Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
File:                     eANVjqblFls4dgl691vx6SoULPI.cer (raw, json)
Hash identifier:          cmFy9F1/DL8m3lOpyoKsBLfdNiaQvqw1DtRBSL+vpGg=
Subject key identifier:   78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018EE1FFAEA4D7BFE3F54103ED7C95CFBA0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 15 Apr 2024 13:43:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 78.24.200.0/24
                          IP: 2a06:1300::/29
                          IP: 2a09:a500::/29
                          IP: 2a0a:c0c0::/29
                          IP: 2a0d:cdc0::/29
                          IP: 2a0e:eec0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e1:ff:ae:a4:d7:bf:e3:f5:41:03:ed:7c:95:cf:ba:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 15 13:43:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:36:4c:a0:13:76:18:97:8c:e4:1a:00:da:
                    94:13:02:92:f7:4d:29:64:52:ea:74:c2:bb:22:8d:
                    90:c4:ef:49:65:ec:5a:54:f6:75:6d:ef:bd:8f:2e:
                    1e:48:27:9a:81:e0:b2:b5:cb:f3:20:23:93:f6:e3:
                    33:8e:1d:06:a5:5b:0d:87:6a:02:64:23:6e:2e:20:
                    ec:fa:33:50:e9:c7:fb:fa:d0:3f:58:14:6d:fa:03:
                    64:83:36:ee:5d:49:6a:ad:0c:bf:d8:cc:be:ef:18:
                    19:01:db:3c:b9:a5:56:c0:cd:49:98:df:1c:06:98:
                    c2:b4:1b:aa:bc:ed:c0:c8:a1:3b:75:a0:19:f4:f5:
                    2b:27:6b:4e:9b:ad:82:ef:76:11:29:7f:29:59:94:
                    ae:b2:30:7d:08:95:b2:9d:30:90:16:a6:b9:84:cf:
                    6e:57:4c:d3:37:5c:bc:2b:87:98:03:d2:d8:2c:4e:
                    49:8a:76:02:ec:4c:3a:6c:1d:bd:6f:97:93:35:71:
                    0f:f7:a8:b8:4c:05:39:ac:90:e9:f7:0b:fa:aa:51:
                    33:61:3a:e0:f7:85:0d:7b:82:4b:32:af:5d:19:ce:
                    da:bd:1d:76:b5:c8:49:6e:30:a0:84:35:ed:27:ad:
                    57:71:44:9e:74:67:e7:b0:5e:f8:35:6b:49:88:3d:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.200.0/24
                IPv6:
                  2a06:1300::/29
                  2a09:a500::/29
                  2a0a:c0c0::/29
                  2a0d:cdc0::/29
                  2a0e:eec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:80:28:28:14:32:e0:de:4a:35:5d:03:e5:bb:74:49:c6:53:
         6f:ae:cd:c3:ee:68:b1:03:5b:14:73:d4:11:76:a8:4b:c9:d2:
         3f:9b:c2:fc:22:cf:78:b6:cc:73:fa:db:85:b2:35:81:e2:94:
         1d:88:77:34:0f:02:3b:2b:9a:65:82:57:eb:da:ec:a1:ca:38:
         0d:b6:24:7c:7f:87:4f:67:60:be:70:ed:ef:71:3e:a8:53:87:
         4a:36:74:64:7f:0b:a4:99:24:1f:07:78:91:60:34:ba:0b:99:
         d5:13:9f:21:c9:10:cf:c1:60:a7:2f:fb:de:dd:e8:46:3c:50:
         8d:31:b3:67:85:63:c6:c2:45:d7:f3:27:06:d7:42:3f:f8:fd:
         7d:40:a3:2c:9f:de:e2:be:b8:6f:64:d2:e0:9f:1d:17:19:aa:
         87:21:a4:c0:2e:ee:09:7b:8d:e1:af:ce:34:8c:66:6e:c3:32:
         08:41:2d:67:d6:99:00:e5:09:cc:5c:7b:c9:7c:1b:64:22:71:
         f6:cc:8b:73:3a:be:42:fa:e0:cd:bb:b5:18:bb:b1:3a:c5:82:
         46:46:17:ee:da:66:b6:47:0f:16:e3:45:f0:19:b1:42:cf:f7:
         c6:a1:ba:3f:ae:28:0e:99:60:12:fc:19:90:a6:a3:b7:cd:4a:
         fb:43:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:46:31 2024 by rpki-client on console-fra.rpki-client.org