Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
File:                     V5Sv215qGIV4CSClT_qCQI6oW6E.cer (raw, json)
Hash identifier:          6+wnK6hVpRrTu/t/c1qAsa1SVaoMzall98fyfnYQkxE=
Subject key identifier:   57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF7417908054DA125CDE75EE49326A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:16 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 178.236.224.0/20
                          IP: 185.2.48.0/22
                          IP: 2a03:f900::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 13:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:74:17:90:80:54:da:12:5c:de:75:ee:49:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:f8:27:c5:46:66:96:4c:68:b7:af:a7:ba:
                    8b:7f:f4:9d:b4:38:63:a7:af:31:ca:9e:e3:52:16:
                    9c:f5:ed:d3:a5:7f:65:0f:58:fa:f4:e5:37:ab:d6:
                    5c:55:6c:63:f3:ab:a9:27:65:86:f7:b9:9a:2c:e0:
                    05:f2:64:79:57:ea:e0:27:90:8f:0e:6b:85:50:17:
                    3e:21:37:fd:9f:a1:bb:b9:45:d7:13:5f:2a:73:73:
                    6a:95:59:18:12:c6:99:82:3b:12:74:81:20:a9:eb:
                    15:05:f2:65:b1:56:25:0f:6e:3b:d4:06:04:c1:db:
                    7c:c0:2c:da:9e:9f:f2:11:ce:2c:f6:1f:e6:78:fe:
                    c0:4c:63:32:ce:c5:03:ab:58:2c:3d:41:33:79:c5:
                    19:ad:29:c5:3d:c7:0a:99:af:75:76:73:9a:6f:af:
                    ec:4e:aa:7b:00:60:34:92:4e:c7:63:e1:e0:de:a1:
                    72:f6:d8:ab:00:8f:c2:28:3d:34:d2:fa:59:19:06:
                    b7:c3:ba:5d:f6:80:ff:23:a0:52:05:f6:5f:a4:a5:
                    ea:10:a1:b8:22:34:04:b1:aa:9a:f9:93:dd:bb:24:
                    bb:63:3a:49:32:3e:58:03:ba:ee:8d:4e:91:98:e6:
                    4b:02:d6:57:70:51:51:dd:c1:21:44:30:cb:00:2c:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.224.0/20
                  185.2.48.0/22
                IPv6:
                  2a03:f900::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:a0:ee:f2:6e:a9:de:8b:eb:90:03:06:84:c5:08:60:51:
         87:8b:57:b0:04:f1:ed:a3:40:03:dc:b6:0c:35:f6:38:65:bb:
         02:6d:de:72:6d:01:cf:ae:d3:63:10:0b:eb:2b:d2:16:0c:18:
         39:a7:04:d8:e9:ef:56:2b:d4:00:39:63:48:f1:d7:1c:79:fb:
         62:8a:0c:3e:14:38:f6:d6:a8:db:d8:3c:8a:85:2e:56:ff:dc:
         42:21:3a:1c:07:34:25:27:3f:11:34:0b:82:16:76:c4:a9:c5:
         2e:7b:7b:f9:08:e1:3a:d4:ac:84:5a:5e:3d:d7:d0:4c:8e:5e:
         94:bd:28:03:1f:36:43:73:e6:29:dd:6e:7d:b0:1e:1c:fc:46:
         b0:a8:30:50:5d:37:bd:28:a3:c2:8e:dd:41:f2:2a:01:7f:cb:
         52:62:4f:e7:4e:d4:46:63:00:eb:dd:6a:c1:46:a3:05:7a:e0:
         2e:69:13:37:4a:68:31:29:3e:ba:91:ac:22:cd:10:d8:e5:1e:
         66:a3:b6:11:95:5e:fe:cc:07:25:e4:aa:2b:d9:41:2d:f8:80:
         09:39:ff:3a:4f:e6:e9:82:f6:0e:33:46:ee:94:1c:c8:f7:8e:
         33:37:a5:32:6a:a2:4b:e9:8d:3e:18:a7:c9:3a:28:de:fb:be:
         64:1e:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 20:06:05 2024 by rpki-client on console-fra.rpki-client.org