Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.cer (raw, json)
Hash identifier:          bYtxc7JPcrOpvtEMlD7JQez3cdrbSeI3nU8Apha/uJM=
Subject key identifier:   7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7F7506B7733099DAB09F1CC0C3FDE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206455
                          IP: 88.135.187.0/24
                          IP: 204.144.178.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:f7:50:6b:77:33:09:9d:ab:09:f1:cc:0c:3f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:7a:05:0f:5c:a1:00:2b:57:d1:c3:8c:6d:
                    c4:e6:21:cc:fa:2f:d3:05:fa:23:4f:fa:c5:41:02:
                    16:40:67:77:02:31:42:ea:84:65:af:18:fb:41:de:
                    31:21:c0:ca:4e:92:53:c5:6e:c3:6d:8a:cf:b7:cf:
                    4b:50:69:3d:cf:1b:40:c9:6e:30:d4:82:3c:8a:1e:
                    23:1d:76:62:99:ba:90:b7:d7:88:a2:65:3e:3a:36:
                    ca:a3:40:5b:47:38:f3:bd:a5:b3:b7:52:70:6a:72:
                    87:00:a2:17:cc:5f:ae:a8:db:86:c5:d5:48:b5:4b:
                    2f:32:d0:31:03:4f:23:36:39:bc:16:2d:b5:09:6a:
                    cb:9d:a4:65:92:27:4e:8e:0b:b1:85:0c:7c:f5:f8:
                    2e:5f:ab:21:f4:35:37:f0:84:ae:d3:2d:4b:04:81:
                    7f:5d:38:8b:d8:ba:c5:6a:e9:76:e3:53:c1:e7:cf:
                    47:21:6c:36:d2:a2:87:28:27:1a:0e:50:f8:26:bb:
                    c3:20:b5:e3:07:09:fd:65:ad:0a:6d:e4:92:1d:90:
                    0a:2d:75:f6:68:7e:84:16:6a:e9:77:34:f0:e5:43:
                    6f:59:56:69:b6:20:96:d9:db:cc:c5:23:c9:f4:36:
                    8b:a9:c1:b5:3e:40:6e:5a:75:9d:39:43:d1:57:77:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.187.0/24
                  204.144.178.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206455

    Signature Algorithm: sha256WithRSAEncryption
         95:81:d8:94:06:32:91:ea:2f:79:61:37:6d:a9:d6:35:b1:c8:
         c2:a2:68:20:1a:98:33:87:37:f0:af:98:94:73:7e:85:cf:b9:
         80:66:42:78:5a:cf:26:8b:2b:54:13:26:ee:ef:a4:64:00:56:
         e0:d1:f6:a3:5e:7d:0f:b2:4d:ae:db:ee:7c:8d:ff:ba:20:a2:
         86:eb:31:b9:d2:61:2e:55:b2:dd:34:d8:32:36:a1:3a:f6:e4:
         e1:d5:bf:b5:51:74:f5:cb:a9:10:a9:b2:8b:b0:db:a5:8b:6f:
         58:c0:36:4c:6e:00:65:07:be:88:21:ec:50:26:e3:7d:59:91:
         f8:1b:3c:b3:ab:cd:08:b1:46:31:c3:76:4e:c5:f8:43:ab:7a:
         d1:33:e1:ff:18:9f:00:f4:7e:02:53:9e:65:3f:7a:21:7b:5a:
         d9:49:14:49:b4:ed:69:89:7e:c9:a8:e7:ea:51:9f:94:dc:d0:
         8d:0c:bd:97:82:04:bf:96:12:8a:d4:c0:1b:34:1a:04:e8:3e:
         b7:5b:ae:8b:1f:0d:40:24:6f:ed:ff:0e:a8:cd:1d:26:ce:c4:
         43:53:46:5c:43:59:60:83:1a:b3:02:d3:5e:43:31:ea:24:6e:
         49:04:5b:11:9d:ad:9f:d6:db:2f:2d:96:e7:5f:e0:e3:1a:04:
         70:b0:0f:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:38 2025 by rpki-client