Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
File:                     ezF1mINz5Wtv_gsVofx11Gk64sA.cer (raw, json)
Hash identifier:          1NuMQyfgYEBGKSSZArBMWTRQfjQrj/zXbtUeoVzRfOk=
Subject key identifier:   7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5010023DDA440B62142C3CAEDC06B63
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 47544
                          IP: 46.248.160.0/19
                          IP: 86.111.240.0/21
                          IP: 185.110.48.0/22
                          IP: 193.106.104.0/22
                          IP: 2a01:7400::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:00:23:dd:a4:40:b6:21:42:c3:ca:ed:c0:6b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:bf:fe:46:ef:f5:7b:9d:3c:be:09:12:7b:
                    f5:c9:07:d1:43:f8:a2:9d:11:5e:71:f6:a4:2e:89:
                    17:96:df:05:32:70:ba:9e:0d:f2:3e:64:52:f2:7f:
                    f2:63:c3:fa:15:aa:18:0a:ed:0f:d8:28:a9:c8:11:
                    64:15:58:de:b8:eb:c7:a6:ac:f9:0d:53:39:ea:07:
                    e0:32:3e:fa:55:41:35:2d:46:1f:31:27:48:67:ae:
                    23:d7:1f:3a:55:75:3d:46:fe:f7:68:e4:74:1a:3e:
                    5a:4e:9e:31:e2:bf:26:74:95:f8:52:41:f9:34:29:
                    3f:ba:de:ec:af:16:0d:50:ec:8c:26:2d:df:21:a0:
                    ec:5c:9c:11:68:3c:74:ac:ce:a6:6c:44:43:10:35:
                    c1:57:e8:b1:bb:f1:26:69:e9:2a:86:4f:18:89:ec:
                    fd:75:45:57:b7:61:b1:85:4e:d9:cd:6e:8d:84:ac:
                    87:94:32:e8:cc:f7:b4:32:4c:4a:c8:a8:2c:30:47:
                    43:5d:92:83:bc:b4:53:cb:95:81:60:93:69:bd:ca:
                    c6:f2:8b:cc:e4:a4:0c:7e:55:cc:0e:75:18:79:07:
                    a1:9d:6b:f4:75:16:36:b8:19:80:77:d9:0c:4c:a2:
                    c6:af:30:23:72:39:5e:cd:0c:5d:1f:98:44:58:90:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.248.160.0/19
                  86.111.240.0/21
                  185.110.48.0/22
                  193.106.104.0/22
                IPv6:
                  2a01:7400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47544

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:d9:60:46:e0:6d:ab:51:42:aa:5a:55:7f:0f:72:83:24:
         6b:59:58:b2:a7:95:d2:21:1a:79:42:ff:91:43:41:92:77:c0:
         38:f1:dc:9d:38:c7:0c:d0:b2:30:3c:4d:67:94:8f:df:7c:23:
         ab:e9:f1:c0:e7:03:5f:4e:e8:5b:31:bf:6a:84:e9:7c:db:09:
         8c:27:49:82:5d:6f:44:9c:bc:88:24:be:38:5b:d4:d6:51:3f:
         a9:db:14:d5:78:e7:e1:f7:53:d5:7d:c0:f9:84:f1:a1:df:1b:
         af:b2:8a:f7:ff:37:6f:88:8c:e1:cd:9d:00:4f:9e:fc:6e:9b:
         a9:54:23:9b:59:91:01:4f:ab:16:58:01:7e:c7:65:bb:e7:7d:
         ca:0e:4f:7b:7d:4f:ee:63:24:03:3f:52:d1:47:2e:c6:85:0a:
         26:16:71:cf:d0:81:f7:a5:86:52:69:a0:81:2b:23:89:58:99:
         a3:b2:39:e4:04:15:f9:a6:2d:83:59:9e:ae:0e:64:32:25:7c:
         d3:88:2b:cc:8f:fd:27:03:bc:70:09:ba:8c:91:35:e4:5c:f1:
         0e:98:3c:3c:3d:4c:93:4a:02:2d:87:5e:2c:4f:4f:e2:3b:51:
         83:96:c0:9b:a5:08:a5:0e:81:8c:ad:7a:89:c8:44:aa:f5:46:
         1a:76:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:46:28 2024 by rpki-client on console-fra.rpki-client.org