Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wr5-CR2hOR8CTsDPfY428NI1d4o.cer
File:                     Wr5-CR2hOR8CTsDPfY428NI1d4o.cer (raw, json)
Hash identifier:          lS0ygU2v/Q3jfEPi/6zkq9ePBa+X9TzDW5vMjs7Jeww=
Subject key identifier:   5A:BE:7E:09:1D:A1:39:1F:02:4E:C0:CF:7D:8E:36:F0:D2:35:77:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FBDDC0F07438BED8C8FFA6D94DF974F6E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.uz/repo/pedjoeang-digital-networks/1/5ABE7E091DA1391F024EC0CF7D8E36F0D235778A.mft
caRepository:             rsync://rpki.uz/repo/pedjoeang-digital-networks/1/
Notify URL:               https://rpki.uz/rrdp/notification.xml
Certificate not before:   Tue 28 May 2024 06:21:06 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 50104
                          AS: 210537

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bd:dc:0f:07:43:8b:ed:8c:8f:fa:6d:94:df:97:4f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 28 06:21:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5abe7e091da1391f024ec0cf7d8e36f0d235778a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:40:bc:8d:8f:6a:35:9a:95:61:98:aa:62:
                    c4:fe:77:77:be:d0:77:36:aa:ff:1f:57:e2:59:7c:
                    a6:37:9e:43:a8:03:0c:b0:68:0c:d3:74:9d:03:76:
                    ed:c6:d9:84:76:61:8f:ec:4e:18:c9:ca:ae:e2:85:
                    db:81:e2:ae:15:7a:39:b7:a4:2f:f8:15:df:56:da:
                    31:e5:f5:eb:99:71:04:8c:52:bb:c7:26:0d:bc:95:
                    83:e3:48:1a:b5:4b:9c:ae:73:d3:08:b2:1c:3a:bb:
                    81:56:1b:11:b6:27:37:31:5f:97:8a:86:78:40:0d:
                    cd:75:37:54:56:e9:c2:32:e6:ce:25:56:45:a0:55:
                    fb:c3:38:ca:7d:7b:f3:d5:5f:ab:72:9e:a9:c3:73:
                    52:25:13:62:ff:f1:5d:a2:94:5a:5e:95:b8:39:cc:
                    d2:fa:12:92:b7:70:a9:64:f9:3d:40:ea:77:a5:f6:
                    4c:1b:11:f9:d6:9b:99:11:08:8e:d1:ca:41:7f:72:
                    b0:6e:ce:94:51:c2:ea:57:92:08:8d:ab:6c:26:22:
                    44:16:6e:47:a3:07:43:77:b2:d1:8c:b1:58:15:2a:
                    a5:42:cc:a7:0f:62:23:76:15:69:ea:7d:7c:3b:06:
                    30:ca:d2:98:73:ff:84:68:1a:8e:34:6d:c0:56:69:
                    1b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BE:7E:09:1D:A1:39:1F:02:4E:C0:CF:7D:8E:36:F0:D2:35:77:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.uz/repo/pedjoeang-digital-networks/1/
                RPKI Manifest - URI:rsync://rpki.uz/repo/pedjoeang-digital-networks/1/5ABE7E091DA1391F024EC0CF7D8E36F0D235778A.mft
                RPKI Notify - URI:https://rpki.uz/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50104
                  210537

    Signature Algorithm: sha256WithRSAEncryption
         55:06:e4:b7:8b:37:02:23:4a:aa:e9:03:dc:46:44:45:2b:df:
         fe:da:eb:ab:e4:1d:55:c5:9d:94:05:67:4a:f2:e5:38:b4:1b:
         65:34:4c:1b:45:a0:47:69:4d:26:76:2d:e3:b5:84:5d:12:c5:
         85:22:1a:0f:64:26:e2:c6:c4:30:86:bb:ab:45:77:21:68:fe:
         4e:a2:91:0d:97:5a:15:03:0f:30:92:38:db:e6:0a:79:c6:5d:
         72:d8:22:94:38:5e:27:ca:2d:f0:1f:2c:a1:14:bb:c6:e5:24:
         53:d1:43:40:ae:dc:cc:b9:99:01:28:43:17:a3:42:59:ae:75:
         34:d2:29:bf:84:90:09:6a:db:d5:1a:15:09:39:63:a5:ef:cc:
         1b:7c:75:ac:b8:51:24:8b:19:1d:7f:71:dd:13:2f:91:7d:c5:
         b2:07:83:f9:42:7e:b7:b6:fe:20:28:65:18:c2:c2:54:75:0e:
         cf:6c:4e:19:48:fb:7e:70:69:b2:a8:7f:08:19:af:ce:c4:c4:
         4c:f3:50:1b:bf:de:5d:4e:02:0e:91:3c:2a:e6:97:5b:ce:2a:
         13:63:62:e1:8d:e2:a9:d7:02:d6:51:62:ab:fc:3a:45:ff:45:
         33:0a:d6:ca:1b:d0:7f:fc:1b:fb:9f:b2:2c:56:48:95:12:ce:
         94:bf:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:21:38 2024 by rpki-client on console-ams.rpki-client.org