Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
File:                     VPh7WmLB_w9SKBLprdF1a8czhMU.cer (raw, json)
Hash identifier:          mWYpj6obMnN9vsMbuszEyt7eHqc0rb4m9u8aETUSNpU=
Subject key identifier:   54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CF1B7DCE993177282E86B0952FDAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 47372
                          AS: 208444
                          IP: 93.191.160.0/21
                          IP: 185.192.168.0/22
                          IP: 2a06:5d00::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:f1:b7:dc:e9:93:17:72:82:e8:6b:09:52:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:62:1a:fe:95:02:a4:ae:2f:f2:c7:83:0e:
                    a4:a1:27:a7:7f:e5:bd:ad:75:82:1d:90:36:13:5c:
                    47:c3:4b:c3:b7:57:59:f1:a6:93:03:0b:e4:90:97:
                    f0:24:ff:ff:f9:61:8c:dd:af:8b:33:ce:8f:c0:f1:
                    b2:21:52:3c:42:e5:23:d2:d6:a1:96:aa:89:da:7a:
                    27:89:43:78:5e:13:59:e6:23:75:2b:42:0d:be:fb:
                    2a:64:18:2b:b4:d3:1e:5a:c4:38:82:06:86:01:aa:
                    52:37:18:39:86:ee:0a:0c:f4:47:11:38:d5:bb:bc:
                    90:da:27:9a:de:00:99:aa:0b:b9:cd:9b:b9:6c:dc:
                    12:90:eb:75:76:57:25:4b:e0:01:7a:a1:a6:70:cb:
                    77:fb:2e:61:e5:cf:3b:31:1f:cf:a6:7f:6e:5f:b9:
                    40:9f:da:9c:5f:fc:bc:d4:6f:08:87:70:ac:43:d6:
                    8d:67:cf:a6:67:9d:8d:7e:87:30:0b:9c:80:5e:1c:
                    04:1a:33:e3:a5:1b:be:ab:62:11:28:f9:50:ef:1b:
                    b4:2e:21:80:36:1c:70:57:9d:d9:76:6f:44:01:19:
                    cb:a8:3d:11:4c:5e:bb:fb:e4:99:78:3f:83:d0:39:
                    cb:14:eb:73:54:4d:bf:99:82:3e:bc:33:a6:9b:3d:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.160.0/21
                  185.192.168.0/22
                IPv6:
                  2a06:5d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47372
                  208444

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:6e:1c:3a:89:ea:3e:cc:19:96:c9:3c:70:48:16:a4:43:
         d9:cd:70:18:0d:9d:4c:2f:a7:72:8c:cb:9d:58:df:9a:0b:09:
         e6:7d:73:99:6e:ce:a5:d3:46:a4:1e:b2:b7:d0:50:68:8a:43:
         a8:50:09:72:13:42:40:df:60:12:c5:20:b2:bb:1f:95:8c:c2:
         69:49:e9:b2:45:a3:ab:39:33:c4:70:43:7f:bc:e4:d8:13:39:
         45:96:86:69:58:5c:ea:11:4d:5f:c4:68:4d:82:02:ab:65:d1:
         4f:1f:22:d9:84:fa:e4:0a:56:80:9d:53:a4:73:d4:7d:0b:ad:
         70:f1:e7:35:93:d7:77:92:7a:7a:d8:7c:bd:eb:77:aa:84:70:
         b5:2c:e3:15:df:65:0b:3e:e0:6d:c3:e2:c9:65:39:42:27:7a:
         f2:df:51:30:ca:50:1a:14:c1:fc:8d:a2:c3:19:00:d0:70:fc:
         bb:7e:48:40:35:53:9c:d1:bc:3f:e8:db:b5:1f:6c:a0:0d:8a:
         03:51:63:c8:1b:a2:f6:c1:bb:cc:74:89:71:0a:8c:5c:30:e2:
         b7:3a:48:ef:4c:68:31:32:4f:ac:6a:b2:d6:ea:bc:ee:2e:b5:
         66:86:73:f5:32:a3:b6:3f:2a:6b:aa:45:87:91:9c:76:70:13:
         77:9f:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:12 2024 by rpki-client on console-ams.rpki-client.org