Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
File:                     Vl_xMRJL3SahzQpsx_loVNgwNg4.cer (raw, json)
Hash identifier:          fTLqAzozXA/Ndui7vxd3vciK//itSAyDLl215LdhpVs=
Subject key identifier:   56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC86EEDEC423B25B163D34FA358AC6C95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:29:22 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 24689
                          IP: 91.103.72.0/21
                          IP: 178.252.192.0/18
                          IP: 185.167.224.0/22
                          IP: 2a02:1350::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6e:ed:ec:42:3b:25:b1:63:d3:4f:a3:58:ac:6c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:11:e6:fb:b9:79:63:c1:14:da:3d:98:5d:
                    81:95:e1:6c:d5:89:6d:eb:bb:06:6e:08:56:2c:5d:
                    c5:dd:7d:32:e2:51:1f:fd:32:8b:8b:ea:8a:be:71:
                    40:b6:65:a0:eb:26:eb:9c:de:5e:16:7d:0b:fe:39:
                    05:cb:bd:54:74:94:cc:e7:cf:60:3f:04:49:44:ee:
                    fb:a2:01:9b:76:57:f4:aa:d8:9b:3e:2f:b5:9d:02:
                    67:50:bd:a2:3a:54:8b:87:dd:bb:4b:c2:7f:b6:20:
                    56:10:3d:e8:f7:7b:55:d8:67:c2:b7:b0:a0:e9:ca:
                    ac:0b:40:25:47:b8:e1:3d:79:91:b6:80:86:4c:77:
                    18:78:62:1e:ba:48:5d:dd:af:14:c3:b8:06:9c:e3:
                    8c:5d:39:aa:7a:a5:61:2c:17:5a:db:61:c4:c6:4e:
                    1d:7f:25:ab:3d:1d:0a:cd:92:3b:4a:00:b2:ff:c4:
                    c2:7d:de:de:cc:47:5f:76:d1:3b:3b:8a:4a:ea:03:
                    43:83:a0:81:1b:98:4e:6c:dc:26:56:80:77:eb:73:
                    9a:bd:6e:e6:3d:e5:bd:70:de:de:0c:49:35:42:31:
                    51:31:1e:85:12:4e:3d:aa:c2:bd:95:a5:64:15:a0:
                    16:47:86:6d:35:34:b1:5b:fc:26:40:e4:83:43:5f:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.72.0/21
                  178.252.192.0/18
                  185.167.224.0/22
                IPv6:
                  2a02:1350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24689

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:36:95:5f:f8:0f:03:42:6d:e5:09:e5:62:62:10:0b:c8:
         1c:bb:91:ec:72:79:76:d6:f8:26:76:18:43:f1:dc:6f:e7:1a:
         a2:30:88:0a:56:e2:6d:67:c7:00:17:7c:18:0c:a1:43:cb:cf:
         5b:9e:52:30:54:2d:f3:b4:19:c5:0e:b6:6d:7e:e9:8d:db:06:
         26:57:92:e6:ea:b7:0d:10:39:4a:db:96:84:57:97:b1:06:be:
         a9:67:a5:56:cb:c9:72:35:ff:d9:8c:a7:41:93:a8:35:3f:68:
         16:5d:2d:a5:95:cf:c7:a3:73:ed:fb:90:94:1e:cf:dc:a5:53:
         80:52:7e:11:c2:b6:1d:87:5c:c1:c0:38:7e:73:c3:0c:df:f5:
         2e:b1:0e:8e:24:ee:58:d9:26:4f:9a:9a:8b:f1:8e:7b:7f:c9:
         42:09:c3:0a:96:2f:e8:da:ce:9b:43:14:cc:5a:4d:f3:6f:eb:
         e0:20:3a:e8:65:d3:5a:ba:e6:4a:d3:9b:01:2f:79:e1:b3:f7:
         18:69:61:67:df:84:93:4b:79:c1:8b:af:34:87:cd:f3:16:3b:
         5d:d4:dc:e6:2f:9a:75:c6:7a:82:78:50:cd:2f:82:87:44:83:
         02:01:8d:3a:94:83:3e:72:22:43:1d:ef:3e:26:a7:70:f2:b2:
         ba:33:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:29:54 2024 by rpki-client on console-ams.rpki-client.org