Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
File:                     gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer (raw, json)
Hash identifier:          dvwvxZOM3PHUhtTECYu4/S3R+6mJcxLawgzyAG7513g=
Subject key identifier:   82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E7B5CA7D56FC8B3D7806509BF7F835B2E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 26 Mar 2024 15:24:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 59959
                          AS: 210306
                          IP: 185.3.156.0/22
                          IP: 185.147.44.0/22
                          IP: 185.243.124.0/22
                          IP: 193.35.92.0/22
                          IP: 2a02:53c0::/32
                          IP: 2a0d:1380::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7b:5c:a7:d5:6f:c8:b3:d7:80:65:09:bf:7f:83:5b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 26 15:24:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:e7:52:5a:fe:b5:e2:fd:4d:ef:b1:bf:da:
                    63:b0:2c:6c:c9:69:cc:d6:93:c3:ef:c0:9b:09:38:
                    ce:b3:77:3c:dc:8d:6e:23:05:95:e3:52:d5:5a:0f:
                    59:9d:7b:a8:00:76:28:14:39:3d:e3:02:74:02:1a:
                    0a:61:8a:70:50:a2:7b:27:2e:91:a0:f1:10:5b:b6:
                    65:bf:9a:f0:06:5c:b0:5e:e5:dd:57:e2:e6:90:bc:
                    51:65:33:af:26:8b:33:8b:82:5b:61:a2:b2:23:a3:
                    47:4c:47:d8:df:af:76:a4:3c:5a:22:87:81:6d:94:
                    77:dd:ce:ab:0b:17:aa:33:f9:19:1a:10:8c:3c:74:
                    72:fa:b5:dd:97:89:03:4a:4c:53:49:91:80:5f:9b:
                    51:2a:f0:ad:63:7a:c0:f1:e7:47:ec:21:15:63:21:
                    df:a3:eb:08:e5:58:bc:39:7f:61:67:99:b4:be:7d:
                    5e:d5:2b:d4:bc:c5:fb:8d:76:4e:ff:32:d0:a2:0c:
                    4e:b3:45:6c:9d:b8:7b:16:30:a6:32:9c:9a:ab:d2:
                    5d:f3:7b:6b:8b:b6:9c:30:51:65:fa:20:20:2d:4c:
                    cf:cf:3c:83:24:4a:2d:ff:c8:d0:6b:0c:d3:6a:cb:
                    f4:ad:52:c1:1c:5f:e4:32:a5:9b:9f:ef:cf:95:37:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.156.0/22
                  185.147.44.0/22
                  185.243.124.0/22
                  193.35.92.0/22
                IPv6:
                  2a02:53c0::/32
                  2a0d:1380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59959
                  210306

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:00:7c:a7:9f:a8:1c:09:a9:ac:16:a2:4d:97:7a:8e:8a:
         96:2a:7f:e1:b1:a7:17:e4:40:29:45:89:58:3d:31:61:df:1c:
         91:59:67:81:cd:58:06:b9:4b:fa:ee:02:6b:ae:5e:74:3b:52:
         53:f1:16:e7:64:a4:24:ea:06:b3:59:d1:be:62:f1:e8:b7:56:
         7d:27:b0:3f:68:3d:4e:f9:cb:1f:f5:fd:b3:49:7c:d0:fe:01:
         58:2d:a8:27:d0:6c:1e:a2:16:70:52:28:5d:ae:62:3a:c2:41:
         55:81:70:c8:3e:1b:fa:f3:79:a4:74:b9:5a:0e:08:5c:0b:d3:
         12:9d:8f:10:55:53:fe:70:c0:95:62:f1:c7:b5:1e:e4:b3:be:
         14:2e:b0:68:a1:e7:86:17:fd:be:c5:b2:a5:05:ff:e0:29:5c:
         de:ad:30:8e:bf:2f:fd:ed:cc:ea:f6:d6:bb:56:5e:0a:e9:6e:
         19:2d:9e:1c:16:c1:56:fb:f3:99:1b:e7:2a:d0:57:93:26:be:
         67:7c:68:a8:bf:63:fd:ef:f1:c3:1b:bf:d3:97:18:f1:dd:89:
         3e:de:21:9e:40:91:e9:71:92:27:5c:a3:4d:54:d1:75:6a:ae:
         28:7d:42:9b:8d:1c:94:9d:63:cf:33:8c:c2:eb:3d:64:98:cb:
         32:b3:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:09:26 2024 by rpki-client on console-ams.rpki-client.org