Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.cer (raw, json)
Hash identifier:          tW06E0su4cdxhhE5Spvd3ey3B6jMS7OgaaLEPNvu+2c=
Subject key identifier:   55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190B18BDFBF145F48B090C6260F9A7D6898
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 14 Jul 2024 14:00:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 51098
                          IP: 194.116.136.0/23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b1:8b:df:bf:14:5f:48:b0:90:c6:26:0f:9a:7d:68:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 14 14:00:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:34:4f:23:34:8a:c3:ba:2a:20:27:56:cb:
                    f5:0b:fe:2d:f4:f3:e4:da:84:1f:7a:a7:74:02:2d:
                    a2:80:9b:e0:14:b4:5b:52:38:fe:30:5f:bb:05:32:
                    99:59:1e:61:2a:f0:8f:c8:c3:27:54:75:9d:f2:1b:
                    5a:49:eb:14:5a:53:8a:ef:3e:21:d3:18:04:cf:3b:
                    44:88:28:c6:1a:50:5f:16:81:09:d8:1a:f0:81:fa:
                    97:6c:e9:12:b9:1a:3e:b5:e6:df:80:80:c4:3a:b1:
                    a3:9f:43:e0:86:b7:5b:4f:f8:b4:85:6d:c2:d9:14:
                    ea:e4:bb:cb:23:1d:90:3a:6f:70:33:41:0b:ef:24:
                    4a:e5:cc:53:e3:c2:37:d4:02:50:ed:2d:e1:80:bc:
                    24:01:f0:50:cb:32:03:d9:62:75:ec:3f:d3:4f:8b:
                    52:d3:82:15:b1:2c:5e:42:e3:80:81:6e:7f:ec:42:
                    fa:75:cd:2d:2d:4a:23:03:e1:1e:79:b0:09:74:3d:
                    8e:bd:7d:d3:45:ec:c9:1d:5c:12:f3:7a:36:a3:8a:
                    34:08:d7:e0:8a:60:a2:c2:c6:07:9f:c5:e0:f5:a9:
                    04:93:55:a2:ad:c4:54:46:73:d8:54:da:91:f8:bf:
                    0d:71:7f:a1:ba:c9:01:de:41:5b:b9:24:8e:df:d2:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.136.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51098

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:ed:e0:c9:45:50:97:41:1f:4f:4e:a8:cd:8e:38:8f:1b:
         21:f4:9e:4e:55:a8:76:3e:22:e0:fd:5d:c0:1a:4c:53:d9:f7:
         ee:a6:73:1e:64:ab:c6:38:70:c2:66:66:b0:46:d8:b7:05:5a:
         bb:28:b6:a4:2b:7d:1e:db:f0:cf:e6:c7:ac:a4:0b:9b:c6:63:
         c1:09:ff:08:c0:60:b2:5e:90:3e:ec:fb:50:f1:27:36:ee:dd:
         b0:50:30:41:65:eb:f1:0c:e5:1e:6a:c0:14:40:de:98:e0:2a:
         ef:64:ea:61:97:46:8a:50:21:01:7a:58:07:b9:b5:a8:a1:e7:
         ea:88:e6:1e:39:e5:5d:0c:da:e4:f0:98:53:07:7a:36:52:10:
         cf:e4:8d:20:d3:88:65:f9:9a:2b:b4:6e:7f:00:44:42:86:e3:
         cd:69:79:44:b5:99:d0:c7:50:1d:39:1b:c5:da:c2:58:ad:32:
         9a:bf:bb:61:ce:75:c6:3a:c8:e9:b4:2b:fb:73:97:d8:26:22:
         bb:eb:25:08:7b:86:91:ec:03:34:48:5a:5b:b1:1e:13:35:44:
         02:7a:fc:6c:24:9e:ac:b6:29:f6:ae:f0:99:e5:30:a1:00:e6:
         33:a6:84:59:5c:e5:1b:3b:76:5b:c0:19:3e:f0:08:02:10:ca:
         03:ae:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:02 2024 by rpki-client on console-ams.rpki-client.org