Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
File:                     eilzR6QNO99Xh8x1OsJALQgkv8s.cer (raw, json)
Hash identifier:          3U48Rl3PkrNIO45UAx9itcMi4ZjUo/cL9Bgwwxs3BUs=
Subject key identifier:   7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E67E229CC73EBCB7491CD481D3F06
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 50770
                          IP: 185.177.211.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:67:e2:29:cc:73:eb:cb:74:91:cd:48:1d:3f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:69:38:75:6e:e2:77:9f:0c:e2:f0:a5:0c:
                    a4:34:91:0e:e6:c3:fc:0e:74:c9:33:0e:0a:5e:cb:
                    fd:86:09:93:1e:2e:d7:fe:a2:72:da:85:30:e8:9c:
                    90:08:d6:4e:f0:49:a0:65:a0:34:b6:cf:12:89:f7:
                    c7:d9:2d:95:37:52:3d:25:80:c4:75:2f:3e:a2:3c:
                    ee:4e:4b:6d:73:6e:69:40:32:d3:a8:be:05:25:d2:
                    a9:19:84:03:21:04:ed:cf:0f:7e:7f:09:76:4a:f4:
                    70:2d:c9:4a:a6:b9:a1:fb:7b:7e:b9:28:a6:b8:66:
                    9a:d6:7b:9c:b9:3e:30:02:1d:16:c0:c0:23:91:90:
                    4b:d6:ea:6e:18:ad:a7:c0:59:e2:03:1e:1e:39:2c:
                    25:c8:dc:fb:a8:e4:46:1b:81:06:ce:72:49:61:e9:
                    e2:5d:3e:8d:99:ea:fb:8c:bc:f2:d1:59:5e:5f:56:
                    8f:31:40:bb:b5:1f:17:5c:ab:09:83:30:3c:dc:69:
                    d3:8e:6b:e7:31:63:7c:43:36:6e:70:85:5f:42:f1:
                    23:17:0d:12:03:3c:33:cf:bb:c9:16:fe:47:5b:8f:
                    88:80:79:4c:5b:2b:f4:65:88:2f:55:38:5d:a9:9f:
                    96:e0:b8:f5:03:6f:3a:1a:26:05:ab:7e:9b:a1:b5:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.211.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50770

    Signature Algorithm: sha256WithRSAEncryption
         90:97:0b:c0:8d:c6:6b:a4:c5:44:e5:25:a6:07:4f:c0:be:16:
         af:1f:e9:f2:cd:25:1f:52:67:1c:e4:59:88:72:0f:c9:e0:f6:
         97:5f:94:e1:a1:5c:37:33:04:f6:a1:a4:0b:dc:09:17:dc:80:
         fe:09:9b:c8:4a:20:84:e7:57:ee:32:ee:ba:69:03:d5:a1:d9:
         3a:99:69:7a:40:5d:15:1d:fb:4b:fa:ef:ff:61:be:37:4c:a7:
         75:05:f3:7f:23:48:68:7f:9f:86:c1:a8:a6:13:f4:99:97:35:
         7f:d4:28:da:14:32:3c:0e:4e:50:a0:1b:4d:aa:06:2b:b2:89:
         7f:76:c5:4c:2e:74:38:88:c4:b7:a0:ef:39:c1:cb:f4:cc:ae:
         92:26:45:0a:aa:93:05:07:82:e2:0d:35:65:87:10:95:9b:3e:
         73:0f:bc:41:8d:79:70:16:ae:2e:c2:c5:33:55:b1:8d:68:be:
         f6:b4:a5:7a:5e:07:bd:d8:d8:51:04:9c:b8:9b:21:f8:7c:be:
         c6:71:36:f6:9c:f2:d7:00:44:92:56:a6:3c:86:1f:d6:95:c3:
         d1:a9:6e:00:2d:11:94:0a:d4:d0:9a:5f:6d:47:50:a0:7b:9d:
         02:56:08:70:17:6b:38:80:ec:e0:5d:9f:d1:80:cb:e6:ff:71:
         b1:83:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:05:56 2024 by rpki-client on console-ams.rpki-client.org