Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
File:                     TOCCAEkieEhNbIj1OGuns5aWy5Y.cer (raw, json)
Hash identifier:          h0yGHrDVNQMEFoq6PCovJ5bfDi09PPjP8ZnZBx5xkmc=
Subject key identifier:   4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B7F7BDC7A80D5876E0355E96166362
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:29:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210445

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:f7:bd:c7:a8:0d:58:76:e0:35:5e:96:16:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ce08200492278484d6c88f5386ba7b39696cb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:88:73:97:f6:f1:9f:8e:d6:d7:8a:a0:c6:
                    c2:05:30:c7:52:ea:4a:04:85:6c:aa:1b:98:41:e8:
                    e3:08:0c:b0:00:25:c2:a1:1e:9d:dc:89:76:5c:76:
                    06:0c:47:45:26:4b:cf:9d:60:67:d5:23:8e:1d:69:
                    cf:81:8f:74:7e:62:81:2e:0c:4d:37:4b:22:ae:e9:
                    0d:7f:34:4d:7b:50:33:68:a6:3d:0c:31:cd:04:9a:
                    e0:45:16:a6:1d:7d:c0:75:a8:0c:92:a6:1d:c5:80:
                    0e:67:db:cf:d1:f6:fe:33:b7:32:35:16:23:8e:9f:
                    47:02:bf:6d:df:49:b1:38:c0:1d:ac:a5:df:14:59:
                    62:44:ec:a8:ad:3c:fd:09:dd:84:da:32:28:c9:d7:
                    08:fc:9e:9c:39:0f:ce:75:71:ce:f1:2e:de:d0:d6:
                    7e:57:19:44:0f:64:5c:3b:91:3f:83:0a:1b:f8:9a:
                    02:38:ca:1e:5a:08:cf:dd:65:49:7c:e2:59:e0:ad:
                    0a:db:91:d2:3d:14:fd:8d:77:61:a0:54:36:59:ef:
                    cf:08:79:96:7c:74:c3:3a:07:a5:24:6b:30:cc:62:
                    b9:d6:3b:1e:3b:9f:23:02:a1:69:4b:59:5a:b5:17:
                    35:4f:db:b9:94:b1:99:b5:49:33:4e:84:c0:82:8c:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210445

    Signature Algorithm: sha256WithRSAEncryption
         23:5e:7d:ba:bf:09:bd:98:c7:93:ca:32:ee:71:af:ec:a1:91:
         7e:e5:7e:8c:21:96:36:cf:60:bf:29:bf:10:64:7b:c1:38:2c:
         99:e5:15:d3:96:36:0c:37:1d:bf:f8:b2:b8:2d:8b:23:66:57:
         4e:6c:73:56:07:4b:ee:a8:7f:a9:b1:89:02:d7:18:f2:78:0d:
         8d:de:b1:5d:d9:2b:e6:fe:a6:1b:0c:a4:e8:a3:0c:ae:8c:00:
         1b:55:be:83:cd:83:46:10:98:7b:8d:ed:76:0c:10:96:c9:59:
         65:30:67:93:ae:ce:80:79:fc:f5:ec:8d:35:d9:97:3a:6d:f3:
         64:7e:1f:b9:bc:1c:b1:4f:41:15:7d:3e:dc:07:a9:25:6f:48:
         84:49:35:d4:e0:ae:b3:b6:ae:1d:b9:e7:73:6e:fd:28:0b:93:
         bd:a0:f1:3f:61:30:b7:c9:bd:1e:df:4b:65:9c:6d:e6:24:76:
         ff:ae:f6:3a:59:09:c7:5e:5e:01:9e:d5:6c:35:64:c9:2b:41:
         bd:37:bb:8e:c7:bd:ee:ba:1c:38:ed:53:52:6b:d5:0c:46:1f:
         02:4d:08:49:e3:1c:f3:7b:62:0f:eb:fd:3e:95:15:b2:04:34:
         d1:bd:2a:53:3a:88:a0:3e:d8:ae:84:8c:86:a4:fd:36:2c:fa:
         5d:4a:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:33:39 2024 by rpki-client on console-ams.rpki-client.org