Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer (raw, json)
Hash identifier:          uEkBZK8P1AaIm14mgLHj1sk66Ut9PMR8y37PvMXmhus=
Subject key identifier:   77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC2BB2F4C43A5FBED753F2063DBB82
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:49 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60246
                          AS: 206680
                          AS: 211282
                          IP: 185.1.72.0/24
                          IP: 2001:7f8:a3::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:2b:b2:f4:c4:3a:5f:be:d7:53:f2:06:3d:bb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=77c7b457f9af042924142373ce090f7fa876257e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:f0:58:69:dc:89:15:dd:4a:f0:85:5d:5a:
                    49:76:28:d8:7b:e8:da:f4:df:2a:e5:b8:08:fc:b5:
                    19:24:00:b8:61:0a:53:42:8b:47:8f:4a:67:16:33:
                    3d:12:f3:b9:71:86:a2:86:81:6f:c5:a9:0e:e3:8f:
                    6c:c1:2f:f4:32:91:7a:1f:90:38:0d:6f:98:bf:fe:
                    85:01:4c:f0:b6:91:16:05:8a:1b:ef:46:8f:34:01:
                    1a:5a:66:de:cf:05:32:06:e9:1a:0c:88:6b:c2:49:
                    01:88:ba:b0:e7:89:c5:26:2a:76:cf:bb:ec:0c:78:
                    8d:48:18:29:bc:a7:58:85:37:c0:82:42:62:83:d6:
                    de:4f:04:24:f9:20:10:f0:7b:a8:81:57:6f:57:3e:
                    ba:f3:6a:d2:cc:09:b3:cd:14:ca:0f:55:4a:fa:3e:
                    7e:78:d5:2f:fd:46:1f:1b:bb:20:57:e1:9a:b1:1d:
                    a3:dd:d2:56:15:53:cf:a3:f6:50:3b:07:30:0e:b2:
                    0a:5e:1e:8c:d5:11:98:0b:74:2a:20:51:8e:3e:e5:
                    33:e8:4a:9a:0b:b1:96:c1:06:b1:d8:c6:c9:c4:58:
                    9c:dc:66:38:fa:5c:cc:32:24:c0:4a:83:03:9d:eb:
                    ce:a1:4e:e3:5d:47:1d:ca:0f:5f:22:e3:02:72:a4:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.72.0/24
                IPv6:
                  2001:7f8:a3::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60246
                  206680
                  211282

    Signature Algorithm: sha256WithRSAEncryption
         0c:d5:08:85:3f:1d:70:3c:fd:2a:ad:f1:5e:8b:9c:b1:a4:de:
         74:f8:0e:5d:1e:8f:89:6b:7d:4d:b0:b5:0f:9a:93:44:b5:98:
         42:71:be:bd:12:f0:7c:0e:a8:ae:12:20:d2:ab:2e:4f:61:4c:
         91:32:88:65:06:4c:15:e5:98:4f:99:38:00:76:2e:de:ca:5d:
         4e:f2:48:3a:1e:57:15:45:4c:79:1e:ab:44:4e:6b:46:3c:fd:
         2b:2a:ca:52:ca:d4:5a:d0:ce:18:38:fc:fe:60:6b:de:e0:3d:
         5b:a2:20:e5:57:12:77:b5:c1:f4:ca:3f:96:ce:fd:ff:4c:86:
         b2:fc:57:06:00:2e:db:e5:cb:1a:1e:19:57:e6:eb:0f:26:a9:
         c7:36:fc:a3:07:89:67:41:ac:74:ee:32:b6:e6:82:5c:99:fe:
         23:58:d2:30:cd:ef:48:8e:53:2d:6f:3b:69:61:ee:7f:8f:02:
         87:2e:1c:81:b1:22:f8:6e:69:a0:05:63:4b:e7:df:41:6f:e6:
         ca:a0:4c:60:2e:5a:64:5f:65:29:8a:8f:0e:da:a1:ca:a8:6c:
         2d:a5:d2:2c:12:bf:b1:7e:b9:7d:94:bb:07:fd:c0:a7:c8:4f:
         c6:ca:04:f4:3c:34:d3:79:2a:56:7f:75:e0:2c:1c:9d:51:0e:
         a5:29:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:23:41 2024 by rpki-client on console-ams.rpki-client.org