Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
File:                     UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer (raw, json)
Hash identifier:          mH3G6yIwJ38mPmQI28SlLgQM4oRNcRUMVu7HwQ3QKWM=
Subject key identifier:   52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF496D145EC715FA08A9F410FBBEEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:05 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197262
                          IP: 178.212.216.0/21

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:49:6d:14:5e:c7:15:fa:08:a9:f4:10:fb:be:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=52f25bd05ac148851fa2a463ad0de070818404f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:fb:d5:9f:db:1c:9c:99:3d:bc:49:1a:d5:
                    dc:6a:dc:95:26:f0:96:16:ca:bb:ed:f3:bb:24:0c:
                    96:49:c7:68:0d:4a:d4:9e:95:c7:c5:1b:b7:87:66:
                    7d:45:24:00:22:1d:f7:c2:52:00:79:bf:3a:e3:d5:
                    70:8e:ad:b3:8b:24:a7:44:f3:a8:36:04:5c:80:30:
                    8f:0d:b1:4e:c0:9e:c7:de:c4:99:81:32:8b:c4:a0:
                    c2:db:96:df:2b:ae:77:70:8e:2b:75:e4:02:74:02:
                    f2:c2:5e:9c:cd:91:58:eb:c6:7f:31:75:29:00:a3:
                    b6:03:68:69:1c:2d:3c:8d:bc:64:21:0a:29:d7:8a:
                    5c:6e:8a:a0:52:7a:06:83:81:06:e3:be:a7:8f:a6:
                    2c:60:ce:7c:33:ab:56:f2:2f:21:c4:55:59:8c:dc:
                    e4:a8:d6:65:30:ea:d6:03:5a:6b:9e:fe:d5:0b:9e:
                    22:31:c0:d9:be:b3:04:bd:45:49:89:88:79:18:2e:
                    02:fe:10:34:0b:8b:a0:c1:52:25:30:25:2d:6f:c5:
                    e0:00:93:35:da:08:b2:1c:1f:a4:ff:0d:2b:1f:f4:
                    b4:34:47:1b:55:3a:e5:28:f8:10:59:00:25:34:41:
                    a9:73:e0:42:ff:cf:95:02:32:a7:ae:a7:68:97:25:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197262

    Signature Algorithm: sha256WithRSAEncryption
         2a:2d:a9:3a:ed:d5:e4:78:f0:a9:46:87:2a:90:47:94:eb:14:
         8d:02:4c:f7:b2:89:9b:7a:5e:fa:bd:13:9e:cd:62:3d:93:9b:
         8b:8f:1b:cb:95:31:5d:58:3f:ed:09:57:45:38:68:26:2a:e9:
         f6:85:82:98:93:ca:32:d4:4c:0c:31:4e:74:56:a4:5c:e5:8c:
         68:52:0a:ea:51:c0:b9:5b:55:1f:a8:5b:43:eb:07:9b:cc:aa:
         26:d8:61:21:05:e8:c8:b9:52:55:29:b9:7d:36:e5:b1:d2:1c:
         e3:b4:3d:33:9e:4d:e1:c6:8e:13:d4:33:94:2b:e1:24:74:fd:
         d4:53:4d:a1:5f:47:9b:4e:67:22:dc:6d:9e:f7:58:82:a2:52:
         97:52:1a:a8:9c:df:e6:96:21:d2:d1:5d:d5:85:b2:88:bf:79:
         e5:3c:a5:ad:8a:d5:4e:7e:b3:30:c7:cf:3d:25:9f:70:82:20:
         dc:dd:8e:0e:93:ed:1f:02:02:83:60:52:f6:81:ad:af:d8:08:
         be:53:64:76:fe:17:a8:83:67:12:d8:5e:6e:24:6c:77:b6:c8:
         87:43:02:1e:80:93:08:03:f0:da:9d:c1:2a:96:f2:44:61:6a:
         ee:4e:cd:f1:1a:1f:9c:a8:45:ce:c7:42:cd:b6:7c:eb:8e:bc:
         7a:ae:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:34:35 2024 by rpki-client on console-ams.rpki-client.org