Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
File:                     Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer (raw, json)
Hash identifier:          /sOt1lGA5f/KmtTLYaYZK2R/DWxjBby9/fn+PdYrKmg=
Subject key identifier:   36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018EE19F7D421BF5FDFEAEC97DC2B862DAE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 15 Apr 2024 11:58:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206948
                          IP: 91.226.78.0/24
                          IP: 91.226.96.0/24
                          IP: 91.226.160.0/24
                          IP: 91.226.184.0/24
                          IP: 185.216.180.0/22
                          IP: 2a13:8440::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e1:9f:7d:42:1b:f5:fd:fe:ae:c9:7d:c2:b8:62:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 15 11:58:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:6d:ba:b4:c8:c8:cf:76:70:db:51:e6:d8:
                    d2:81:8d:79:a7:75:9f:c6:82:34:65:c1:50:d9:95:
                    38:39:f9:ca:df:80:7c:aa:91:3b:50:8b:cb:dc:be:
                    f4:83:07:83:50:93:f7:ed:29:17:b8:fa:8f:1d:11:
                    c5:1b:53:1f:6a:7f:89:e3:7c:4b:c1:68:0b:19:6f:
                    80:e4:0e:65:9c:42:f0:d3:17:ed:1a:c2:d1:d0:d4:
                    bc:27:7a:af:dd:48:d2:8f:ad:d5:48:f4:83:a1:d0:
                    34:c3:8c:7c:5c:f3:b5:74:c8:ae:2a:1e:79:88:1b:
                    6d:a4:05:a4:51:dd:4b:27:17:d3:90:40:31:d9:68:
                    3c:9b:cf:93:8e:1a:74:14:a7:29:ed:86:3d:a6:b1:
                    99:97:74:19:b5:d3:43:f9:1c:d1:af:13:fc:12:f7:
                    80:69:f0:75:8d:87:21:b0:ef:49:e9:62:36:9c:20:
                    62:be:f2:e9:dc:b2:cb:3b:b0:82:3b:f6:5a:dd:a6:
                    72:90:5b:d0:b3:d3:39:64:e2:cf:b8:1d:37:03:1d:
                    b2:68:e7:62:d1:fe:90:97:af:3e:9d:67:28:9e:3f:
                    29:19:8e:86:06:f3:16:99:42:a8:7d:26:2a:74:c4:
                    54:59:92:29:76:fa:c4:20:7c:27:b7:68:89:0b:82:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.78.0/24
                  91.226.96.0/24
                  91.226.160.0/24
                  91.226.184.0/24
                  185.216.180.0/22
                IPv6:
                  2a13:8440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206948

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:cf:36:29:f7:e1:1e:f1:ee:8a:c7:25:4e:2c:b8:3c:46:
         c8:46:9c:8d:b8:ee:2f:43:a0:59:8a:4c:fa:9b:23:ba:35:69:
         e3:20:b7:c7:b1:94:b7:07:68:45:98:5f:ee:a4:90:f3:73:34:
         8c:45:e9:49:2b:30:42:8f:76:5e:f9:91:d0:21:45:46:f8:68:
         45:33:f2:5f:c6:75:62:91:c8:44:61:90:32:00:33:c1:f7:b6:
         46:d0:23:fe:70:af:71:2a:8c:9d:86:94:a3:49:00:f4:27:c3:
         c5:17:c6:3e:08:98:8b:66:35:1f:9e:f1:ed:56:30:78:d2:ad:
         44:6c:fb:55:97:89:d9:25:07:e2:fb:ff:c3:cb:03:36:b3:a6:
         cc:85:d3:b8:cc:5a:d5:29:40:af:d6:3d:86:a0:2a:35:89:32:
         63:5c:5a:ec:0b:ab:8a:5f:be:1e:5e:b0:44:dd:04:4c:fc:82:
         41:07:b3:7d:cb:c8:5b:44:47:7a:ee:2a:c5:35:07:0f:ec:e0:
         fb:f7:9f:ac:7f:63:12:bf:ca:1e:49:0d:5a:78:d9:74:8b:7e:
         c3:30:fb:fa:71:8f:9b:2d:aa:27:e5:4b:44:65:f0:1a:ba:a7:
         51:46:09:57:96:a0:e1:dd:8c:11:7c:51:79:60:98:6e:c2:42:
         d6:f6:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:55:45 2024 by rpki-client on console-fra.rpki-client.org