Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
File:                     R78v_to4HlSBjfBwUs9n4iJRX4k.cer (raw, json)
Hash identifier:          KnpGFDCcpTM2MDnr+jNrLYQ05exgIoZBUacBYJirJRg=
Subject key identifier:   47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56ED8C10FBA1CD70895D02AE2BB1EB3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:30:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 21201
                          AS: 24819
                          IP: 80.91.224.0/20
                          IP: 91.216.7.0/24
                          IP: 193.111.104.0/22
                          IP: 2001:67c:1778::/48
                          IP: 2a0a:3dc0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:d8:c1:0f:ba:1c:d7:08:95:d0:2a:e2:bb:1e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:30:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=47bf2ffeda381e54818df07052cf67e222515f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:62:21:33:d2:61:c4:c8:1e:49:c7:a3:99:
                    d5:97:4f:e0:ab:4d:84:31:50:82:ac:fb:01:a9:84:
                    b2:03:01:bf:02:c6:dc:83:60:30:96:59:5a:5d:ab:
                    4f:25:d6:f0:0f:36:ad:0b:f7:b7:16:97:92:06:78:
                    61:34:06:15:ba:ca:62:09:ba:eb:1e:cc:f3:2d:4a:
                    b0:f2:92:c6:1b:d4:15:a1:e4:f9:17:61:51:91:fe:
                    6c:55:62:33:cc:97:dd:28:55:7d:b5:25:47:51:c2:
                    42:46:c3:fb:5f:6c:5f:32:92:fb:fb:1b:7e:2c:7f:
                    cf:26:79:55:e7:88:66:be:70:b8:dc:62:7d:9a:98:
                    5c:cb:87:c7:3b:72:75:af:c8:09:83:f6:4b:4d:a3:
                    14:d5:74:c6:36:06:df:82:79:7d:40:dc:f9:89:a8:
                    40:57:16:f4:e9:69:0d:a2:06:c4:36:e9:aa:a9:fe:
                    27:d8:e7:50:e2:2d:d5:94:d3:64:c4:47:64:83:89:
                    bb:4a:04:15:47:1f:5e:46:2f:05:60:5f:98:f0:5d:
                    50:18:ae:5f:f9:89:43:b1:7b:e1:73:27:e8:ec:84:
                    f6:0b:23:10:e0:d6:f2:47:57:db:d8:2d:ff:4a:e4:
                    39:6e:6d:80:34:0f:fe:c1:55:0c:c3:89:3a:e3:ef:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.224.0/20
                  91.216.7.0/24
                  193.111.104.0/22
                IPv6:
                  2001:67c:1778::/48
                  2a0a:3dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21201
                  24819

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:45:c1:b1:d2:36:88:b3:17:54:5e:6f:75:aa:13:05:43:
         c9:18:16:0c:cf:5f:4d:6d:ec:52:56:b9:ea:85:b2:39:5d:e2:
         7e:d2:84:44:f3:d0:d5:3b:14:9d:94:f7:3b:a9:7d:74:fe:48:
         25:a8:fc:93:02:06:77:3b:fd:fe:f6:ac:c7:fe:1d:57:6f:3c:
         85:ec:db:d7:92:38:14:90:02:27:fe:81:d7:b6:23:1f:93:de:
         9b:86:70:a4:3c:91:ea:f0:59:8e:5e:46:48:1d:7c:9a:a2:47:
         5d:b2:c9:22:d5:46:25:fe:ba:56:ec:72:45:17:f9:02:10:b0:
         07:d8:e2:c1:be:67:24:bd:12:30:d4:85:0e:2d:df:c3:1f:6f:
         02:6b:1f:b7:7f:57:01:ed:2f:69:63:23:35:20:56:a9:f8:f2:
         a6:96:41:84:f0:15:bc:5c:55:3c:52:be:24:20:96:d9:3a:f7:
         09:58:47:59:74:c8:82:36:9e:1d:42:68:ae:16:93:07:42:6f:
         e8:e0:8f:3e:56:4f:91:89:99:16:6f:ea:14:bb:5a:4a:58:43:
         98:0d:98:a2:f1:b1:a7:bc:b9:03:47:54:e0:c5:5c:1d:4d:f4:
         67:b0:66:57:75:ac:7d:85:77:a2:c6:d8:7f:dd:41:84:02:99:
         a5:d9:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:06:52 2024 by rpki-client on console-ams.rpki-client.org