Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
File:                     dpcDbZO0rGcPD_xakM6ral-LwpU.cer (raw, json)
Hash identifier:          pkEHmfZr5/32mDllrA/qlBs0TJlDpBG5pqFNGjtM6I0=
Subject key identifier:   76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348D4E824C358FFA9AA2582E1809320
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:39 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206577
                          IP: 77.75.226.0/24
                          IP: 2a0c:f200::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:d4:e8:24:c3:58:ff:a9:aa:25:82:e1:80:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:be:c7:b6:cd:4d:94:ac:5b:64:42:26:e6:
                    a8:22:30:46:1d:bf:f9:46:d8:74:2c:26:1a:29:ba:
                    0a:97:c0:02:07:be:e9:25:6a:11:37:e4:59:74:f2:
                    02:7f:d8:02:d3:86:dc:fc:71:72:39:96:02:1b:f3:
                    e0:8e:fa:78:91:cc:eb:b6:e0:e2:2e:a3:fa:4f:c3:
                    4e:bd:25:ce:94:56:48:e3:81:e2:61:13:3e:72:3a:
                    47:dd:7d:5b:94:2a:29:ee:ec:5c:86:bd:2f:c0:36:
                    8d:49:7e:ff:ce:b2:bc:48:04:ab:34:29:90:bd:68:
                    d9:a6:6f:2e:ed:be:2f:f4:41:df:85:1c:d3:d2:d2:
                    9f:ee:90:af:52:14:46:a5:1e:0e:34:b3:a0:32:80:
                    1f:e3:bf:83:49:80:92:e2:8d:f1:a8:16:b3:df:66:
                    e7:7d:69:1a:3a:14:01:79:35:ff:f7:7d:1c:c7:ea:
                    e4:a7:fa:ef:fe:0c:d4:91:7c:59:58:a0:55:28:e4:
                    d2:af:60:74:36:94:f6:04:82:9b:e1:6b:be:83:ee:
                    e4:3a:49:1a:9b:25:89:0c:53:b7:0c:9f:3a:b9:8f:
                    0d:28:9b:68:82:8c:c9:be:40:3b:f3:67:8f:1d:1d:
                    8e:d1:c9:f5:60:f2:19:98:90:99:23:42:ba:95:2c:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.226.0/24
                IPv6:
                  2a0c:f200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206577

    Signature Algorithm: sha256WithRSAEncryption
         34:2e:95:3e:7f:1c:a2:66:1e:82:d3:4e:bc:0d:74:15:c1:6d:
         3d:d6:02:31:25:85:73:61:fb:55:ff:0d:71:e8:96:bc:0e:5c:
         40:90:d7:4a:da:d7:35:6d:a6:10:3e:0a:ce:4a:be:ec:22:39:
         b1:e4:e3:51:84:0a:a4:e0:16:5a:f9:01:b5:00:6e:b5:8d:b4:
         07:97:3a:b2:37:0d:78:ae:e9:9d:71:ed:5e:4d:f4:d0:2b:b1:
         4c:e1:0b:8d:ca:02:53:cc:7a:b0:ea:eb:f4:3c:7a:0e:18:2f:
         1c:6f:a9:d2:17:6d:32:3f:79:c3:84:a2:e1:da:98:6a:07:80:
         f8:93:8a:e4:f3:05:00:18:1b:01:af:de:06:fa:06:f0:c9:20:
         ba:6f:f8:96:55:bb:8f:36:b5:ba:ee:00:aa:86:8a:b5:9e:90:
         69:2e:fe:b3:f5:d1:ce:6c:8a:f9:d1:82:b6:7a:50:bb:f7:63:
         52:fe:2a:72:32:0f:c0:8b:01:fe:85:4c:48:a1:b3:9e:cf:d1:
         c2:58:eb:9d:d9:6d:22:0f:18:89:ee:b0:98:43:33:8f:10:67:
         0f:5e:16:34:59:f9:f1:4e:ca:13:c3:34:64:95:eb:be:b7:4f:
         9a:f8:32:82:3e:b6:12:83:54:4b:5a:b0:dd:85:83:72:67:8c:
         a7:0e:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:43:50 2024 by rpki-client on console-fra.rpki-client.org