Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
File:                     VTynsubB4X9fPtvjdeGezjlTORA.cer (raw, json)
Hash identifier:          LZc9LYUiamPNRc25Og89gwK4m2ii41RN/nJVILTDcZo=
Subject key identifier:   55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94D1DBC681428FE29F393715FE0F376
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:32:03 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49318
                          IP: 46.28.248.0/21
                          IP: 188.93.176.0/21
                          IP: 194.110.124.0/23
                          IP: 194.110.130.0/23
                          IP: 2a00:1d90::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:1d:bc:68:14:28:fe:29:f3:93:71:5f:e0:f3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:32:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:73:27:4e:26:bd:4f:de:22:01:e1:8d:e3:
                    b7:3f:3c:2c:8b:58:d3:07:c6:c4:b3:5d:3c:53:ca:
                    34:b8:d0:0f:ab:94:77:50:a8:71:a7:c2:be:06:e4:
                    37:bc:89:56:59:c0:22:14:a6:67:10:9b:32:2c:55:
                    fd:de:f2:64:f6:ab:35:a4:93:f0:8e:53:62:a2:ea:
                    6b:4f:a8:06:e0:57:52:ad:36:9e:a3:92:a5:06:fc:
                    ec:ac:8d:f9:4d:94:cb:24:2e:00:b8:2d:a6:8a:ca:
                    06:e5:5f:b2:e1:b7:ea:e5:f7:08:f7:6b:60:80:d3:
                    5a:5c:13:69:6b:1e:d7:ca:cc:09:dd:8b:a1:4c:fb:
                    fe:6d:99:af:53:3d:ed:72:27:e5:40:ee:b1:27:f7:
                    42:09:2b:b4:08:db:8e:1e:36:06:fd:9d:50:a3:9c:
                    88:90:be:5e:e1:33:46:8d:a8:17:16:5e:07:e8:a9:
                    a0:a2:05:3d:07:d0:fe:02:04:12:f1:c6:1c:8b:ad:
                    09:fe:af:31:8e:5d:37:60:13:0a:40:10:d6:e1:84:
                    80:a4:e7:d7:39:c9:14:e4:b7:94:f5:cc:c9:96:ab:
                    f5:00:d4:67:c6:e7:5f:03:78:46:70:03:da:c8:75:
                    ba:27:25:e3:73:a8:c8:ee:dd:a0:8c:c3:31:f0:de:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.28.248.0/21
                  188.93.176.0/21
                  194.110.124.0/23
                  194.110.130.0/23
                IPv6:
                  2a00:1d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49318

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:fe:b6:5b:c8:89:f3:f1:28:bb:78:22:6f:28:41:89:c2:
         00:2f:50:73:09:26:5d:7c:0e:74:97:c2:aa:26:3f:d1:dd:ad:
         f0:bd:ca:38:29:02:30:0f:2f:2d:02:06:7b:d3:c3:e8:76:06:
         bf:0d:c0:a6:1b:c5:1c:52:8a:96:95:a5:f3:f8:43:8c:3f:44:
         04:40:b1:54:18:ed:6e:34:84:14:9a:dc:8d:46:a6:c2:67:14:
         8a:10:d4:07:ba:51:a5:ec:7d:3a:27:01:24:7b:75:e2:9f:a5:
         2d:4d:5c:af:b7:56:5b:e9:6d:0f:9a:36:67:96:36:e0:30:0b:
         fc:73:cb:45:6b:8a:d5:26:52:ab:cd:64:f7:bd:d3:6b:54:72:
         b2:ab:16:61:28:05:a1:f7:0c:0e:9a:a5:c7:02:5c:12:1e:71:
         9f:04:14:1b:64:d3:43:04:15:dd:5d:34:dd:67:d0:45:77:5e:
         a7:3b:96:85:c0:88:40:f5:d4:e8:3a:54:8e:3f:d0:1b:29:77:
         cf:61:c7:46:00:45:37:80:60:ce:be:c0:5e:db:b0:2c:68:1a:
         c3:0b:85:e9:26:a3:ee:da:da:c4:a7:42:3d:30:a8:cd:7e:5e:
         40:fd:af:1c:71:f6:56:70:cb:17:9d:5e:12:0f:5a:a1:f2:74:
         be:02:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:34:58 2024 by rpki-client on console-ams.rpki-client.org