Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
File:                     MseO7vestFH8N1df65EU38zBzfs.cer (raw, json)
Hash identifier:          ihaMiWWH9zGnTslK+bcqccLlK9LYaBb2WrY8eNaPI9M=
Subject key identifier:   32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019150F35E4EB124573D216E085F371E1955
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 14 Aug 2024 12:53:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202349
                          AS: 209235
                          AS: 210505
                          IP: 91.199.48.0/24
                          IP: 146.19.117.0/24
                          IP: 185.1.68.0/24
                          IP: 212.18.99.0/24
                          IP: 2001:7f8:118::/48
                          IP: 2a09:c0c0::/29
                          IP: 2a0d:c780::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:50:f3:5e:4e:b1:24:57:3d:21:6e:08:5f:37:1e:19:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 14 12:53:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:d2:40:45:64:69:a4:c8:d1:c1:60:a5:fb:
                    fb:b3:78:0e:2e:b9:2b:53:90:63:17:2d:aa:4f:1f:
                    97:fe:46:54:f5:52:40:23:de:04:2b:65:85:63:44:
                    b5:13:8b:69:f4:0f:ff:37:4c:48:15:07:11:9e:4b:
                    80:e9:3d:7a:77:25:ee:a2:56:45:1a:6c:c0:0a:be:
                    1f:38:f7:99:f5:98:53:d4:3c:80:e6:d0:38:0f:ff:
                    8f:60:46:27:3a:b0:85:e9:f4:e1:5d:29:af:3f:b1:
                    47:97:83:da:54:83:5f:d6:b4:13:ed:ee:1d:a5:cf:
                    4e:69:7e:18:6f:1b:97:64:1b:85:02:75:19:ff:42:
                    6a:4a:64:3b:e0:25:33:79:5f:fe:f4:15:13:e2:ef:
                    1f:b5:85:12:37:cb:ac:35:4b:18:f5:c7:2f:2a:79:
                    a5:0e:51:24:c1:99:f5:2b:a4:19:46:4d:80:f3:4f:
                    a5:a8:93:95:08:fd:a1:b5:b7:70:75:17:1f:b0:e2:
                    de:59:3f:21:27:1f:4d:c3:cc:3d:58:d8:8d:24:d2:
                    9d:3f:6b:d8:8f:3c:2c:1f:b1:9e:77:bc:a6:8d:72:
                    4a:f6:31:14:f5:a2:03:89:20:3c:41:fc:89:65:e5:
                    18:b5:07:3f:0a:f9:c7:47:ae:f4:ed:02:26:34:ca:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.48.0/24
                  146.19.117.0/24
                  185.1.68.0/24
                  212.18.99.0/24
                IPv6:
                  2001:7f8:118::/48
                  2a09:c0c0::/29
                  2a0d:c780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202349
                  209235
                  210505

    Signature Algorithm: sha256WithRSAEncryption
         3d:f6:3f:78:f2:02:72:f2:e9:69:58:9d:04:cb:4f:12:a1:6c:
         3f:36:bd:5c:34:a2:8b:54:4b:88:98:a5:b4:d2:30:bb:87:96:
         ac:ed:7a:11:6c:3f:37:61:c6:01:b6:75:4e:27:bc:db:b0:b8:
         14:ac:3f:14:ea:9e:b2:28:e2:bc:33:28:13:38:a5:94:05:5a:
         25:ee:4d:50:51:46:47:df:53:9b:40:2f:d8:30:49:fa:7b:48:
         67:8c:95:9b:47:51:3f:bb:0b:6a:6e:ef:0d:0a:29:b8:79:f9:
         75:37:84:e6:6b:53:c5:d1:04:68:60:52:c0:2b:45:28:a0:03:
         12:e2:69:2a:62:3e:78:51:18:21:24:f1:45:33:b4:b4:3f:37:
         7d:3d:a7:8b:ec:dc:8a:f8:a3:b3:b6:3a:6c:d0:ed:d6:85:84:
         3a:5f:0a:b4:b7:07:75:55:10:ba:7d:ad:ec:94:7f:7a:fc:fb:
         60:6f:51:2e:be:47:ec:f6:58:da:3b:b2:f0:b3:15:37:fd:42:
         81:bc:4b:28:6a:dc:8d:35:45:e7:36:72:ed:d9:2f:9f:09:79:
         fa:29:49:1d:34:c3:8a:70:91:6e:89:c9:f4:ef:22:65:f0:2c:
         bd:17:6e:63:8a:18:4c:f0:66:80:70:5d:82:ec:ae:b7:1f:19:
         75:e8:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:49:05 2024 by rpki-client on console-ams.rpki-client.org