Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
File:                     eWnEvYdneAvsFhoq1hKic128q_0.cer (raw, json)
Hash identifier:          btN/boZofQmRRa8UH4BoE95DAgrv5ZSOCFxIo99CyWA=
Subject key identifier:   79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BCF8BA7B3917AE91C0C0676AC5285A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:34:14 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212926
                          IP: 88.135.70.0/24
                          IP: 2a07:e8c0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:f8:ba:7b:39:17:ae:91:c0:c0:67:6a:c5:28:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:34:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:d8:af:3a:e3:de:50:41:de:c5:0c:fd:90:
                    35:cb:ba:62:22:ad:bc:b9:33:ec:47:b8:ee:63:69:
                    b9:63:96:89:f3:0c:d9:3f:ff:a1:e1:26:14:f5:84:
                    62:e7:5d:41:b0:21:7e:ca:70:15:34:02:20:e2:68:
                    be:31:75:e5:41:f5:01:67:fd:bc:57:d1:fa:f4:49:
                    66:d5:81:30:e8:49:a7:2e:a4:1d:4b:3e:42:73:f1:
                    47:86:71:91:60:4e:fe:a9:52:84:30:ae:8e:e7:be:
                    fe:c8:48:11:c9:8a:f4:d6:ff:04:59:e8:5f:e7:ed:
                    ad:0a:e4:85:84:86:f2:e3:35:cf:e6:91:62:4d:fd:
                    cd:e7:0f:53:f5:f2:9c:c7:7c:69:8c:91:e1:9d:bb:
                    00:2a:06:39:11:1e:e0:fc:12:db:e5:f9:88:a4:81:
                    8e:2b:39:96:c8:b3:c8:fa:26:48:c4:d6:d4:ff:8f:
                    ec:5d:31:b4:f8:2c:e6:c1:80:c3:b1:52:d1:97:ed:
                    f9:b4:e1:84:3f:34:37:c2:1f:e7:aa:b2:ce:9b:48:
                    72:b3:dd:7b:d3:7d:c1:f8:72:b6:f2:65:a2:b2:df:
                    d8:0e:bf:62:8e:d4:fd:a4:ee:29:78:13:5a:1a:dd:
                    53:83:95:66:ac:5c:19:50:02:7a:86:90:3d:dd:9a:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.70.0/24
                IPv6:
                  2a07:e8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212926

    Signature Algorithm: sha256WithRSAEncryption
         35:78:9b:94:5f:03:39:39:7e:d0:97:d3:a2:e7:bd:f8:1e:41:
         c6:90:d1:56:79:bc:41:a8:03:65:42:b3:51:54:d7:bc:0e:03:
         49:8c:3b:36:f7:df:84:e7:00:9d:cc:ec:33:8b:90:01:10:38:
         e1:41:05:c8:25:d6:22:85:02:d7:fa:aa:85:af:93:73:2c:94:
         6c:5a:92:81:49:b3:12:2b:b2:e0:1d:f0:6e:90:5d:cd:5d:e3:
         75:59:2d:11:0e:6d:b6:53:22:0e:7c:8c:b7:39:0e:f2:b4:99:
         65:19:15:84:9e:b7:b0:ba:e3:86:20:2a:d2:c1:6f:19:63:1c:
         99:05:e6:4e:70:27:7f:f1:33:31:b7:19:35:52:86:ca:01:d4:
         79:01:e2:75:71:c2:2b:30:02:be:9f:2f:d1:34:be:b3:d2:de:
         7e:22:d9:76:c2:a0:e6:45:73:8b:61:3b:08:dd:62:e6:56:8a:
         94:61:28:d1:1d:6a:f4:c0:52:11:98:38:90:f5:c0:29:0a:cd:
         7e:f7:d3:46:b1:79:63:7f:ee:4d:1d:ab:27:9d:3d:ab:cf:4b:
         9f:9d:29:67:31:91:82:61:e2:8b:83:17:a8:b6:51:ad:9d:e7:
         5e:2b:0f:a1:2b:82:8f:73:52:ea:75:08:f1:ca:bb:1d:b7:ab:
         68:cd:a7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:04:02 2024 by rpki-client on console-fra.rpki-client.org