Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
File:                     JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer (raw, json)
Hash identifier:          97CrHQ3utFk1PFNPzWTaoaWOYezQvT3ZBuLv6TrV2AQ=
Subject key identifier:   25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D3E005FFBD06BAB3142EF315AA3E0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197164
                          IP: 185.114.124.0/22
                          IP: 192.162.228.0 -- 192.162.230.255
                          IP: 2001:67c:2274::/48
                          IP: 2a06:6f00::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:3e:00:5f:fb:d0:6b:ab:31:42:ef:31:5a:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=25572e8f93b18a401cfecdf62586783858cc5f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:05:ab:45:04:6c:79:4d:55:14:b5:09:73:
                    21:8b:ed:9c:94:a6:f8:a0:44:ba:92:78:68:96:78:
                    bf:91:18:df:60:74:0f:e8:20:a6:7a:fb:97:1f:4e:
                    0f:81:00:b1:55:dd:52:c8:6a:8f:4e:c3:db:9f:94:
                    d3:bd:30:0d:29:67:93:d0:dc:52:11:7b:f5:50:4e:
                    b8:b8:b8:6c:e5:3c:cd:38:14:e5:bd:48:29:50:f9:
                    ce:cb:5b:68:9b:85:93:80:d9:6e:ab:b1:e2:3b:6e:
                    3a:8e:05:3f:91:c8:76:88:5b:4e:d8:cc:54:72:e1:
                    82:2d:e4:fb:d0:08:4b:ab:42:82:9d:bd:ed:1f:d4:
                    52:e4:15:81:ab:2b:02:d4:d4:d7:c2:62:17:fd:9d:
                    ca:4d:f7:6b:cc:39:59:5c:be:3b:d4:55:d6:29:da:
                    b4:9d:48:f3:82:3e:10:03:89:28:f3:ce:04:19:73:
                    e2:d7:62:7b:17:d5:61:4d:d7:c2:2c:ac:50:7f:b7:
                    d6:a5:0a:a3:69:d6:d8:c8:39:dd:bb:cc:10:41:27:
                    46:ac:41:01:fb:0a:1b:db:a2:47:af:57:7b:d2:d1:
                    b4:31:27:35:d0:d1:ab:39:64:76:92:25:9b:33:97:
                    77:a3:40:43:7e:22:e6:61:da:44:ff:cb:50:50:6d:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.124.0/22
                  192.162.228.0-192.162.230.255
                IPv6:
                  2001:67c:2274::/48
                  2a06:6f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197164

    Signature Algorithm: sha256WithRSAEncryption
         26:50:57:e3:32:dc:e0:42:fd:06:27:9f:3f:19:b5:3b:1a:8c:
         b8:65:7d:70:29:cd:eb:8c:fb:bd:86:f2:38:3c:85:6d:9d:59:
         8f:39:33:e7:37:bd:68:2f:84:90:53:b3:b5:99:b0:b4:8d:93:
         21:1b:47:b2:e9:f4:ee:48:d5:d3:08:31:18:e2:a8:33:39:38:
         dc:6e:f5:0d:f1:32:8f:1a:83:65:08:42:29:df:ee:33:ef:f9:
         d0:98:9e:f7:f7:2c:f4:e7:3e:0b:75:4b:12:38:5e:69:ff:45:
         6d:54:9a:9a:84:fe:5e:bd:7a:5f:03:44:2c:7a:e7:a9:88:da:
         9f:5a:cd:51:23:f9:d6:a9:62:66:f3:6b:ec:29:1a:14:cc:d0:
         1e:30:c7:19:6b:b1:28:a0:56:2d:98:ea:c7:26:0e:9b:51:c1:
         1e:71:52:05:cb:c2:64:de:95:05:d8:92:20:45:2f:d7:75:db:
         05:70:70:35:f1:c9:ec:d4:ed:65:0e:b7:18:34:c8:ed:5c:7e:
         c3:8e:6f:e2:8e:67:e3:3e:39:25:0a:3e:a9:a7:ea:ff:6e:6f:
         d4:0d:70:85:a7:a0:2e:6c:ce:51:0f:a4:0b:21:f9:51:f6:10:
         90:6c:da:cc:13:1b:72:fb:c5:1c:b3:51:92:3a:37:af:50:4d:
         55:8f:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:55:28 2024 by rpki-client on console-ams.rpki-client.org