Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gtySWa-tRhsGGpMG1VW196elmpo.cer
File:                     gtySWa-tRhsGGpMG1VW196elmpo.cer (raw, json)
Hash identifier:          xgsUbihAc12jeMk9wAOIsHCkvmNqfwDpwnvNG6nS5KQ=
Subject key identifier:   82:DC:92:59:AF:AD:46:1B:06:1A:93:06:D5:55:B5:F7:A7:A5:9A:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018EC74F7FBF0B79B417C8191989241EC75E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/1bc9cb-c52a-45d2-8c05-f54d8feea515/1/gtySWa-tRhsGGpMG1VW196elmpo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/1bc9cb-c52a-45d2-8c05-f54d8feea515/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 10 Apr 2024 09:20:59 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198810

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c7:4f:7f:bf:0b:79:b4:17:c8:19:19:89:24:1e:c7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 09:20:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=82dc9259afad461b061a9306d555b5f7a7a59a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:cc:9d:52:ba:7c:22:7e:f5:b6:4a:f9:87:
                    65:b6:4a:bc:6f:56:a6:4a:28:00:87:63:4b:97:8c:
                    6e:07:99:ca:ba:aa:a2:00:06:57:79:a2:4c:18:66:
                    00:50:cc:07:b1:c2:8e:1c:37:12:71:6d:d4:fb:72:
                    60:c9:34:96:d7:ba:87:bd:a8:07:cb:40:e1:31:30:
                    96:2b:51:58:b2:4d:37:72:2d:a3:c4:21:09:c7:67:
                    ee:f4:6f:68:2f:f6:da:f2:69:25:96:71:b9:4a:1b:
                    a9:67:4e:c7:9a:70:68:1b:97:8f:c5:b8:79:96:1c:
                    db:00:55:ff:42:7f:ae:0e:d4:1f:6e:b8:48:99:57:
                    19:4d:3c:3b:e9:f1:3a:ca:33:b8:92:9e:64:36:75:
                    7d:bc:4f:b2:61:31:96:de:a5:72:69:ad:96:44:ae:
                    da:e1:cd:1d:8b:3d:09:b1:43:71:80:61:35:52:b4:
                    88:be:23:0e:53:57:83:13:63:13:96:6c:52:a1:12:
                    ae:87:e3:24:1d:c2:d8:e0:06:9c:50:fb:61:42:66:
                    a2:cb:fa:fb:a4:0c:8f:9b:2f:60:50:fa:ed:0b:68:
                    02:78:e1:01:92:ba:4f:ec:e1:67:18:2e:bb:99:c5:
                    6b:8c:00:88:fc:02:e1:ff:31:6a:1f:ef:79:08:4e:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DC:92:59:AF:AD:46:1B:06:1A:93:06:D5:55:B5:F7:A7:A5:9A:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1bc9cb-c52a-45d2-8c05-f54d8feea515/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1bc9cb-c52a-45d2-8c05-f54d8feea515/1/gtySWa-tRhsGGpMG1VW196elmpo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198810

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:f5:92:13:cf:0e:fc:44:21:21:19:37:c7:08:25:3a:7c:
         d9:ec:34:81:e8:3e:a9:a9:e7:26:45:8b:a8:8e:2b:be:29:0f:
         75:3c:71:bd:72:1c:fe:ed:a2:5a:3d:6e:96:2b:f2:e3:b1:5f:
         0a:ef:c7:f3:ca:5f:2f:61:a1:a2:cd:e6:f2:9d:fc:93:d9:13:
         47:ac:9f:1a:6c:cb:99:55:75:a1:05:a8:14:a0:ef:ad:ca:fa:
         7b:9b:a9:87:6f:f1:d9:6a:d8:a2:aa:4d:4c:f1:a6:cf:2b:e7:
         62:37:0e:b7:19:4c:81:82:65:e0:81:f2:6a:64:42:83:bb:af:
         df:62:9a:b8:68:cf:f6:48:4e:88:2b:00:f3:5e:7c:de:57:28:
         6c:dd:c8:bf:5c:65:d6:16:7f:af:a1:52:62:8e:d2:3d:2e:09:
         17:0d:fd:92:1d:13:a8:8e:d9:83:84:64:b1:5a:04:a3:aa:bb:
         31:c5:33:33:15:e2:93:0b:cf:49:3f:04:84:75:d3:65:16:ce:
         56:3d:24:b3:da:1d:31:28:92:20:cc:fe:b2:3b:20:bf:6a:40:
         2f:ee:b9:b0:1f:86:90:c3:8f:18:f3:2c:fa:ba:55:0d:0d:bd:
         57:8b:9d:b9:88:a9:9a:67:17:3c:cf:4f:17:0b:94:bc:f9:ae:
         66:eb:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:37 2024 by rpki-client on console-fra.rpki-client.org