:f2:d4:af:eb:4e:da:7d:7d:f1:ed:27:94:
                    54:e1:7e:f2:d2:ab:89:ee:c0:e0:23:27:f3:18:9a:
                    df:f2:de:c2:9b:39:5a:c0:2d:2a:47:a2:47:c7:e2:
                    3e:3f:33:fe:c3:51:f8:3c:63:3a:46:e1:64:60:34:
                    0c:20:db:08:d5:11:54:24:20:b7:ba:21:ba:ac:2a:
                    f5:a1:6d:02:d1:09:5c:27:52:19:2c:e3:30:cf:2b:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39400

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:a8:e0:16:41:63:51:d8:50:e8:14:9d:13:8b:a8:f6:d8:
         c4:1e:f5:e5:7e:26:63:1a:d5:b4:ef:ff:b5:ba:43:69:da:76:
         8a:7c:a5:78:0b:f5:61:f3:2e:9b:58:ad:fd:07:e7:95:43:71:
         2f:ac:fd:f7:32:99:d4:64:46:26:87:7a:99:7e:de:cf:6f:e4:
         31:ff:ba:a2:1d:1e:f8:60:62:04:9c:42:d0:ef:89:69:d3:fa:
         02:a3:d2:38:4e:4f:b8:fe:b3:ef:ab:9a:df:c0:a8:63:11:b1:
         38:4b:09:3e:e0:de:d1:ee:d8:5c:98:4f:e9:cb:48:45:e2:6a:
         45:66:3a:d1:71:36:2a:76:17:4c:09:3f:90:f8:a9:91:13:ee:
         9d:62:4a:67:c0:ee:98:ee:eb:8c:94:2a:1d:d9:8f:d1:30:49:
         7f:c0:58:de:92:11:a6:6b:b2:24:ce:64:85:df:53:16:2e:47:
         16:1c:7f:87:dd:7e:47:11:e9:da:14:24:72:51:c9:95:b3:33:
         08:92:d6:03:28:f4:3d:3c:f2:0f:37:0f:53:35:41:8c:3c:80:
         05:a3:a2:df:6a:db:52:96:f3:da:07:53:ab:e9:70:e1:1d:00:
         87:92:59:25:97:28:9b:41:55:60:35:59:b6:e7:c3:f6:44:3a:
         0b:c5:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:36 2024 by rpki-client on console-fra.rpki-client.org