Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
File:                     g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer (raw, json)
Hash identifier:          7yYI/Tz1JKkWT+UZ5QQK28wcKSxmkFL4nxrMUHHC+oE=
Subject key identifier:   83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E855FFFE3746262C53BF3E98F5A195DAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 28 Mar 2024 14:04:04 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49692
                          IP: 91.213.180.0/24
                          IP: 2001:67c:20f0::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:85:5f:ff:e3:74:62:62:c5:3b:f3:e9:8f:5a:19:5d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 28 14:04:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:dc:10:13:e5:22:46:b3:e7:76:46:9d:3a:
                    5f:72:ec:b5:c6:a7:eb:99:63:32:fa:62:52:b0:c3:
                    78:5a:c6:21:ac:55:23:e1:6e:23:53:d0:94:f9:e5:
                    f2:4a:18:52:e7:b9:03:9d:9c:3b:de:37:c5:7d:6b:
                    6e:f1:f8:6b:04:3b:2f:17:12:d4:1a:fa:da:c9:68:
                    28:c5:54:d4:ec:8a:2d:7f:fc:47:91:d0:3c:9f:d9:
                    d9:20:cf:45:f2:04:e1:90:e2:d3:55:5b:ed:0e:0a:
                    07:c3:b7:3d:5f:87:f5:5b:2c:9b:1e:ce:45:c3:3b:
                    75:8a:5d:01:42:73:99:86:39:e7:5e:c1:76:21:f7:
                    42:36:38:a9:de:34:6b:ce:30:e1:6d:a5:5c:a3:aa:
                    d8:74:45:55:49:e2:13:8c:89:37:a0:0c:64:9c:c5:
                    18:31:58:d5:e2:c8:66:3e:b9:37:52:88:ea:55:29:
                    0e:42:df:6d:3e:3a:da:b2:44:92:92:c1:d3:f1:b0:
                    3a:cc:74:2a:5f:cc:b7:bc:e6:35:44:78:e7:37:02:
                    75:b4:ce:ce:52:54:c4:cf:33:88:90:9d:88:ec:a8:
                    34:b2:c4:05:78:fd:47:08:e5:eb:fe:94:56:dd:70:
                    16:75:5e:8b:bc:75:47:8a:ca:91:8f:13:14:33:83:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.180.0/24
                IPv6:
                  2001:67c:20f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49692

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:83:37:0e:87:e9:74:95:f8:a1:e0:5d:91:b9:1b:55:ec:
         c6:1a:3d:15:7a:24:f1:2f:97:af:50:d0:be:3f:de:b9:ba:8b:
         37:a9:d1:ce:a9:e5:98:ec:92:53:df:12:cc:70:b2:1c:b3:e3:
         de:86:ac:a7:2c:b2:2c:82:a3:30:c4:a8:58:02:cb:1d:3e:0c:
         91:40:d1:52:df:56:b5:3b:6f:42:91:7b:9c:69:b8:c6:fa:4b:
         12:03:bc:b0:79:91:38:1c:6d:54:3c:90:2b:2d:f9:cf:51:8e:
         56:d9:09:a8:18:9a:b7:e8:2a:db:fe:79:39:ef:50:df:5b:82:
         55:ae:7e:d0:9a:d4:9d:5c:12:3d:9e:53:fd:93:fc:36:62:1f:
         98:7e:bb:e4:37:be:20:72:bf:c7:1b:ec:ff:e2:f7:67:bf:cd:
         a1:7f:0f:a5:0f:e1:31:f9:c3:66:be:91:47:32:ed:a1:6b:2d:
         81:bf:a8:01:8f:cc:fc:2d:0e:58:7a:0d:8c:37:2f:d3:95:ea:
         20:88:04:d7:ae:32:44:25:99:70:99:dc:05:68:d4:ce:74:27:
         3a:8d:e0:b6:5e:e4:21:59:c8:68:56:99:79:78:5e:0a:fe:0c:
         7f:8c:d2:90:c7:93:c4:54:30:fc:f3:04:48:65:36:f7:11:a5:
         b1:b6:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:07 2024 by rpki-client on console-ams.rpki-client.org