Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
File:                     VI91elbRdoDW1mkLGdnzkGGYADM.cer (raw, json)
Hash identifier:          hWiKbpH6cXNphE2sVbhNTT2EE2ZPXVk0EXGEiI6mLWs=
Subject key identifier:   54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2ADFC707C19623BE2B2B35F624F8B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:34:16 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 207557
                          IP: 91.234.196.0/23
                          IP: 194.9.188.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:df:c7:07:c1:96:23:be:2b:2b:35:f6:24:f8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:34:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=548f757a56d17680d6d6690b19d9f39061980033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:db:fe:aa:c5:f0:2c:03:ed:ac:04:5c:23:
                    7c:49:27:70:54:cc:02:92:8b:cf:8d:cf:c5:7a:03:
                    40:bb:26:6f:e3:bc:b8:7e:13:aa:d9:56:6a:a4:aa:
                    21:9e:9e:ee:f4:26:9d:dd:48:58:2e:39:50:27:b8:
                    b6:01:fd:1e:ed:f8:94:02:fd:70:2c:9b:06:80:a0:
                    0a:5a:e1:88:82:7c:cb:d4:8e:78:82:51:2b:32:f1:
                    c9:1f:fe:19:ec:3d:8a:91:a3:e9:47:dc:55:27:bd:
                    34:6f:75:85:2a:63:25:1a:94:97:69:36:01:68:5a:
                    76:8e:9a:94:75:61:9f:f7:bd:3a:ee:61:60:70:38:
                    4f:50:a5:d1:c5:7a:61:e8:e5:48:70:55:f3:cf:2d:
                    11:21:e2:1c:f6:bf:87:ba:32:0f:ee:4e:30:52:b9:
                    c0:e8:a3:d9:74:b6:c9:00:00:b5:38:34:90:cf:55:
                    35:9f:be:8b:d7:f7:2d:e0:a5:fc:34:ab:8c:db:69:
                    a4:c8:be:f6:c7:68:d0:26:3c:8c:0b:37:b6:6f:a1:
                    5b:6c:b5:27:0d:2a:a4:c9:b7:34:b0:bb:0b:59:10:
                    e2:d2:42:ef:7f:23:86:0a:12:b5:6d:e6:dd:87:fb:
                    a6:f1:dd:7d:cc:28:53:36:00:1b:f0:42:f3:ff:fa:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.196.0/23
                  194.9.188.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207557

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:73:67:75:75:f5:17:7e:a7:5d:74:12:fd:1b:93:a0:6d:
         a9:67:a3:d6:ba:38:16:3a:fa:ab:f1:d8:0a:29:ab:6b:e9:cf:
         db:47:d1:6a:d3:7e:80:da:f9:dc:c7:f2:c5:7c:db:b0:8b:f9:
         3c:0b:6e:f4:66:1c:3c:6b:1e:51:da:4c:fb:c7:4e:1e:bd:5c:
         9c:29:8c:71:49:68:10:fc:61:c6:c1:0f:34:9d:c9:29:84:00:
         3d:ee:61:b0:d4:e5:4e:a3:ff:58:36:31:c9:64:bc:bb:49:06:
         56:e7:a6:35:cc:df:a4:5c:c5:c5:c5:ca:1c:61:08:63:70:99:
         7d:5d:10:65:ed:25:0a:d6:03:d0:fd:72:58:d2:c1:e2:41:f9:
         e2:55:1e:43:7c:92:70:d9:1d:2a:66:0b:88:4a:0f:e8:c2:f8:
         bb:67:7f:7c:f0:0e:f6:e6:50:22:78:02:5a:58:6e:c0:bf:18:
         a6:69:c0:35:7f:40:a1:58:3f:1d:70:90:a6:4d:bd:82:ce:d5:
         93:4e:4f:2b:6c:d6:bb:89:bc:dd:f5:0d:89:8b:4d:26:b6:c6:
         37:e0:c8:03:a7:82:f0:40:7f:16:7d:85:71:41:ae:a7:c3:17:
         a9:50:08:ab:bd:44:d3:07:5a:a6:fb:91:1f:fa:f1:e1:19:5d:
         2c:26:81:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 07:02:43 2024 by rpki-client on console-ams.rpki-client.org