Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
File:                     WOBoeiTWo-QU15jZsvtsUlkcuyM.cer (raw, json)
Hash identifier:          yUdTTT8wI9PkQ6tEgj2TJxX/mR7pR2C6GSBgX5WIj7w=
Subject key identifier:   58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC87135EBD7E41722D58030A8535DD289
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:31:51 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208149
                          IP: 185.89.96.0/24
                          IP: 2a10:1200::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:71:35:eb:d7:e4:17:22:d5:80:30:a8:53:5d:d2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:31:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:92:2b:58:4d:72:3b:49:b6:31:73:49:1e:
                    24:47:25:f8:5b:45:a5:d1:8c:53:4a:10:18:6a:31:
                    14:dc:7a:9c:64:e4:a3:0f:93:bc:8b:2e:05:69:85:
                    ad:b7:4d:b2:69:89:c5:49:6e:01:23:96:23:4e:53:
                    06:e3:3d:98:f2:8e:b1:3c:6b:f4:31:b2:5c:a7:a8:
                    30:fa:db:a2:3c:d6:ff:e0:49:62:ab:1d:ec:21:e6:
                    f6:6e:2b:d9:5f:f0:41:dc:c9:cf:3a:20:2c:45:bd:
                    96:91:bb:58:77:ab:da:3e:bd:19:2a:28:2d:19:b3:
                    bd:34:3b:43:ce:ca:32:7a:6e:3b:f0:47:17:41:c7:
                    50:54:14:f0:40:92:4d:b8:c5:f7:72:9d:0b:12:55:
                    ab:33:2f:38:4a:8c:3f:d0:19:74:02:54:f9:f6:e1:
                    32:d0:f7:6e:f0:47:16:4c:b8:fe:dc:20:9f:41:3f:
                    20:a4:53:f3:ad:42:3e:4a:73:2d:da:7f:65:15:c6:
                    30:5c:f2:e5:46:6e:f5:e2:dd:fa:97:e1:3f:e1:3f:
                    90:8c:cc:ea:89:ec:6d:1f:be:d8:19:6a:3e:86:6a:
                    3a:bb:db:42:33:13:09:ad:bd:73:53:cd:85:a5:3d:
                    86:47:d4:49:16:aa:46:fe:3d:9a:50:9c:d3:94:ec:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.96.0/24
                IPv6:
                  2a10:1200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208149

    Signature Algorithm: sha256WithRSAEncryption
         6d:d1:5f:8d:88:48:d0:7a:c4:a3:57:05:7e:b1:78:73:8b:e3:
         8c:70:f5:da:f1:51:58:51:2f:27:80:17:b2:20:c0:94:28:ce:
         56:99:b4:da:cf:f0:bd:0a:d7:c5:e7:1a:ce:4d:05:e2:b2:c1:
         5b:82:d7:0b:07:0f:39:81:10:55:d1:d8:8c:9c:ca:53:62:db:
         95:2c:95:21:1c:40:ba:15:7a:d9:bb:ee:9e:e5:d9:3b:2a:10:
         cf:82:f1:11:1f:12:a2:d4:dd:ff:84:94:c5:14:9d:3d:41:ca:
         99:bd:2b:ed:49:2e:55:e5:fb:5d:b3:da:6b:0f:a8:8e:f7:98:
         3d:fb:3c:05:52:86:86:39:a6:15:6b:4d:15:7c:a5:52:cd:6e:
         d8:ef:66:84:48:eb:96:0d:9b:bb:37:65:0f:6b:6d:93:9c:c7:
         3e:06:b3:b8:64:d2:98:5f:fc:35:6f:74:4a:79:c5:b1:6c:ee:
         0a:a6:34:cb:76:6c:be:1b:29:8c:15:0e:87:47:78:6e:5a:44:
         ef:f4:4b:5c:d0:fa:c3:3b:fd:75:04:c8:34:df:c1:13:b2:3a:
         31:aa:80:30:5e:ac:c5:87:a2:c9:04:34:75:4c:6b:d2:c3:5f:
         0a:4d:ae:78:f5:f1:0b:1f:29:4c:da:c9:30:7b:1f:61:1d:bc:
         3c:95:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:27 2024 by rpki-client on console-ams.rpki-client.org