Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.cer (raw, json)
Hash identifier:          bmFilKTlGe8B/JO/lt+C9MrHtDHxq3YwMsN9zqm2FG8=
Subject key identifier:   59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01905D72561D22A1FA2D47CA7DBFD3F521D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Jun 2024 06:04:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 16236
                          IP: 194.56.231.0/24
                          IP: 194.104.188.0/22
                          IP: 2a00:ec20::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5d:72:56:1d:22:a1:fa:2d:47:ca:7d:bf:d3:f5:21:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 28 06:04:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:5a:fc:f6:be:e2:d6:f1:3a:84:42:4a:f9:
                    8f:ac:f2:b2:29:85:74:70:ec:f4:c0:37:1d:a7:96:
                    83:e0:b9:c7:1e:28:97:de:60:d7:2c:17:7d:a4:31:
                    25:ea:b2:91:b9:ea:31:d4:b5:5f:72:68:e1:0e:b1:
                    72:7c:7a:98:5c:b2:7f:13:7a:f8:f4:5c:2e:37:5d:
                    d4:ea:4a:17:23:93:89:c6:3c:59:c2:5c:59:c1:30:
                    5e:2c:76:78:9f:7c:25:65:17:a3:57:91:54:b5:70:
                    e1:81:b8:cf:39:4e:bf:3b:4d:0f:a7:7e:76:81:ed:
                    e4:68:87:b2:8f:74:9b:4b:96:32:dc:0f:73:ce:f4:
                    2d:a5:cc:bb:44:4a:ca:71:ea:04:45:3a:9d:4f:10:
                    c4:b8:86:ee:fa:30:28:52:4a:c7:9a:18:6b:3a:3c:
                    41:0e:76:99:84:f0:92:f8:3f:be:bb:a5:17:b6:bd:
                    37:4c:f9:8d:46:17:c0:4c:60:58:e4:8a:84:fb:26:
                    51:ba:d1:ac:5a:78:79:3d:c8:cb:05:59:de:95:7d:
                    16:19:17:da:41:91:b8:b4:17:b7:9e:ab:0a:b4:e8:
                    5b:8b:c7:1b:2a:1e:b0:ff:d5:cd:67:ea:0d:25:21:
                    50:eb:dc:4e:eb:d8:10:5b:fb:d7:d0:cb:6c:6d:23:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.231.0/24
                  194.104.188.0/22
                IPv6:
                  2a00:ec20::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16236

    Signature Algorithm: sha256WithRSAEncryption
         ae:ea:fa:61:99:3c:1e:f3:38:f2:ca:15:ae:e1:c0:56:40:5c:
         c8:72:e7:b2:b3:96:43:ba:4b:f6:f5:ae:08:5c:16:71:ff:29:
         4f:d3:e3:e3:b8:2e:11:a2:3d:f5:29:a7:b9:67:1e:a1:c5:3d:
         ca:69:2e:7a:c2:77:92:29:f3:7d:37:1b:87:cf:84:2e:49:86:
         c1:a7:fc:52:91:47:49:ae:70:31:6f:9f:38:5b:cb:e3:73:0c:
         4d:ae:ef:48:b4:89:5c:aa:d7:44:22:30:34:6a:bf:6f:e4:6e:
         8b:d0:79:f1:54:7e:f9:b7:89:9c:22:f6:26:46:83:ba:0b:04:
         77:63:4e:7e:13:84:2c:fc:b7:ac:0d:11:43:e9:58:b0:99:f2:
         74:30:be:0f:07:16:de:53:61:be:a6:03:7d:a0:ed:37:d4:bb:
         37:5d:bf:34:01:2e:29:b8:97:3e:a0:cf:1d:3f:0c:29:1e:a0:
         df:23:ab:f9:f7:3d:6d:2f:8e:8d:aa:59:e1:e4:1a:9a:f9:5f:
         14:dc:3a:12:93:76:fd:4b:0b:4c:d4:3f:42:a2:47:4a:7a:cf:
         3e:c6:75:38:29:b8:d5:85:ea:9f:b8:1a:c1:a0:90:99:c2:38:
         7e:b6:8a:aa:fa:88:0d:97:51:25:f8:58:53:74:1e:31:28:fe:
         80:53:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:21:32 2024 by rpki-client on console-ams.rpki-client.org