Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
File:                     M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer (raw, json)
Hash identifier:          3WAf2YS4LeN5ZB/l9jVaCW2j9nzsGl1kaBjfCjezb9o=
Subject key identifier:   33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2B177D1209EC61FDEE79F48D384C98
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:34:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 196968
                          IP: 162.208.52.0/22
                          IP: 176.10.48.0/21
                          IP: 178.21.0.0/21
                          IP: 185.69.180.0/22
                          IP: 199.247.56.0/21
                          IP: 217.61.232.0/22
                          IP: 2a00:6e00::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:17:7d:12:09:ec:61:fd:ee:79:f4:8d:38:4c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:34:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:55:dd:63:8e:66:e4:17:ab:90:a2:7a:df:
                    fd:92:44:2c:b2:cb:83:a0:7f:8d:44:0f:ad:ad:4e:
                    e4:9b:e0:c0:ca:31:ea:3c:d9:00:ec:40:ad:12:e0:
                    48:68:5d:a4:64:6e:c5:c6:05:48:57:b5:18:33:ea:
                    d2:30:c4:09:98:f7:cd:75:40:b7:b3:66:b4:28:28:
                    d2:7f:c1:44:af:aa:3b:51:81:7f:6a:3b:42:90:4f:
                    61:65:e5:56:68:3d:0a:5b:d1:67:a8:87:fe:d0:75:
                    85:4d:a7:ce:72:22:91:63:0b:9f:35:8f:22:74:9e:
                    d5:04:d1:97:b7:70:49:dd:3d:6b:e3:b7:f3:c4:c1:
                    4f:cf:91:13:50:cc:82:a6:90:4c:00:8b:0f:3e:72:
                    2d:1e:b8:f1:7b:3a:5f:66:32:81:47:cf:0d:de:8d:
                    49:09:c7:bb:2a:4d:74:61:7a:3c:38:72:26:59:3b:
                    73:34:13:fc:41:1b:d3:14:cb:d4:2c:dc:0a:18:32:
                    88:59:a1:d7:63:fb:ff:97:67:d6:8c:34:c5:03:99:
                    61:4d:4e:8c:3e:6a:18:8d:86:40:e0:55:7b:23:85:
                    19:5d:4a:1f:8d:29:a9:85:b8:ef:8c:77:60:37:36:
                    67:ee:2b:30:7d:17:8d:19:09:53:88:0b:26:8d:de:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.52.0/22
                  176.10.48.0/21
                  178.21.0.0/21
                  185.69.180.0/22
                  199.247.56.0/21
                  217.61.232.0/22
                IPv6:
                  2a00:6e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196968

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:df:68:ea:c3:f6:9e:21:e0:5f:a3:3b:02:d9:52:5e:93:
         a1:f4:0c:dc:9c:2c:9f:e9:3f:9d:a6:68:4f:38:71:6d:05:bf:
         f2:ff:ef:0e:45:77:52:65:84:af:8c:9b:39:0f:b1:d7:95:5f:
         ea:f9:e5:0c:dc:22:91:65:d2:bf:5e:ff:c8:45:61:dc:e2:c7:
         51:34:e2:39:7f:23:89:97:82:3b:9a:74:21:a4:d8:79:a7:70:
         dc:60:9b:d8:d5:57:5f:66:d8:5e:9c:79:22:25:e9:ee:22:68:
         ae:3c:f8:81:92:dd:eb:8e:8e:90:aa:ce:0e:70:24:44:4d:37:
         b6:69:26:37:5f:dd:a8:8e:6c:89:93:4e:03:0f:f3:ac:26:97:
         65:22:7c:6b:30:4f:da:5c:b0:47:2e:7a:6d:f3:85:a3:0e:eb:
         d0:30:d4:b7:2b:06:fb:76:ea:dd:51:5f:5b:04:b3:38:61:fe:
         b8:08:83:89:e9:7b:c4:4a:44:0d:d5:06:0f:94:a1:3a:de:bf:
         08:ac:b7:f7:11:f3:19:43:4a:a6:3f:c3:40:1f:7e:8a:10:fb:
         54:5d:b1:33:0b:af:7e:47:c7:4a:f1:0a:92:6a:18:0e:fe:d7:
         a0:0f:1a:ba:6c:ec:06:41:a7:6b:18:b3:c6:9c:4b:b9:97:7c:
         11:81:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:03:57 2024 by rpki-client on console-ams.rpki-client.org