Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_pjv555h1dHHiOpVM5rBbHMeJqA.cer
File:                     _pjv555h1dHHiOpVM5rBbHMeJqA.cer (raw, json)
Hash identifier:          2qWFB/B/WGDWUowtAfr8GW9oFp/4VyHvpZyQ/GTbTkc=
Subject key identifier:   FE:98:EF:E7:9E:61:D5:D1:C7:88:EA:55:33:9A:C1:6C:73:1E:26:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DD3A812F1FA2A94539B26ABFC5FD98
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:30:59 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212634

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dd:3a:81:2f:1f:a2:a9:45:39:b2:6a:bf:c5:fd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:30:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fe98efe79e61d5d1c788ea55339ac16c731e26a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:a3:67:5a:13:d9:7e:07:fe:55:7c:70:30:
                    b2:da:0d:ed:f4:f7:60:8c:42:b2:f6:21:3e:bb:51:
                    09:68:01:a5:77:26:26:28:ab:24:26:c6:d6:ec:47:
                    2d:05:da:26:f6:d1:3d:b8:63:85:16:70:b9:34:3e:
                    9b:76:65:03:2a:d5:d3:28:f1:9a:6a:33:fe:53:47:
                    31:ac:31:b7:da:d1:de:fc:cf:d0:81:34:4f:17:61:
                    53:44:69:ec:05:04:33:d0:3a:ec:04:54:0f:5f:c2:
                    1b:d6:fc:6e:77:1c:e7:23:f1:01:f4:5a:06:fe:f8:
                    7d:f6:77:f7:4e:7c:d7:f6:e3:11:b6:97:51:04:b7:
                    45:ae:2b:da:a2:a6:97:2b:32:d2:d2:dc:9c:86:f7:
                    d9:fb:79:b5:f7:61:65:dc:b0:9b:24:cc:11:f5:42:
                    8a:04:28:53:89:b4:3c:ef:83:8d:ec:ba:3d:40:ce:
                    82:79:3f:5c:f1:47:79:7e:0a:f4:bb:6c:3f:6b:10:
                    fd:e8:af:54:58:4f:b0:89:9e:60:99:a7:77:b1:db:
                    a9:65:06:f1:15:e4:1c:b9:42:e1:fa:28:a2:2e:d4:
                    45:d6:d8:9c:f0:43:27:01:b5:eb:06:bd:87:e9:32:
                    2e:e5:46:97:47:a2:b9:1a:59:16:c8:21:a2:5d:95:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:98:EF:E7:9E:61:D5:D1:C7:88:EA:55:33:9A:C1:6C:73:1E:26:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212634

    Signature Algorithm: sha256WithRSAEncryption
         80:94:da:4d:6c:75:2c:71:70:fe:41:2d:09:1a:f3:05:f3:17:
         39:ae:70:d1:9c:20:94:2d:bb:c4:ef:0d:7b:da:76:fe:86:32:
         05:46:f9:13:9d:23:c7:ec:1c:e1:d3:11:9e:f2:0f:a7:5f:e3:
         5c:4b:a9:c1:3d:44:85:5b:58:7d:f4:bc:7c:30:63:18:24:80:
         6a:07:5e:e8:41:68:0b:e3:d7:43:99:57:53:3d:67:17:bf:42:
         27:63:11:5b:23:ec:de:99:93:e3:05:e8:a4:cb:a4:9f:10:32:
         13:56:ef:5f:54:d9:f3:bd:0b:49:bd:5b:36:c6:8e:42:79:95:
         bc:dc:a3:8a:bb:48:2e:de:dd:55:ea:d4:a5:e4:5a:5c:35:88:
         c7:7d:29:72:dc:29:41:cc:9d:4c:9a:c6:75:05:9e:03:8d:ad:
         07:49:df:1b:93:ce:0f:be:0d:ae:b2:37:dc:03:28:c4:2d:4a:
         58:bd:de:aa:f4:e2:49:02:95:7a:d3:83:0d:f9:d7:c4:74:07:
         ee:c9:ad:34:be:90:90:28:f8:38:c5:0c:e7:2e:ce:6c:fa:47:
         8d:ca:4a:dc:ae:10:07:bd:74:d2:64:63:1e:5f:a1:4f:23:05:
         b3:04:bf:6e:6f:b7:c9:cf:b9:29:24:55:f3:6d:bd:92:4d:96:
         67:e6:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:38:11 2024 by rpki-client on console-ams.rpki-client.org