Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VqkhMpB3ooM8dwe8trgBZGXgwVY.cer
File:                     VqkhMpB3ooM8dwe8trgBZGXgwVY.cer (raw, json)
Hash identifier:          5whSlvX0pT1dZFCAC8aSEvSEfRzHQtV5QJRb4r5bZ0I=
Subject key identifier:   56:A9:21:32:90:77:A2:83:3C:77:07:BC:B6:B8:01:64:65:E0:C1:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E411AAB73F0DE8E039DBAF2C8BF3FA5AD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.netiface.net/repo/Pfcloud/1/56A921329077A2833C7707BCB6B8016465E0C156.mft
caRepository:             rsync://rpki.netiface.net/repo/Pfcloud/1/
Notify URL:               https://rpki.netiface.net/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 07:54:10 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 51396
                          AS: 215310

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:41:1a:ab:73:f0:de:8e:03:9d:ba:f2:c8:bf:3f:a5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 15 07:54:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56a921329077a2833c7707bcb6b8016465e0c156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:d2:6f:56:70:ba:62:3a:37:2c:69:8c:c7:
                    8b:94:9f:5b:f1:72:19:d1:de:22:33:35:c2:a3:9e:
                    b7:ab:3c:7a:85:90:4f:1a:ce:c0:41:92:21:fe:42:
                    aa:90:9f:30:66:34:84:09:65:5e:8a:f9:72:af:dc:
                    54:6f:f6:1c:05:0d:3c:4a:93:f8:4b:27:ac:cb:e4:
                    56:e6:e9:05:57:21:b1:d5:ee:17:ac:2e:ab:c6:65:
                    0b:54:a6:13:2e:d5:e1:ee:b4:4c:24:05:72:65:5f:
                    f4:b7:50:ee:ec:87:a7:d1:28:6c:47:02:7e:e2:da:
                    46:87:0c:f8:49:6c:85:7e:8d:9f:f8:90:7b:83:ca:
                    67:30:f3:30:a9:39:56:97:13:95:89:67:6c:c0:e5:
                    7e:e0:a0:e9:1a:9c:31:99:d8:81:e3:75:ef:16:c7:
                    dc:da:12:01:af:b6:f3:08:52:a7:ae:b6:f0:81:aa:
                    12:e9:8b:4a:b0:c3:aa:94:b1:6b:bb:a5:de:76:c2:
                    10:14:bf:e7:01:53:3f:1c:23:ef:01:03:20:42:4b:
                    eb:96:37:36:ee:4a:3f:e9:c2:6c:08:50:1f:7a:23:
                    bd:eb:24:b2:74:ce:f7:c4:91:cd:b2:f2:8e:50:21:
                    b0:75:9e:c7:34:67:47:52:b8:25:92:4e:d4:29:e4:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:21:32:90:77:A2:83:3C:77:07:BC:B6:B8:01:64:65:E0:C1:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.netiface.net/repo/Pfcloud/1/
                RPKI Manifest - URI:rsync://rpki.netiface.net/repo/Pfcloud/1/56A921329077A2833C7707BCB6B8016465E0C156.mft
                RPKI Notify - URI:https://rpki.netiface.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51396
                  215310

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:88:6b:d5:bc:4f:25:34:96:04:2d:1b:58:e9:29:d9:3b:
         db:16:4c:07:8f:df:f7:46:eb:eb:7b:39:d8:8e:76:7b:a6:d1:
         61:b2:42:93:ed:ef:87:22:a8:34:15:3f:53:fe:62:fd:c1:89:
         28:2f:e2:fc:85:25:67:7d:38:27:13:08:d5:41:18:c0:8b:f4:
         1d:fa:56:b2:8c:79:8a:02:fb:4d:e2:5a:96:18:c7:9b:4a:46:
         06:5f:06:e2:59:3c:42:3c:cf:84:91:df:c2:80:9b:f8:f6:cf:
         a4:a7:ff:7b:bc:45:6e:6a:e4:6a:74:0b:bf:15:eb:62:ac:a6:
         3b:93:f5:d2:60:19:8f:a5:8e:41:91:f4:25:c8:0b:c1:df:af:
         76:54:b6:33:c9:ad:f0:05:72:b4:37:b8:c3:07:fa:46:02:8d:
         7a:72:8b:12:9e:95:63:02:f1:43:2c:78:0b:9e:84:ea:4c:a0:
         7e:50:64:00:d0:21:07:cb:03:91:42:10:43:ea:1b:5f:5c:fb:
         33:79:19:4b:09:02:25:a5:0b:7b:a5:53:92:0a:04:be:6c:62:
         2c:8a:5c:3a:79:2a:a5:f5:cb:b8:d2:52:76:07:ff:25:a6:48:
         04:7b:31:87:64:26:9b:2b:0d:9c:b0:4a:9a:42:9c:08:46:23:
         a3:f5:9f:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 3 10:18:52 2024 by rpki-client on console-fra.rpki-client.org