Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
File:                     g2Rixix_Y9L114enAdd5q2luIjY.cer (raw, json)
Hash identifier:          zwwZMF+YMo/nVz13iX+76TTLLmvk3sxykE/QP/7YGvM=
Subject key identifier:   83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CF14BE551D3412D681E5CF706F6F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209128
                          IP: 185.149.121.0/24
                          IP: 2a0d:5980::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:f1:4b:e5:51:d3:41:2d:68:1e:5c:f7:06:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=836462c62c7f63d2f5d787a701d779ab696e2236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:d9:9a:c4:17:1a:65:9d:87:d8:d7:c8:62:
                    62:d3:6f:09:4f:40:1f:aa:00:21:88:bc:56:c9:f4:
                    90:19:72:5b:5b:a4:68:1e:3d:3e:63:53:f0:7e:1a:
                    ae:2d:5f:dc:34:68:45:91:8f:cf:ee:2f:7c:10:46:
                    e6:f6:26:47:3f:ba:dc:82:3e:aa:76:d5:68:7b:c6:
                    f2:9e:7d:13:0f:6d:fd:c2:08:da:d5:22:45:9a:27:
                    f2:5f:7c:a8:c9:6d:6c:7b:60:e5:4b:42:73:fc:27:
                    50:e6:a1:d1:56:6d:a1:5b:a8:6b:74:35:bb:ca:05:
                    6a:c5:f8:ed:44:66:ba:8b:09:9d:8c:a2:5a:95:1e:
                    48:8b:93:e7:63:bf:9d:43:dd:ef:5c:0d:5a:c2:9c:
                    60:c6:0a:ce:db:05:58:9d:9d:98:e3:15:06:79:6a:
                    d9:26:ce:7c:23:15:ce:1b:92:a9:6f:ba:5f:e0:d0:
                    d5:59:c1:52:54:04:cd:96:41:de:62:18:7b:d0:ee:
                    e9:17:f5:ea:21:a0:57:50:b1:0b:80:30:4c:2a:f3:
                    99:57:84:a6:c1:1e:98:7b:f7:40:0e:87:58:d3:62:
                    d8:5a:c7:3d:7c:ec:92:a1:8c:15:26:40:c7:89:16:
                    9d:b6:5c:3b:bc:a7:c4:66:57:bb:e2:60:a1:52:c5:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.121.0/24
                IPv6:
                  2a0d:5980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209128

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:b7:bd:6e:73:01:6e:75:23:40:27:ee:f5:a2:a7:f3:60:
         bb:fb:01:6e:6a:5b:46:ef:1b:2b:45:19:04:a3:f0:5e:3f:97:
         90:49:aa:28:36:25:d6:4d:21:1a:68:d6:11:32:6d:54:89:40:
         9d:f0:d7:56:8e:95:d1:59:c0:4b:35:4d:ac:52:b5:ca:a3:83:
         a9:e0:11:bd:2c:89:58:79:0e:28:f4:af:38:8b:72:57:85:a8:
         30:11:c2:2f:aa:3b:a1:23:f0:68:26:f3:2e:83:ba:e1:30:01:
         3a:58:10:23:0c:71:d6:e5:ed:8e:12:8a:50:30:fb:cb:78:a8:
         8b:3c:21:05:b4:bb:7e:57:49:08:a6:4c:2c:9d:77:00:30:3c:
         84:ef:b7:22:eb:29:63:62:d8:21:2f:83:59:a0:54:4d:26:79:
         d8:0a:14:2e:5e:7d:89:b0:54:15:c5:e6:03:30:75:0f:76:f2:
         ca:96:d9:57:3f:12:ce:91:15:ce:a6:34:d9:60:9b:73:a7:40:
         a8:da:0a:e7:db:1e:5b:85:a7:f8:5c:05:ae:56:96:2d:90:36:
         ab:73:65:43:28:90:a1:48:a9:1c:de:36:0f:c3:41:0c:c3:93:
         5f:76:f4:4a:7a:5b:a2:09:da:e1:e8:7a:f0:56:38:82:b6:70:
         62:8d:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:10 2024 by rpki-client on console-ams.rpki-client.org