Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
File:                     _N6Mo-LOUrvM5TxKKSbTycQQwEs.cer (raw, json)
Hash identifier:          yM8gl8tgCW5DEVRxmGF0FspnzFSR20Ma9K4bg670JmY=
Subject key identifier:   FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4937BD92C73E15D2614CD3DC409090A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:49 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206782
                          IP: 185.176.148.0/22
                          IP: 2a0a:1980::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:7b:d9:2c:73:e1:5d:26:14:cd:3d:c4:09:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:57:ae:c4:81:c1:45:bd:4a:9e:fd:04:3c:
                    47:e3:f2:c0:4a:e3:33:65:87:e6:cc:27:45:04:c1:
                    35:d4:77:cf:b6:41:97:f0:61:03:47:8c:1e:e2:3a:
                    0f:e1:cb:5f:36:66:a9:1a:19:80:65:49:e8:5a:b0:
                    25:70:a2:06:3f:5c:26:06:2c:05:d6:77:e4:7c:73:
                    62:6a:3c:8c:fc:bf:4c:5c:1a:50:ec:05:6e:6e:d8:
                    2b:01:ee:b8:83:4a:57:dc:53:88:24:20:e5:46:1b:
                    ea:6a:47:08:2f:cf:8e:4e:b7:48:28:d8:12:29:bf:
                    79:84:10:41:84:f0:7a:17:a9:cb:87:c8:84:b8:88:
                    f6:06:f6:5b:2c:d4:55:a7:9e:61:a9:3c:61:7b:47:
                    ff:f7:b5:08:50:39:7b:04:3e:6d:1d:62:a7:4e:12:
                    d4:33:9e:aa:62:8f:de:4d:54:7d:3d:9d:73:a4:58:
                    1b:a8:ad:88:54:f6:57:63:8b:09:f5:4b:db:f1:bc:
                    b0:06:90:0f:bd:1b:97:63:a8:ae:52:53:d8:84:68:
                    95:c0:c7:cf:5b:09:4f:e6:0f:26:53:e6:e8:95:bf:
                    ba:8d:ff:99:03:cd:fd:fb:6a:e5:9d:83:08:a9:8c:
                    3b:85:f7:cf:64:5c:6c:29:3e:0c:67:67:da:5e:37:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.148.0/22
                IPv6:
                  2a0a:1980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206782

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:db:99:0d:f8:5a:5a:a0:7f:7d:f8:cc:87:b9:bb:fe:4c:
         a2:cc:9a:06:dc:ce:64:e3:5b:c4:80:06:10:a1:8b:e3:e2:e0:
         6a:cf:a0:bb:56:e6:d6:49:bd:7d:4a:39:90:6c:83:4c:35:4d:
         64:e6:da:ba:74:d3:2e:f7:20:fa:ec:c3:13:71:90:8b:86:34:
         74:23:90:1a:a2:d2:6a:9e:40:c2:af:3e:a7:c5:63:7e:fd:d6:
         95:b2:ff:59:0c:b3:e6:c6:30:1d:88:8e:39:71:0d:5b:e5:56:
         1f:10:29:ba:92:ba:21:3d:8d:b8:97:b0:d5:ff:75:4c:b5:86:
         1b:6e:3b:d7:13:3a:35:71:8a:15:15:6f:45:a0:e4:2c:3e:a4:
         cf:26:e4:16:a0:0c:75:87:de:8e:2f:be:2a:a3:49:6d:24:4e:
         5c:89:4a:bf:d7:5c:6a:6b:1b:6d:df:6d:b3:c4:ed:90:89:bd:
         4a:10:77:41:9d:0c:56:83:ef:34:54:4a:2c:2a:6e:6c:e6:22:
         93:ae:fe:ee:b0:a7:6f:31:3d:25:36:7e:e1:92:da:c8:23:30:
         16:c2:e9:ca:01:3a:a8:75:a5:c6:56:00:76:b8:a6:6b:45:04:
         c4:7c:30:6e:54:19:ec:77:d1:4f:7c:6a:fb:8e:c4:c0:ab:6b:
         6b:42:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:12:20 2024 by rpki-client on console-ams.rpki-client.org