Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
File:                     SzMg4LtdviupcmkbddaPSPblf4g.cer (raw, json)
Hash identifier:          tLcIIGLoE3V5xkIoXKMsk39Qq91WxT91kP2lWEYYCYE=
Subject key identifier:   4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018EC1CDCD7CFEC5940BBCCDF876BBA3708D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 09 Apr 2024 07:41:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.3.183.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c1:cd:cd:7c:fe:c5:94:0b:bc:cd:f8:76:bb:a3:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 07:41:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:67:e3:da:46:61:92:93:34:40:d6:b0:55:
                    f2:d0:cf:ed:cd:fa:da:27:a7:d5:ef:db:7c:e5:43:
                    8f:36:a5:87:30:8e:2c:66:c6:3f:c3:61:ed:5d:7e:
                    f7:71:f4:23:d5:94:32:d1:de:c6:6e:51:06:08:cf:
                    33:f5:52:8d:ad:97:53:5c:63:8c:48:e3:87:cf:3f:
                    19:1a:b7:37:0b:c1:24:20:ab:05:4e:31:e5:b6:84:
                    ef:05:e4:79:27:88:20:d5:88:cf:f9:6b:cd:2d:2b:
                    b1:10:33:ce:4a:b2:b5:2f:6e:89:13:bd:53:05:83:
                    39:ef:86:39:db:ee:67:3a:b7:e1:7d:dd:ba:6d:c5:
                    8c:97:db:58:61:48:70:1f:37:5f:94:b9:4c:7a:17:
                    38:43:2b:d2:ce:a1:23:76:a7:a9:f2:8d:85:59:e4:
                    d7:57:a6:8e:e6:36:eb:a5:fa:46:44:4f:c7:9c:c0:
                    dc:21:09:eb:ec:a5:ae:e0:43:99:ac:4e:14:cd:31:
                    04:9f:fb:99:6b:a6:50:12:7c:3a:de:24:af:c7:ac:
                    2b:5e:18:b1:47:56:f7:4e:6d:9a:ad:84:81:f3:68:
                    93:12:06:d3:f0:3f:13:8b:18:d2:d9:4e:7b:34:4e:
                    a4:a3:f3:62:b5:e0:da:aa:d7:6e:97:31:43:28:8f:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:5c:87:47:88:6e:b4:c6:29:3f:41:07:4a:d9:0b:d2:52:
         26:13:79:78:85:92:00:f8:13:3b:8e:fe:76:31:b1:d6:47:b4:
         36:ad:de:74:35:f7:2d:f4:94:71:96:ad:83:06:11:7e:47:31:
         ec:f5:f8:20:a5:dc:b6:66:ec:70:cb:9c:9f:c9:38:ba:d0:5c:
         f9:e8:a7:24:ae:24:5b:fd:fd:8d:80:7e:38:f5:e3:28:10:a1:
         50:95:cf:96:5e:b8:d2:c4:2c:da:86:78:6f:1e:86:b5:ce:09:
         5d:6e:1f:ec:6a:83:91:be:1d:89:08:17:43:c5:af:ae:1a:ba:
         ca:72:4e:61:72:2d:41:dc:dd:4d:40:f7:54:2f:66:c5:3f:ab:
         0f:44:dc:84:38:b6:dc:01:52:c0:85:77:ea:ae:4b:3c:a8:37:
         65:18:c7:76:db:07:94:e2:3d:e0:52:df:e0:28:73:66:75:6c:
         de:1e:4c:64:5d:32:15:dd:42:d2:df:b5:9b:62:d7:ac:58:26:
         25:b8:67:11:fe:1a:01:a4:3e:08:55:68:c9:05:ab:b1:3a:fd:
         51:ce:f5:ae:f2:e3:d4:ee:73:2f:33:29:c9:bd:c0:25:8d:32:
         39:0b:9f:e9:45:40:aa:90:11:50:6f:ce:b5:8d:3a:0b:16:b6:
         50:fe:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:47 2024 by rpki-client on console-ams.rpki-client.org