Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
File:                     dLTNPt9SHfjsChURESctP7kbmcM.cer (raw, json)
Hash identifier:          d5UuBQVCpVM61Ax3rlt9Rq0+b4DuNbp3e28yUjUgCsE=
Subject key identifier:   74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2B720690434C51ADA6E92CDE17DAA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:34:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209814
                          IP: 45.144.16.0/22
                          IP: 91.227.246.0/23
                          IP: 91.228.22.0/23
                          IP: 193.148.64.0/22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:72:06:90:43:4c:51:ad:a6:e9:2c:de:17:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:34:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:16:09:9b:11:1f:08:e8:7a:c5:58:8c:7a:
                    e5:1f:89:d7:e0:f7:44:1b:7a:b7:5e:a1:f6:9a:ff:
                    5d:76:f0:19:05:0f:6c:ee:55:35:f6:20:40:26:75:
                    80:e2:6f:04:77:a8:72:c2:32:fa:eb:5f:2d:98:76:
                    88:66:f9:9f:57:51:8d:eb:4b:5e:82:64:20:6e:d3:
                    8e:d1:0e:b5:7a:15:74:61:58:e9:54:14:c9:df:5a:
                    b4:3a:f2:2f:0d:68:2d:58:34:47:49:23:19:3b:10:
                    71:94:de:f8:3b:c8:14:10:f7:12:bf:73:52:3d:07:
                    a1:db:ae:64:26:1e:34:7e:60:2a:91:1a:8f:d8:ec:
                    b6:7b:04:21:74:da:c0:da:44:7e:c0:0a:5c:8e:a9:
                    ea:4b:8a:e6:84:40:ee:ad:fb:49:68:a5:ea:48:ef:
                    9f:61:51:be:0e:07:6a:6d:c3:a3:9a:16:9d:0b:c2:
                    33:e6:91:28:aa:0a:66:96:a4:8f:a1:83:ef:40:ef:
                    81:24:82:bb:47:b4:19:94:21:30:b8:3d:06:d3:5f:
                    7d:3f:71:8c:9e:25:6e:b1:f4:6c:d5:06:ae:9a:3e:
                    8b:50:fa:45:04:7a:0f:47:7f:92:0e:da:17:79:87:
                    c1:49:97:9d:5d:cf:10:c9:38:26:dd:ad:78:e4:cf:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.16.0/22
                  91.227.246.0/23
                  91.228.22.0/23
                  193.148.64.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209814

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:7b:33:8b:1c:d1:76:bc:a8:8c:84:8d:f2:1f:fa:00:30:
         69:a6:31:0f:a5:fa:02:23:38:20:8e:eb:24:b5:a2:c6:75:7b:
         51:0f:5c:91:58:cc:7d:9e:87:a6:fa:ce:52:fe:5f:7c:93:ad:
         5e:c7:e4:21:56:7c:74:0c:89:c1:4d:27:44:6f:86:a9:7f:28:
         4c:82:d5:d5:14:b8:5f:36:e8:18:ed:9b:d7:1d:25:70:9d:82:
         78:e6:6b:a1:5c:90:63:c9:dc:a5:34:2f:14:e4:6b:b2:89:f8:
         5b:b9:b7:50:76:b8:7f:13:ce:9d:45:11:94:d9:f3:2f:3c:3b:
         0a:9d:67:fb:b5:ae:98:4f:4f:c0:b1:c0:bf:5d:75:fa:05:73:
         0b:a5:be:98:c6:d4:df:d2:10:a4:9f:55:41:b9:bf:ee:78:bd:
         0a:83:8c:b5:96:b1:d7:d8:6b:3e:5b:39:9f:38:b5:73:2a:4d:
         a3:0e:d6:59:9a:60:12:44:83:70:a7:31:8b:31:2c:de:28:2a:
         c6:48:45:15:b8:bc:38:90:28:a2:e0:26:9f:da:b1:e8:63:b8:
         bb:79:40:72:6a:d4:01:ac:a6:ec:76:0a:f8:f8:d7:fc:ae:c4:
         f1:97:0e:a8:79:d7:0a:2e:95:d0:f4:35:41:aa:16:1b:e4:9b:
         77:d7:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:42:09 2024 by rpki-client on console-fra.rpki-client.org