Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
File:                     eouukjMFpxxSam_PV8KdbBakJp4.cer (raw, json)
Hash identifier:          G1IsuMJfUAlpyYtv5JHqWsOTI6aZ7J/n047fM7zrbvg=
Subject key identifier:   7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019223804F3F443D4C0FE8EBCD4A03A43028
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 10:07:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34907
                          AS: 51359
                          AS: 214328
                          IP: 193.3.162.0/24
                          IP: 194.31.232.0/24
                          IP: 195.245.200.0/24
                          IP: 2001:67c:178c::/48
                          IP: 2a00:7320::/29
                          IP: 2a04:4f80::/29
                          IP: 2a07:f6c0::/29
                          IP: 2a09:b080::/29
                          IP: 2a0c:1f40::/29
                          IP: 2a0d:6640::/29
                          IP: 2a0d:6c40::/29
                          IP: 2a0d:6cc0::/29
                          IP: 2a0d:71c0::/29
                          IP: 2a0d:75c0::/29
                          IP: 2a0d:78c0::/29
                          IP: 2a0d:7bc0::/29
                          IP: 2a0d:8900::/29
                          IP: 2a0d:8e40::/29
                          IP: 2a0d:91c0::/29
                          IP: 2a0d:99c0::/29
                          IP: 2a0d:9dc0::/29
                          IP: 2a0e:5000::/29
                          IP: 2a0e:6500::/29
                          IP: 2a10:9fc0::/29
                          IP: 2a10:a040::/29
                          IP: 2a10:d940::/29
                          IP: 2a10:d9c0::/29
                          IP: 2a10:da40::/29
                          IP: 2a10:dbc0::/29
                          IP: 2a10:dc40::/29
                          IP: 2a10:dcc0::/29
                          IP: 2a10:dd40::/29
                          IP: 2a10:ddc0::/29
                          IP: 2a10:de40::/29
                          IP: 2a10:dec0::/29
                          IP: 2a10:f900::/29
                          IP: 2a11:7cc0::/29
                          IP: 2a12:4d80::/29
                          IP: 2a12:b280::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:23:80:4f:3f:44:3d:4c:0f:e8:eb:cd:4a:03:a4:30:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 24 10:07:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:10:ea:89:d6:6d:bd:88:58:1b:84:41:75:
                    8a:50:3d:07:11:d3:9f:16:e4:7c:d9:48:da:f4:a3:
                    db:0a:6d:9c:d4:15:40:cf:91:12:25:1a:85:ef:5c:
                    20:b7:4d:14:cd:cc:81:9d:c0:17:c1:88:ad:87:55:
                    58:fc:2f:3d:a0:5f:86:ce:aa:d1:6f:9d:a4:4c:ce:
                    9d:c5:a7:9d:d5:97:fd:3e:96:d8:d8:b5:ec:f9:19:
                    f3:b4:33:ac:c2:04:a4:dd:d6:fc:32:57:17:08:1d:
                    29:9d:35:c4:70:1c:b7:d9:16:62:0d:82:ed:c1:16:
                    55:ae:b4:6f:c8:8f:49:da:46:c9:03:80:e6:4d:c7:
                    b9:44:2c:8f:f5:ec:be:d2:ac:4c:d6:6a:04:66:f9:
                    4a:37:05:2f:26:40:ce:82:25:88:b9:9d:46:94:b4:
                    3c:2b:64:0d:6e:ba:ee:00:f6:e6:4f:af:23:4b:47:
                    41:c6:74:79:e6:c1:5d:78:68:9a:4b:f2:e8:81:7a:
                    e0:c4:6b:10:48:09:ad:54:38:4c:cb:4f:b0:1f:4a:
                    e6:a3:ea:ba:fc:7b:3a:23:1d:0d:bf:68:00:ac:6b:
                    92:f5:a2:c0:7a:90:7f:47:32:7e:7b:96:8c:e0:fb:
                    39:cb:60:38:d8:b5:7c:50:9e:f2:ed:6f:c5:0c:a3:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.162.0/24
                  194.31.232.0/24
                  195.245.200.0/24
                IPv6:
                  2001:67c:178c::/48
                  2a00:7320::/29
                  2a04:4f80::/29
                  2a07:f6c0::/29
                  2a09:b080::/29
                  2a0c:1f40::/29
                  2a0d:6640::/29
                  2a0d:6c40::/29
                  2a0d:6cc0::/29
                  2a0d:71c0::/29
                  2a0d:75c0::/29
                  2a0d:78c0::/29
                  2a0d:7bc0::/29
                  2a0d:8900::/29
                  2a0d:8e40::/29
                  2a0d:91c0::/29
                  2a0d:99c0::/29
                  2a0d:9dc0::/29
                  2a0e:5000::/29
                  2a0e:6500::/29
                  2a10:9fc0::/29
                  2a10:a040::/29
                  2a10:d940::/29
                  2a10:d9c0::/29
                  2a10:da40::/29
                  2a10:dbc0::/29
                  2a10:dc40::/29
                  2a10:dcc0::/29
                  2a10:dd40::/29
                  2a10:ddc0::/29
                  2a10:de40::/29
                  2a10:dec0::/29
                  2a10:f900::/29
                  2a11:7cc0::/29
                  2a12:4d80::/29
                  2a12:b280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34907
                  51359
                  214328

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:c5:4e:e2:2f:5a:c4:51:bf:94:b8:ef:c3:63:a2:00:9b:
         f5:05:a8:a6:62:78:de:b6:7f:41:23:92:9a:22:21:39:07:28:
         ed:89:aa:38:be:a7:96:b7:e8:9c:56:d3:e8:16:0d:d2:5a:34:
         03:a7:f6:51:68:96:bc:40:76:eb:5f:67:2a:26:a9:eb:16:b5:
         18:f4:63:b1:70:fe:7d:c7:21:b7:2f:54:b5:9a:ed:ca:65:b1:
         2a:06:90:c1:a3:57:f9:e3:67:17:9a:80:79:3f:69:a9:74:72:
         a4:de:8a:5f:4f:24:b0:f3:8d:fb:90:df:29:3d:40:0a:1c:d5:
         fb:92:e3:42:cb:c3:11:7a:40:f5:6f:8a:5c:7d:06:78:5f:41:
         f7:98:42:4b:3e:78:c9:06:fa:1a:a1:10:6e:28:b8:5d:c1:56:
         9b:d5:56:78:be:2a:4d:f4:4a:a6:1b:0e:ba:cc:ba:b7:84:9a:
         36:f7:0d:03:fc:77:48:69:c4:55:39:7a:d0:1d:2b:bf:60:6a:
         4a:65:f5:1d:11:31:ad:ee:af:35:1e:09:a9:82:02:04:71:9c:
         88:7a:24:cb:02:1d:80:75:0b:a5:ab:d4:75:aa:da:6a:5a:9c:
         fa:3a:89:f7:f2:da:85:cd:fb:29:71:1c:ef:45:e8:51:98:24:
         6f:b3:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:08 2024 by rpki-client on console-fra.rpki-client.org