Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
File:                     V-L2mlyy1YBNIamwRboxSusaqh8.cer (raw, json)
Hash identifier:          vEJM6zIl5d8LCbzzy2ebFrPIPJWRuA4z1O/D45VOiAI=
Subject key identifier:   57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC424FEE6E22FB60865F859E08115C9C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:30:08 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 41951
                          IP: 109.205.224.0/21
                          IP: 2a01:5180::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:fe:e6:e2:2f:b6:08:65:f8:59:e0:81:15:c9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:30:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:fe:aa:3e:da:56:30:17:80:7d:7a:bf:0e:
                    9a:e3:e6:8f:61:27:aa:72:69:1a:32:10:6f:fa:72:
                    e6:df:c5:a3:96:a5:82:b7:da:03:22:ce:38:29:28:
                    43:c1:bd:c4:b0:1b:6e:3f:c1:90:aa:06:c0:67:7d:
                    98:c2:c6:03:7a:3a:f2:e3:be:18:24:d3:ad:23:b4:
                    dc:a0:e4:c9:37:71:b4:aa:8d:61:4c:35:9d:0f:55:
                    01:14:b3:55:6f:a3:b2:1d:63:fb:9c:03:a9:29:2e:
                    3c:5c:c3:b4:71:14:3a:6e:0f:72:ff:c0:04:b3:d6:
                    a7:fe:b3:4a:1d:fc:e0:a9:d6:cc:3c:2f:7f:66:ba:
                    54:63:b7:d5:3b:f5:1e:4c:6e:b2:fa:0b:5d:b1:24:
                    3f:a6:8f:cf:06:e2:76:81:5c:ab:ab:fb:23:d6:9b:
                    59:5a:53:17:70:89:c2:18:6d:3e:9b:2b:4b:43:f8:
                    7d:e8:57:f2:a3:59:dc:7d:dd:07:eb:9c:08:f2:96:
                    e5:8a:36:d1:f3:ca:e9:34:0b:96:96:5a:ce:1b:7e:
                    30:7a:4b:c1:e5:c8:82:30:91:9d:59:ce:f5:6b:f7:
                    e4:bc:d0:24:f7:ec:05:17:e6:9a:8f:0d:39:7e:71:
                    8b:2e:8a:1f:07:82:72:b5:31:3e:b9:c5:09:8c:23:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.224.0/21
                IPv6:
                  2a01:5180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41951

    Signature Algorithm: sha256WithRSAEncryption
         25:19:d5:33:41:37:93:a6:2a:c7:e8:21:cd:bc:df:6d:52:39:
         65:10:94:5b:c6:64:1c:78:1a:48:34:f2:73:64:00:91:45:26:
         8d:5f:69:e0:e1:81:67:f5:19:c4:01:de:6d:8b:b7:44:d1:eb:
         10:c2:99:73:6e:37:ca:39:9c:c2:0d:5f:e8:92:e3:2b:ba:9c:
         45:f0:b4:da:10:f2:82:3c:dc:7e:4b:e6:a9:42:32:4d:e1:35:
         19:f1:e7:22:8a:40:63:27:ec:fa:9c:c8:7b:8d:2a:86:ae:09:
         ac:92:52:78:27:98:bc:0c:34:a8:fe:d3:46:34:85:f1:b7:3f:
         50:17:fa:fc:9e:a3:b7:76:16:cf:6d:c9:cf:3c:c8:78:43:df:
         cf:7b:34:d4:3c:e4:e2:9a:81:2d:01:6e:04:68:f3:29:dd:96:
         14:e1:b9:56:7e:5a:ee:be:c3:72:9e:e1:a1:19:c6:06:39:49:
         12:c1:32:37:be:24:cc:f5:b9:1d:51:94:be:35:47:1d:3f:26:
         26:34:f6:96:1d:7c:22:ca:78:0c:17:39:f8:62:2e:cc:e3:4c:
         5e:59:53:9f:ce:74:c4:12:3c:ab:f6:b0:68:17:92:10:9a:3f:
         f9:f9:ea:7d:51:d2:77:9b:ed:eb:cf:e4:9e:cc:84:f9:f4:64:
         35:cf:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:51:05 2024 by rpki-client on console-ams.rpki-client.org