Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
File:                     gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer (raw, json)
Hash identifier:          fDbc2kt4mjTK2d2S9Vg2Mr8nR6kF/dBMSh/uvqK3w/Y=
Subject key identifier:   80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC492ED7CE814C9D7B4601AC996A6B965
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199669
                          IP: 46.29.118.0/23
                          IP: 91.109.200.0/21
                          IP: 93.183.104.0 -- 93.183.119.255
                          IP: 176.123.188.0/22
                          IP: 185.10.44.0/22
                          IP: 185.71.196.0/22
                          IP: 185.179.160.0/22
                          IP: 185.195.170.0/23
                          IP: 2a03:ec0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:ed:7c:e8:14:c9:d7:b4:60:1a:c9:96:a6:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:7c:97:cd:84:be:1d:01:8a:e2:a7:90:54:
                    b8:ad:5f:41:df:44:c8:ce:82:da:a9:66:3d:e5:6b:
                    b9:74:79:a3:95:2b:23:54:9e:ee:60:90:35:75:94:
                    61:50:7d:73:79:a7:e5:27:d8:53:fe:93:dd:87:2c:
                    33:48:20:ae:a9:fc:dc:9a:10:cb:ce:5b:2c:1d:bf:
                    94:67:4c:1f:dd:d7:26:70:3f:54:7c:3e:44:2f:76:
                    50:14:7a:59:c5:09:9a:8a:20:ca:bf:04:21:5e:45:
                    c9:a5:b1:e8:79:e0:6d:03:7c:d3:b3:93:14:95:7b:
                    9c:87:e4:84:b0:44:3b:66:04:d1:30:93:93:58:e7:
                    ad:cc:8a:9d:fa:fd:74:e7:f7:0f:86:00:41:81:25:
                    ef:c3:38:2f:77:17:c6:36:ad:3b:09:6a:52:87:f8:
                    3e:2c:cf:92:20:f8:a9:fb:4b:bc:ee:fe:0d:30:ea:
                    ad:e6:8a:96:8b:78:8a:00:0c:15:2a:e8:cb:ed:9a:
                    30:c3:d4:1f:c9:bd:07:7c:3a:eb:c3:d2:70:13:9e:
                    33:12:50:8f:5b:d0:f7:11:61:ae:76:0d:75:3b:0a:
                    63:ab:9e:3b:01:9d:27:67:34:97:df:84:e1:be:e8:
                    49:40:6d:cb:77:19:f8:f5:e4:ed:b9:fe:f4:49:94:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.29.118.0/23
                  91.109.200.0/21
                  93.183.104.0-93.183.119.255
                  176.123.188.0/22
                  185.10.44.0/22
                  185.71.196.0/22
                  185.179.160.0/22
                  185.195.170.0/23
                IPv6:
                  2a03:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199669

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:bf:cb:e8:ae:5e:e4:b3:2c:f1:93:74:cb:50:01:b2:ee:
         d5:21:d4:1c:24:d6:16:2d:ea:29:7e:05:83:fe:32:00:5b:f7:
         05:ec:9b:90:8e:02:cb:bf:6f:0d:84:d8:38:10:73:da:33:9b:
         d9:39:b3:bf:86:b8:d5:bb:a5:dd:ec:4e:bd:10:15:6b:c7:c3:
         14:49:d2:86:8b:2a:bf:c4:e9:c2:54:e7:7a:d3:fb:bf:0a:12:
         00:1a:8c:f4:79:7d:82:fc:1e:27:a6:3e:76:0e:7c:e1:f6:57:
         2d:49:49:12:3c:7e:31:f5:02:40:9f:19:13:2b:95:75:e0:96:
         23:3d:57:61:b0:c6:96:fb:f4:4c:12:80:96:fc:b0:d8:3a:33:
         18:a2:46:21:f9:69:28:d9:d0:a2:bd:8b:72:9c:39:15:d6:ce:
         97:0b:d3:00:5c:67:33:c5:44:2e:a4:b1:ee:c7:24:2a:a4:7e:
         c2:c2:d9:a8:e2:f3:a1:2f:0f:5d:2d:a6:6a:3c:9f:44:a4:04:
         53:04:80:26:2d:dd:3e:5b:cc:b3:00:07:75:f4:57:fb:9c:21:
         5a:65:95:ea:98:00:06:78:bb:1a:93:e9:32:cf:3e:7c:a4:46:
         c5:68:87:77:7d:15:17:2b:a1:9c:21:cb:84:18:71:0a:4e:52:
         4c:27:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:18 2024 by rpki-client on console-ams.rpki-client.org