Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
File:                     USd7w4wS4ELt31bX519QVjxL0ic.cer (raw, json)
Hash identifier:          goqJdBU7hUbmWPMrmKLWGYqvKZc9MPCtJNaF3llh7v4=
Subject key identifier:   51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC49229DF1C7A3CA619FE09A045668CD1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:29:22 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206525
                          IP: 185.183.208.0/22
                          IP: 2a0b:1e80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:29:df:1c:7a:3c:a6:19:fe:09:a0:45:66:8c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:97:c5:27:0b:6c:7f:90:35:3a:61:0c:0f:
                    60:d7:ea:ff:d7:a5:56:20:f9:6f:8f:fe:99:1c:12:
                    73:c4:c2:f8:d1:ec:4f:a5:17:4c:6e:43:81:8e:fd:
                    32:64:50:75:39:b3:3e:f9:84:47:3e:07:65:69:17:
                    7d:3b:28:fb:84:6c:04:b5:bb:62:80:1a:43:13:70:
                    68:9e:4b:94:42:4e:84:79:9f:94:68:c5:dd:47:41:
                    f0:8a:dc:67:8d:8a:f0:09:42:08:ef:e6:cc:07:40:
                    d9:49:c0:f9:c2:bb:5a:5c:88:a6:d3:76:d0:56:ae:
                    2a:63:61:42:c0:33:46:5f:53:1b:56:f4:32:c8:a0:
                    a9:a1:d6:b8:c1:91:34:85:55:fe:6c:01:2f:eb:1f:
                    4c:e6:0d:88:eb:12:35:1e:a3:a5:bf:a6:82:73:42:
                    b3:72:ce:cb:7c:10:13:15:a8:02:a2:b7:d6:a3:ef:
                    6d:4a:8e:8c:95:d8:30:52:19:e2:56:a8:cf:27:fe:
                    71:98:df:7d:aa:02:de:27:cf:f6:23:b8:8d:4d:8e:
                    ff:e4:2d:7e:58:5e:70:50:97:d6:d0:96:f0:63:b7:
                    df:e6:a0:6b:aa:b4:dd:27:b6:54:88:f6:90:cf:8c:
                    c0:12:0c:9c:6b:4b:63:08:ce:b1:6d:ef:ac:3f:a3:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.208.0/22
                IPv6:
                  2a0b:1e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206525

    Signature Algorithm: sha256WithRSAEncryption
         5b:6a:71:8c:c9:f9:8a:b5:a4:27:4d:b0:49:8c:ca:dc:af:50:
         cd:fb:af:51:54:fe:da:65:94:15:80:41:55:2a:8e:c8:c9:fb:
         9f:9c:14:8e:b9:59:a7:4f:67:6e:b6:3b:56:5a:43:e3:85:49:
         ba:8e:ca:2e:19:bb:9b:0e:98:a8:2c:c8:ff:47:a2:93:f5:b9:
         f4:c0:39:b8:09:91:74:c3:69:d2:7e:b9:62:9c:b2:08:67:f9:
         4c:f4:79:a9:36:9c:c2:c5:11:23:b3:a0:ce:d8:08:0e:a3:7d:
         ff:34:9a:a5:f1:87:94:4e:49:69:46:87:cd:c5:df:99:54:9e:
         df:36:d0:76:eb:7e:72:fa:6f:a7:67:f3:f5:a2:36:23:8a:25:
         a0:42:ce:7d:d7:07:77:b3:4a:05:fc:6b:5a:83:19:29:11:ae:
         cd:f2:61:dc:eb:44:4e:2f:b4:b5:e6:73:28:b7:96:cf:7e:86:
         16:f6:12:50:fd:c7:fd:53:1d:97:ae:95:ee:fd:c4:48:e4:ea:
         88:c1:46:4c:34:7e:5b:c1:b2:68:3f:92:da:0c:f8:61:42:64:
         49:d5:b5:53:b0:06:51:03:88:bb:71:b8:92:3f:d7:1c:6b:57:
         ff:fb:95:02:05:d6:96:95:7d:68:29:0d:1c:0b:eb:a1:dd:6f:
         9a:7b:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:49 2024 by rpki-client on console-ams.rpki-client.org