Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
File:                     d44TTk_7X7E6woT-lIgnaCYVZjI.cer (raw, json)
Hash identifier:          6N4JjXkKqIEbfRrHyTGW9mp0x9T6bBlpLXkch8qIAxM=
Subject key identifier:   77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CEE0D566CE502BA8D4C0F556CBF30C629
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 09 Jan 2024 11:48:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.75.218.0/24
                          IP: 2a13:7e80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:0d:56:6c:e5:02:ba:8d:4c:0f:55:6c:bf:30:c6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  9 11:48:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=778e134e4ffb5fb13ac284fe9488276826156632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:f2:46:72:69:d4:cb:6b:2e:54:c5:cd:9d:
                    c1:02:4b:c4:ca:78:c4:4a:30:34:be:aa:d6:d6:b6:
                    95:5b:88:49:96:f5:df:eb:95:35:a7:67:c0:ca:cc:
                    a7:fb:e1:44:f1:fd:bc:b9:37:24:fc:0d:5d:1f:a6:
                    ec:bc:30:1e:02:ce:be:e0:a7:eb:c4:e2:c1:93:63:
                    c5:22:a9:81:ae:f6:3b:e9:c4:7a:38:06:fc:e5:2f:
                    c4:50:4f:f7:0f:13:3b:83:12:71:02:95:08:41:ae:
                    60:1b:bd:11:28:a2:ed:67:25:05:ff:35:9e:0c:bd:
                    5c:9f:fe:fa:00:33:c5:65:77:0f:44:38:95:38:5b:
                    ad:a4:41:be:b6:7d:4c:5d:67:29:6c:f1:7c:7b:dd:
                    07:9e:5d:01:73:cc:d5:24:64:90:8a:83:2d:ce:d1:
                    73:87:41:fd:e8:e8:88:67:84:18:f8:74:05:00:e0:
                    c3:88:89:72:bf:1d:77:5c:3a:4b:23:df:f2:66:ee:
                    c2:2d:43:b4:07:90:59:f9:a8:1f:d3:c9:69:ec:94:
                    ca:9a:d8:c3:96:f7:66:a8:89:75:99:27:b1:13:da:
                    14:64:12:af:20:e0:e9:48:11:f6:87:d9:18:f1:2a:
                    29:d3:a3:f7:d3:5a:43:9f:04:b3:3e:6b:c4:da:38:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.218.0/24
                IPv6:
                  2a13:7e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:37:58:d0:3b:8a:e3:2f:cb:63:25:9f:4c:40:d2:31:51:91:
         21:10:e5:5a:4d:69:18:0a:fc:d1:a5:3d:dc:0b:08:ba:67:79:
         62:b2:78:79:9d:18:b0:ab:6f:28:41:6f:26:d4:44:64:3f:38:
         63:f3:98:a8:26:d9:9a:42:b3:26:c5:bf:08:4c:50:5b:32:72:
         74:95:16:b6:4f:04:4a:86:2d:ba:44:8a:54:b9:f9:e1:1f:1f:
         49:5a:0d:83:aa:fa:55:9a:0e:cd:e6:c3:26:e6:cd:d6:cc:1d:
         75:57:4b:6f:d2:ec:74:35:dc:9c:26:22:38:f8:26:c0:c6:a2:
         ab:e4:31:93:c1:5e:4a:9a:14:52:c5:f3:d0:f0:89:61:10:a8:
         22:30:a7:ef:9d:28:97:bb:3d:8b:27:1f:91:f2:77:91:82:d8:
         ed:b3:98:c9:ba:3a:18:1d:ed:ec:7d:a7:43:19:9b:cd:42:a5:
         de:bf:68:0e:78:f7:da:0a:cc:d6:d4:e9:0e:90:34:6a:b8:80:
         cb:74:a1:10:76:38:e0:18:c3:ae:c3:ac:55:d6:60:86:fb:0b:
         60:46:d7:4f:c8:e0:eb:c4:84:1b:4c:74:a2:7c:ad:18:a9:1f:
         5a:eb:e8:42:af:2a:b4:a9:83:e9:b7:62:00:84:e8:ff:1d:ea:
         8c:92:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:16:16 2024 by rpki-client on console-ams.rpki-client.org