Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
File:                     KrkePe2CDHC4rOia6v_6vua_pVM.cer (raw, json)
Hash identifier:          ZgjLvCjN/avl0alQp9h7uWTb19pZqnhbXh1RZ0+dWoo=
Subject key identifier:   2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B9442BC5614A4CC6ACA408DE0CD1D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:31:19 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199130
                          AS: 199667
                          IP: 185.0.25.0/24
                          IP: 2001:7f8:f9::/48
                          IP: 2a13:de80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:44:2b:c5:61:4a:4c:c6:ac:a4:08:de:0c:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:31:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:db:06:09:60:8d:43:c0:cf:ff:ec:fe:4a:
                    ae:80:07:88:64:9a:5d:23:42:e0:91:a7:73:d6:1e:
                    fe:e0:4a:1e:cc:67:11:18:72:dc:14:47:ef:49:67:
                    88:f2:6b:32:da:26:ad:f3:71:f2:20:91:b1:78:17:
                    07:16:67:4a:ff:6b:4b:6f:8d:15:68:fc:0d:0f:09:
                    de:3f:38:33:5e:be:3a:39:0c:23:59:31:ad:e8:ba:
                    10:85:da:ed:7a:9a:bf:aa:ee:83:0d:c7:cb:4f:96:
                    c2:9f:89:f4:38:67:93:49:ed:cf:14:70:53:cc:3f:
                    af:50:f6:b2:96:c9:b9:cc:ba:b5:50:7f:88:16:d7:
                    93:13:06:8a:02:ba:b2:cc:0c:e2:7b:c5:a3:4e:da:
                    56:b2:c2:24:b5:91:ef:87:3b:e8:87:14:96:7a:ef:
                    bf:b1:84:a5:d5:1a:d4:a0:2e:b3:b2:10:67:b6:20:
                    82:67:aa:2d:0c:3b:91:3b:8d:79:c5:8d:db:ac:2f:
                    f5:e6:c5:03:7d:56:d4:7c:82:89:a7:e2:b8:13:ec:
                    97:a6:4d:b0:16:0c:0a:c6:53:6e:d4:07:26:9a:ed:
                    46:ca:70:d3:5d:05:72:12:a0:f7:71:bd:0e:e6:56:
                    f5:bb:b0:34:f9:9d:c8:c3:cb:51:db:11:9a:03:99:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.25.0/24
                IPv6:
                  2001:7f8:f9::/48
                  2a13:de80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199130
                  199667

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:94:07:bc:d1:c8:81:62:eb:1f:c0:28:5b:66:f9:31:55:
         ca:c4:06:77:fb:f1:57:2d:15:46:f4:75:ee:49:e9:d0:71:94:
         e1:8d:ad:d7:56:23:84:8f:70:37:6e:b2:3f:b3:b4:a6:10:65:
         4a:77:32:31:50:9f:0a:04:f7:46:d3:ab:8a:28:67:42:dd:6b:
         98:87:28:96:43:85:ec:b0:70:22:c7:e7:67:ca:0a:58:6b:ee:
         4f:b5:e6:8c:5a:c2:4c:e5:16:f9:43:5e:1c:bb:6d:0d:7d:ef:
         21:1d:05:5b:32:05:14:0c:33:2a:72:c2:1d:c4:de:c7:ea:a3:
         52:af:f6:45:8b:96:9c:ec:4d:4c:04:99:69:95:f4:54:9b:cb:
         49:96:e4:a2:fa:73:92:16:60:35:11:e0:d8:5f:69:50:4d:87:
         5c:e7:29:63:d0:ab:24:74:60:8e:a2:31:f1:43:5f:eb:cc:1c:
         72:47:4a:ef:61:7f:14:f6:e5:31:e1:be:c0:84:50:60:aa:0a:
         b1:45:da:15:fa:a1:2c:e2:b4:11:f2:60:c6:57:f8:8e:62:a1:
         f0:d9:bf:d7:fc:bb:60:98:4e:da:02:bf:36:ae:a1:b4:81:27:
         db:42:85:4a:aa:23:82:97:7b:37:b1:b6:59:67:7e:68:ca:fc:
         0c:30:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:05 2024 by rpki-client on console-ams.rpki-client.org