Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
File:                     VvhoHvsvqdzUjHxPrz14w6GtLdE.cer (raw, json)
Hash identifier:          N4zhQtCCizJt3fusIAlpvwCfz9yQMX7LYA2Ip+Qe9J4=
Subject key identifier:   56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FBFE08ED8F91AF42931E1D83FAFB63B18
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 28 May 2024 15:45:15 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214894

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bf:e0:8e:d8:f9:1a:f4:29:31:e1:d8:3f:af:b6:3b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 28 15:45:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:ff:55:86:8b:14:51:9a:ca:eb:0e:56:44:
                    0e:80:8d:b5:a5:8a:5d:53:9f:c9:fe:25:d2:6a:23:
                    c1:de:85:24:9f:cf:7d:56:12:3e:83:6d:1c:ae:ec:
                    c6:7f:bf:65:b6:8b:74:9f:b4:25:fe:45:b1:f0:d2:
                    bf:a7:c3:a2:10:86:19:05:3e:23:45:0a:fd:b4:d3:
                    d5:0f:ec:0a:70:a7:83:68:96:ea:26:c0:27:f3:44:
                    38:ad:89:8f:c6:b9:1a:7e:ef:4a:26:3e:60:5a:93:
                    16:9e:e9:b1:c9:a6:83:34:00:96:1e:3b:26:8c:0c:
                    5d:50:ea:5a:b2:ad:53:64:71:ab:3a:f3:ec:35:66:
                    9b:77:dc:53:17:16:bc:81:8f:cf:64:14:15:da:91:
                    4e:6c:03:6f:cf:53:37:35:c8:8f:f6:3f:3b:1d:3b:
                    5e:17:30:39:76:bd:89:0f:42:3b:39:29:f2:ec:17:
                    6f:b5:81:1d:16:25:a1:07:5b:f9:fa:9b:32:77:78:
                    d9:1c:ab:31:96:d8:a5:55:1e:ea:d3:38:04:9a:24:
                    2b:a7:ba:00:0a:98:f4:92:bb:44:26:fb:13:a8:45:
                    16:14:3a:36:f2:fd:85:ec:36:da:ff:87:cf:fa:10:
                    f8:a5:57:e2:26:4f:97:b0:af:90:90:fd:db:1d:ba:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214894

    Signature Algorithm: sha256WithRSAEncryption
         60:23:6f:1c:ef:28:4b:a2:ed:81:3b:c4:99:4a:02:34:71:6c:
         6d:5d:e7:55:be:b2:2d:8d:13:c1:c3:6b:11:75:e3:7a:1e:e2:
         d2:96:56:01:1b:f2:9d:f3:53:ad:34:b6:53:b8:3c:ab:de:82:
         de:7f:21:a7:3d:6f:84:2c:6f:be:22:a9:99:c2:94:db:61:49:
         8e:0c:6f:a0:2f:de:1a:35:a9:f4:ed:5a:be:d1:3f:57:c7:20:
         60:67:e2:23:24:89:e4:46:36:ab:65:22:f6:f1:94:f1:dc:55:
         3e:8f:5c:10:22:40:a1:e0:4a:f6:07:aa:fc:40:8b:31:d9:6f:
         9b:84:32:2e:ec:f5:8c:f4:70:f3:bd:f9:3d:50:e6:73:d3:92:
         f4:e5:1d:ef:64:78:2a:9d:e2:58:b4:87:5c:a4:fb:37:22:fa:
         be:53:be:4a:70:14:61:93:da:e4:e2:7a:8a:15:37:09:80:83:
         9f:3f:4d:e6:82:45:04:6c:ca:16:30:79:29:6d:20:25:d1:f0:
         4d:ef:ee:e8:aa:d8:84:30:cb:ed:6e:70:6a:6d:a4:f3:de:18:
         12:16:52:62:c0:3c:39:e7:ac:00:fa:9f:e4:42:34:05:e4:ef:
         aa:d0:97:be:0a:dd:3e:08:c2:56:7d:ff:33:d1:f0:87:38:c8:
         35:18:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:05 2024 by rpki-client on console-ams.rpki-client.org