Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
File:                     SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer (raw, json)
Hash identifier:          OgJ7+uaNNdN5ZnscRP5TBYOaP8KJi1EgAuuvVSoSSS8=
Subject key identifier:   4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DB5BD413ED1E1244B4825A8BD83D7D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:30:05 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 43183
                          IP: 91.194.146.0/23
                          IP: 193.246.170.0/23
                          IP: 2001:678:fbc::/48
                          IP: 2001:67c:8ac::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:5b:d4:13:ed:1e:12:44:b4:82:5a:8b:d8:3d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:fc:5f:30:fd:fc:c7:98:9f:fe:f5:bf:5c:
                    0b:5d:93:0b:25:07:0e:e4:af:77:e4:96:39:8d:10:
                    f8:f1:80:de:b2:be:3e:39:30:b0:c8:ef:8a:6c:dd:
                    cd:ba:cc:a2:27:ff:43:13:14:03:e5:6e:73:2b:e8:
                    6a:0c:7f:1b:21:ca:b4:e5:30:5e:42:4f:39:53:8c:
                    8e:e0:af:72:10:53:95:f7:c0:be:3e:7e:7d:e0:bb:
                    f3:ba:82:2c:d0:f0:7a:d5:24:e5:cd:c2:b3:d4:26:
                    68:f7:95:13:9d:2f:92:33:c8:c8:37:4e:67:19:c3:
                    68:e3:29:0b:63:32:8a:69:ce:c8:d9:a9:3d:23:48:
                    4a:33:93:80:82:33:1b:37:a2:90:5b:1f:8d:8c:83:
                    ba:7b:cb:57:3a:3a:0f:42:5f:77:c4:fb:61:c0:53:
                    82:74:53:6a:c2:1d:99:8e:08:16:43:7f:68:d1:fe:
                    a4:13:db:5a:29:8a:e1:8e:6e:c3:93:5d:ee:ca:fd:
                    9c:ed:c7:dd:91:03:29:22:8f:35:41:f3:49:11:82:
                    ca:54:3f:c2:a4:52:10:13:89:2b:24:5e:1a:c0:d8:
                    67:ca:bb:5c:40:d2:0a:90:18:bb:84:fe:19:25:f5:
                    3c:04:b2:cc:43:cb:b0:c8:d0:77:6c:f9:f7:0a:8e:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.146.0/23
                  193.246.170.0/23
                IPv6:
                  2001:678:fbc::/48
                  2001:67c:8ac::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43183

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:c6:17:4f:04:7f:53:17:f5:3c:f3:ba:4d:1c:68:9d:f9:
         58:86:49:90:eb:7a:ff:20:ba:39:e9:68:f4:0c:e0:22:7b:16:
         83:65:cd:69:0b:1e:84:29:c3:63:27:1d:81:54:3a:c1:23:b1:
         98:8a:a0:ce:61:26:b3:60:5b:77:9a:19:f3:19:b2:8c:84:af:
         9c:ca:73:2e:2e:44:d6:af:ab:9e:59:3f:98:7a:fe:b7:93:7d:
         f7:bb:ae:df:b1:05:44:12:50:5e:9f:a7:dc:8b:b3:c7:d0:d7:
         cb:ae:b8:6a:89:42:18:4f:ff:a2:1f:ec:e1:71:ee:a0:64:31:
         28:69:8e:7b:30:da:c9:21:0d:e2:74:d8:fc:f2:8a:2b:9a:e1:
         89:4b:40:51:52:bc:0e:ac:63:46:e7:17:82:2f:02:a9:eb:1e:
         86:b3:74:4c:13:61:4d:a5:55:aa:3c:19:10:99:ca:ac:77:36:
         63:b2:9f:6a:dd:14:ee:40:88:10:d9:cf:96:dc:d9:f1:5d:da:
         45:38:5d:93:8d:63:72:db:76:4b:19:b0:3a:85:cf:a0:39:43:
         54:88:18:99:0c:f1:ef:b4:c1:b8:4c:d9:ae:cf:38:fb:a0:6a:
         b5:b0:80:e5:e0:35:5f:cc:7c:b6:14:22:1b:e8:d2:65:54:c9:
         d2:64:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:33:16 2024 by rpki-client on console-ams.rpki-client.org