Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VBV8h2KxRcEt4htRRSLfD15OTx4.cer
File:                     VBV8h2KxRcEt4htRRSLfD15OTx4.cer (raw, json)
Hash identifier:          pLRZwIBu5J2k4KAlIGQWvyUIQdxLlCB/jN+rXcg36jc=
Subject key identifier:   54:15:7C:87:62:B1:45:C1:2D:E2:1B:51:45:22:DF:0F:5E:4E:4F:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01915600E51A9417557EE5A42AB3E262F88B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://krill.uta.ng/repo/pongery/2/54157C8762B145C12DE21B514522DF0F5E4E4F1E.mft
caRepository:             rsync://krill.uta.ng/repo/pongery/2/
Notify URL:               https://krill.uta.ng:3030/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 12:26:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213086

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:56:00:e5:1a:94:17:55:7e:e5:a4:2a:b3:e2:62:f8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 15 12:26:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=54157c8762b145c12de21b514522df0f5e4e4f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:fa:a0:00:c8:85:81:a0:2a:12:99:dc:ba:
                    05:56:aa:68:41:12:c9:91:40:b4:8b:d8:69:56:51:
                    64:7b:4c:84:e1:e3:42:58:fa:da:96:80:fb:16:b4:
                    8f:1f:81:34:f2:68:ab:a0:75:08:b7:55:08:f9:26:
                    de:e7:97:d6:07:80:d4:b1:e0:64:17:f1:b4:f9:85:
                    c4:06:16:aa:52:86:d0:5d:b2:b2:f6:0f:f1:dd:4e:
                    05:c6:fb:92:87:d9:90:6c:09:31:74:47:3b:1b:c0:
                    70:d8:c5:2f:6c:3c:fe:b0:c0:55:ad:1f:43:83:2a:
                    27:4b:a2:5b:a9:0a:2c:b1:4a:5a:ce:1d:b7:4f:b6:
                    93:4a:b9:04:1d:c6:f4:c9:c2:60:5c:30:f1:0c:f7:
                    77:e4:4a:15:28:d2:ee:ef:1f:9e:fa:06:59:74:69:
                    97:3c:8d:3d:d0:4b:b7:4d:88:dc:91:4c:87:0d:5e:
                    f5:fb:00:1b:62:73:be:7c:fa:ae:bf:c7:f8:60:3d:
                    34:59:24:3e:0c:64:cd:49:dc:1f:96:6d:b9:91:c6:
                    8c:a1:97:3e:b7:da:ff:e0:81:5f:96:5d:76:32:02:
                    8f:92:8d:3c:56:a0:e0:f3:af:69:aa:b9:35:e6:6e:
                    2b:4d:12:1d:a3:55:ed:cb:b7:0a:24:e2:d1:7a:bf:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:15:7C:87:62:B1:45:C1:2D:E2:1B:51:45:22:DF:0F:5E:4E:4F:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.uta.ng/repo/pongery/2/
                RPKI Manifest - URI:rsync://krill.uta.ng/repo/pongery/2/54157C8762B145C12DE21B514522DF0F5E4E4F1E.mft
                RPKI Notify - URI:https://krill.uta.ng:3030/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213086

    Signature Algorithm: sha256WithRSAEncryption
         32:64:b0:70:19:d2:69:3e:73:94:4f:69:8a:4f:17:c0:fb:fc:
         10:be:47:6d:a1:7d:6c:bb:a1:f3:e9:17:f1:36:22:0a:ef:02:
         64:b1:d6:56:8e:4d:7c:ec:a0:81:6e:e3:08:6f:0d:15:7b:16:
         1c:f6:f5:92:4d:74:49:df:84:8f:35:a1:f5:13:ff:b1:56:cb:
         06:4b:85:5e:f2:90:c7:d7:ff:84:90:c6:ff:a8:e4:b2:47:87:
         72:20:a4:45:8e:6a:6a:7e:7f:eb:08:74:a5:53:11:24:67:af:
         68:66:48:40:c8:ae:81:fd:16:73:2d:71:b9:14:eb:28:9b:a3:
         df:95:82:3c:2f:45:5f:81:a0:c1:2f:1a:b3:50:60:f6:8c:59:
         3a:c9:f4:14:5b:51:87:1b:07:24:6d:6c:95:67:c6:70:d7:cd:
         39:40:e6:a9:44:17:9b:ff:35:40:36:4f:e3:65:06:a1:ff:f5:
         48:77:0f:01:7e:44:b4:84:00:9f:4d:d4:73:55:06:0d:6d:03:
         2d:f5:41:a4:be:d1:01:10:35:7f:68:ba:04:3b:4c:70:55:5e:
         38:c0:bd:0e:f8:4a:46:6c:46:fb:b8:c4:e3:d0:63:01:01:f6:
         91:76:b8:56:d1:4a:28:e8:05:7a:b0:53:f6:1e:35:31:41:42:
         66:fb:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:32:46 2024 by rpki-client on console-fra.rpki-client.org