Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
File:                     Li8BGtqu7EZbGCrucJw2fIfljzg.cer (raw, json)
Hash identifier:          l8OJ6FDvsEjZjVWKdq6LZcBpAwTvwT5onHNdokIJS3U=
Subject key identifier:   2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC501023A97ADEDF8AAD72A8328E08B3B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 51510
                          IP: 193.9.192.0 -- 193.9.239.255
                          IP: 193.9.254.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:02:3a:97:ad:ed:f8:aa:d7:2a:83:28:e0:8b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2e2f011adaaeec465b182aee709c367c87e58f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0c:af:6d:2d:02:87:5f:3a:69:f1:df:1e:05:
                    35:37:e0:31:dd:5c:2b:b1:eb:64:81:c2:0b:b1:59:
                    31:03:52:b3:50:b5:9a:17:b1:90:22:cf:15:f8:dc:
                    63:ef:fd:49:21:7c:d4:51:fd:b0:dc:ea:3d:d1:72:
                    38:48:02:55:d8:a3:b6:a7:a9:dd:60:fb:50:2b:9b:
                    51:f9:6a:bf:79:f7:4d:cf:58:b4:e4:dc:80:55:e8:
                    cb:d8:af:b4:eb:59:05:60:5c:58:4c:07:ba:c4:5e:
                    25:3e:85:a6:e8:f0:d5:06:9b:a9:a4:5a:b4:d7:1b:
                    e5:f5:bc:25:1a:77:70:d0:1d:93:2f:e3:f7:cf:f5:
                    5e:22:ba:0c:aa:27:a8:df:c8:8c:67:1e:14:8e:86:
                    db:c7:d2:d4:79:b7:90:c6:0f:27:4d:d0:9d:1e:40:
                    15:fe:b1:e9:f5:3e:2b:74:51:d8:e5:5e:1a:1b:64:
                    96:29:94:e9:f8:ba:e5:dd:89:07:78:6a:84:d0:09:
                    a4:de:da:a3:ae:e5:53:1d:5b:3c:94:b2:83:7b:05:
                    21:b4:a6:46:19:ff:80:f2:9e:25:97:41:a5:9f:21:
                    ff:9c:8f:f0:4a:fc:b3:6a:0d:a3:27:2f:45:bb:e4:
                    94:01:0f:45:8b:32:e0:7c:47:35:ac:24:be:09:67:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.192.0-193.9.239.255
                  193.9.254.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51510

    Signature Algorithm: sha256WithRSAEncryption
         9e:9e:33:a5:1e:b2:ab:f2:5a:cb:a5:e8:60:a8:66:0f:7b:a0:
         ad:ff:39:f6:c8:53:c4:10:5c:4d:e1:56:72:ec:28:27:06:b2:
         7a:ad:36:4f:27:a1:47:ce:ad:92:17:95:de:16:4e:57:c9:d1:
         a1:55:53:42:be:03:04:b5:ea:35:7a:54:8b:0f:ff:21:9a:71:
         8b:8f:4f:49:79:b6:f8:98:64:7e:77:07:57:60:db:31:5b:5f:
         05:ec:a7:c7:f2:1e:04:bc:f2:9f:13:19:c4:e7:dd:0c:0e:a3:
         57:f7:7c:dd:e4:a3:4f:c9:d2:c3:c6:25:3c:a7:bb:2b:ad:8d:
         7a:0d:65:28:f2:34:dc:c1:e5:b0:1e:44:07:2c:ff:4e:9d:3b:
         a4:70:42:2b:c6:18:6f:3a:dc:c0:5a:d5:26:5e:dc:f6:4a:20:
         1d:4a:8a:e1:86:6c:00:e5:3c:1b:0b:c9:15:1a:0d:e5:0a:96:
         a7:66:eb:c1:6a:98:e4:b6:f6:7f:6d:30:6f:a0:57:55:25:6d:
         71:b1:93:aa:da:42:18:24:43:39:df:ee:f3:ec:48:d0:88:b0:
         1e:a7:db:65:f9:d0:5c:eb:3b:0b:75:a5:85:80:dd:ee:65:b7:
         fa:ed:01:6d:10:68:04:0b:cf:b4:52:94:7f:35:ec:3e:32:21:
         91:ec:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:45 2024 by rpki-client on console-ams.rpki-client.org