Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
File:                     c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer (raw, json)
Hash identifier:          Nnv9ZNR/g61YFHS0YM8qdfmskLbYEXa+jxuZq2vYHCs=
Subject key identifier:   73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2A604C34A27407C4511C70A4F983F3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:33:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34442
                          IP: 46.232.192.0/21
                          IP: 77.246.16.0/20
                          IP: 80.77.240.0/20
                          IP: 195.8.116.0/24
                          IP: 2a00:1990::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:60:4c:34:a2:74:07:c4:51:1c:70:a4:f9:83:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:33:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=73e373fee780eeab2a90422d0ad514e084a8d611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:b0:9a:70:42:e4:86:91:dc:18:81:f1:00:
                    9b:76:32:a0:65:91:16:6c:7b:7c:a7:d8:de:5c:6a:
                    8b:fc:3c:0d:53:57:cd:29:00:0f:7a:37:91:dc:b1:
                    fa:20:03:21:fc:63:2a:2c:10:04:ec:64:6c:5c:2d:
                    2a:a3:24:3e:2d:0d:55:47:ef:69:32:7d:b8:cb:c5:
                    aa:8d:73:92:91:ab:be:cc:aa:81:1e:89:63:f7:cf:
                    97:26:21:a7:f1:a4:44:1e:47:19:25:7b:92:99:14:
                    c9:2d:4c:3a:41:f6:07:0d:31:69:7c:2f:5c:52:88:
                    5b:02:33:41:05:34:a1:b0:7b:1f:e1:6e:aa:0f:e4:
                    c9:1f:7e:60:ab:ac:7d:41:ec:5b:57:b7:0e:2b:bf:
                    1e:c6:8f:ae:c3:d5:cf:88:7c:25:5b:b9:fe:36:3f:
                    b9:f5:b2:c2:35:65:37:cb:b0:29:48:f5:fc:8b:6a:
                    a3:42:ac:10:a6:66:07:bc:a2:d0:5f:10:b3:7d:4f:
                    63:86:fe:ea:c2:14:b4:65:9e:4a:b0:d5:ae:e1:cf:
                    01:7f:54:5c:f9:4c:8c:b7:71:aa:4e:66:00:3d:6e:
                    ef:4a:d4:5c:c2:a9:d5:ac:fa:60:13:bb:3e:20:d6:
                    bc:94:6c:97:80:1b:09:b8:1a:ef:0e:cd:6f:e7:82:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.192.0/21
                  77.246.16.0/20
                  80.77.240.0/20
                  195.8.116.0/24
                IPv6:
                  2a00:1990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34442

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:53:57:24:cb:de:9e:18:11:11:b2:64:4e:39:b9:25:b5:
         c9:1c:bc:33:4e:52:5e:7a:f1:43:ec:60:21:8f:79:86:56:98:
         14:5b:78:83:7c:e8:15:79:83:e8:19:e4:9f:88:66:27:b1:52:
         3e:26:c9:58:61:6f:83:c4:27:b1:31:54:0b:5d:67:1f:fb:e1:
         d4:e8:1d:b9:50:86:4f:14:33:ad:0e:21:14:7a:4b:2c:00:0d:
         e0:e1:57:31:4f:e3:b3:13:6b:5a:61:40:ec:9c:19:f9:fc:fc:
         2d:07:29:80:8f:1a:a2:30:93:cc:9b:ec:f7:19:1c:5e:5a:fd:
         dc:21:e5:d0:30:f8:bb:82:78:5d:44:fa:73:17:9e:60:0c:20:
         cd:a4:4d:a4:b6:5f:15:20:a0:0d:19:e2:91:d9:77:7d:7c:b7:
         91:c8:11:42:9f:25:2d:c5:cd:c1:61:3d:e9:8d:8b:f9:85:5b:
         8c:05:b5:4d:90:6b:db:19:0c:7d:af:53:38:96:1a:dc:2a:d5:
         3c:65:c3:93:64:88:c8:1c:0f:c2:67:b6:1d:4e:5f:53:76:5a:
         6f:5b:69:3d:ea:7d:38:97:32:16:b1:0c:f5:c0:42:a2:7f:87:
         bf:53:9c:3e:e4:5f:8e:70:0b:23:ed:a9:45:16:2e:e5:66:5b:
         3c:58:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:44:30 2024 by rpki-client on console-ams.rpki-client.org