Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
File:                     coCW6KzXbpqhfz62eAQG49pWPtI.cer (raw, json)
Hash identifier:          zamfb7RaBObOm3tCupT30c1fNEE2O0pVN1I+NYqJWjE=
Subject key identifier:   72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348E28B741BBCBA4887EA88FAEC9571
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:42 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202313

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:e2:8b:74:1b:bc:ba:48:87:ea:88:fa:ec:95:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:54:1f:ce:62:a8:2a:79:be:be:05:30:fb:
                    cd:f4:f6:7c:eb:22:fe:a7:d0:f5:d5:bf:65:1b:8e:
                    23:86:e5:25:c0:61:b8:11:36:a8:a6:d7:e4:c3:8e:
                    8e:2b:6b:d5:bc:60:d2:7d:5d:2b:d1:91:bd:d7:3b:
                    36:fd:8d:55:90:a0:92:da:02:d6:f1:8b:a7:82:c2:
                    1a:2e:4a:f7:07:74:0e:e0:e6:83:81:cd:c8:3a:b4:
                    22:a5:ac:33:39:45:88:2e:fe:cc:84:74:80:cf:41:
                    28:a5:ea:f6:a3:e0:99:b9:e3:72:87:6e:1c:4b:dc:
                    8a:27:94:05:10:30:bf:7c:67:c2:d5:5d:30:0c:5c:
                    c9:03:42:24:0c:58:04:82:8f:a5:16:a8:40:5f:9b:
                    6a:c0:98:fe:72:32:05:27:22:3b:a6:be:37:ff:8f:
                    0d:fb:ca:4f:25:50:00:34:85:4f:67:df:14:32:fc:
                    e3:7d:52:2c:96:8b:cd:be:9e:f7:6e:d1:76:75:0a:
                    2e:f3:69:15:44:24:12:aa:4b:28:15:d1:1c:4d:02:
                    46:3f:66:52:87:48:6d:c5:e8:e0:e3:28:0f:a5:74:
                    61:37:26:2b:2a:dc:ec:35:15:fc:76:75:fd:75:64:
                    bd:9b:66:29:63:1e:cd:18:f3:03:ec:ff:5e:dd:71:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202313

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:b1:fe:dc:55:ee:a7:34:43:ed:3f:ad:8f:00:9f:33:99:
         de:ba:aa:02:ba:ea:1f:ef:2c:e0:b5:b3:dc:4f:d0:0a:bd:61:
         43:5d:3f:d1:60:71:9a:8e:c3:9d:d7:3a:00:fa:70:bd:d6:19:
         89:b8:20:2b:ba:5d:a4:37:d7:0b:05:41:15:3e:27:4f:58:cb:
         ad:5e:61:34:30:7c:8c:a7:0f:4e:fd:80:a3:b6:fd:07:83:83:
         3f:51:6d:7d:c0:c4:30:e6:bc:78:fc:4f:8e:6d:d3:ba:4e:fa:
         ce:6d:49:ba:a6:d4:54:f4:3c:f5:eb:82:d2:a8:b4:e0:9e:97:
         43:ed:f8:89:81:c9:f9:56:e1:7c:c7:d7:dc:0f:47:89:4c:73:
         9b:aa:b3:f6:7a:a0:8b:05:01:db:88:6e:b4:f7:3c:be:22:cd:
         31:d0:11:29:12:ba:93:4c:32:35:c2:7a:12:b7:05:d6:28:2e:
         7c:59:4e:9d:5b:89:68:02:fa:ac:be:1f:61:74:31:f2:35:7a:
         ce:f1:7f:19:a0:c0:16:3c:53:0b:cb:b7:ba:1a:9a:04:b5:ad:
         e4:a0:fb:d4:85:0e:4d:9b:7a:99:37:de:ca:20:14:27:fd:27:
         73:7d:ab:25:91:d2:21:0b:62:27:2b:ff:86:ef:b4:7d:21:ed:
         59:1f:24:64
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzDSOKLdBu8ukiH6oj67JVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjgwOTZlOGFjZDc2ZTlhYTE3ZjNlYjY3ODA0MDZlM2RhNTYzZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYlUH85iqCp5vr4FMPvN9PZ86yL+
p9D11b9lG44jhuUlwGG4ETaoptfkw46OK2vVvGDSfV0r0ZG91zs2/Y1VkKCS2gLW
8YungsIaLkr3B3QO4OaDgc3IOrQipawzOUWILv7MhHSAz0Eoper2o+CZueNyh24c
S9yKJ5QFEDC/fGfC1V0wDFzJA0IkDFgEgo+lFqhAX5tqwJj+cjIFJyI7pr43/48N
+8pPJVAANIVPZ98UMvzjfVIslovNvp73btF2dQou82kVRCQSqksoFdEcTQJGP2ZS
h0htxejg4ygPpXRhNyYrKtzsNRX8dnX9dWS9m2YpYx7NGPMD7P9e3XGGEQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHKAluis126aoX8+tngEBuPaVj7SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2JmMTQ0
Yi1hYWI1LTQwN2UtOTA0Zi1jMTczNGQ1MGNiM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvYmYxNDRi
LWFhYjUtNDA3ZS05MDRmLWMxNzM0ZDUwY2IzYi8xL2NvQ1c2S3pYYnBxaGZ6NjJl
QVFHNDlwV1B0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMWSTANBgkqhkiG9w0BAQsFAAOCAQEADXmx/txV7qc0
Q+0/rY8AnzOZ3rqqArrqH+8s4LWz3E/QCr1hQ10/0WBxmo7Dndc6APpwvdYZibgg
K7pdpDfXCwVBFT4nT1jLrV5hNDB8jKcPTv2Ao7b9B4ODP1FtfcDEMOa8ePxPjm3T
uk76zm1JuqbUVPQ89euC0qi04J6XQ+34iYHJ+VbhfMfX3A9HiUxzm6qz9nqgiwUB
24hutPc8viLNMdARKRK6k0wyNcJ6ErcF1igufFlOnVuJaAL6rL4fYXQx8jV6zvF/
GaDAFjxTC8u3uhqaBLWt5KD71IUOTZt6mTfeyiAUJ/0nc32rJZHSIQtiJyv/hu+0
fSHtWR8kZA==
-----END CERTIFICATE-----
Generated at Fri May 3 10:37:14 2024 by rpki-client on console-fra.rpki-client.org