Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
File:                     dHnfUKMVAp6AqhlHr-EtselIYos.cer (raw, json)
Hash identifier:          1bI0zgXCGhfYozrnkX0Q+AX1CLz+5OtpNbdWRP6EMmA=
Subject key identifier:   74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC801406623254A905162EE29DBD9D322
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 30833
                          IP: 79.98.136.0/21
                          IP: 80.249.200.0/22
                          IP: 217.78.176.0/20
                          IP: 2a00:d98::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:40:66:23:25:4a:90:51:62:ee:29:db:d9:d3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7479df50a315029e80aa1947afe12db1e948628b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:c4:d9:ee:f2:bd:71:1d:71:d8:e7:96:ba:
                    f8:94:8d:f6:83:25:5c:02:a4:40:75:dc:7c:af:7d:
                    ac:93:be:c6:c0:00:c6:9d:1c:e0:39:c1:16:e1:16:
                    e5:e5:4d:30:7f:49:3b:ae:9e:62:3b:12:31:3e:97:
                    7a:8a:7a:d3:0e:e3:03:21:20:36:fb:f7:a9:03:06:
                    4e:a0:ae:58:53:99:36:48:10:aa:ed:47:ef:5c:af:
                    69:e6:9f:18:c4:64:d1:9f:09:fe:6c:0f:ba:7c:2f:
                    d4:7b:f8:0d:6f:d8:6a:ba:31:18:01:e9:cd:d8:89:
                    87:66:d1:9d:6e:88:3f:09:99:e6:94:ef:7f:db:66:
                    f0:8b:7c:cb:c8:10:1b:15:53:12:16:7d:e1:ef:94:
                    ef:6e:66:b4:79:9a:3e:96:90:b3:e9:2b:0e:f8:da:
                    b0:bd:45:26:86:86:67:f7:88:25:ae:57:82:55:57:
                    fb:1e:12:0e:87:ac:73:c1:ed:a9:eb:59:9d:40:40:
                    80:45:5e:d6:01:58:dd:be:bf:83:fc:02:95:a6:18:
                    90:98:de:15:a4:40:67:9d:06:cf:b1:f5:1b:82:e9:
                    2b:50:ee:fc:2b:8b:32:6e:b2:aa:06:c5:e8:07:ab:
                    14:a6:fb:1a:32:1e:3c:b8:01:1e:63:68:a5:4e:99:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.98.136.0/21
                  80.249.200.0/22
                  217.78.176.0/20
                IPv6:
                  2a00:d98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30833

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:10:17:7c:5c:23:19:39:b0:5c:b1:7f:0e:54:1d:f1:9e:
         98:54:15:a6:ec:4d:59:b1:89:ac:7b:a1:66:e1:f6:a0:3c:35:
         bb:52:d7:48:d1:14:0e:dc:ef:f8:19:86:91:d2:59:60:5a:d6:
         00:99:0b:d3:4e:84:96:56:7c:24:2c:a5:9c:8f:cd:bc:76:31:
         d8:5d:50:06:9d:36:9e:41:78:59:04:1c:d2:ab:ea:0e:b6:a3:
         c3:9c:be:95:f7:61:6c:f0:df:fd:8b:0b:56:48:a3:41:2d:1c:
         8e:bc:d7:73:64:79:8d:aa:ee:32:29:31:3a:7d:6d:f8:5f:f4:
         6d:07:a0:6e:d4:9d:14:98:ca:77:e6:56:41:e7:64:6f:22:de:
         f7:70:02:0e:41:b7:38:4f:27:e0:fd:a3:59:38:2a:c9:12:bb:
         a6:e0:4b:f7:33:7b:6f:18:16:15:f0:4b:63:c7:07:22:55:e0:
         b2:20:20:35:e0:1b:64:a2:c5:11:30:6e:17:9e:5b:2e:5c:ef:
         50:4a:be:8f:56:b9:d0:1a:72:0a:75:24:01:65:d5:e4:6d:19:
         bb:3d:80:7e:e7:3d:38:94:59:a6:61:e5:82:31:fc:99:df:47:
         18:2d:ec:72:30:37:98:eb:16:0e:3b:73:58:b5:37:64:b0:81:
         f6:27:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:39:58 2024 by rpki-client on console-fra.rpki-client.org