Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
File:                     h30YEASPQ3IFBuTBgg9v4I_3ym4.cer (raw, json)
Hash identifier:          x6gVVrseefQ494aBxezHaHnUo1JEXhH3UqI0lRBSUXk=
Subject key identifier:   87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4247E6D3283BFCD7F20BD88C79CB7A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 196994
                          IP: 178.216.24.0/21
                          IP: 2001:678:e74::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:7e:6d:32:83:bf:cd:7f:20:bd:88:c7:9c:b7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:03:02:eb:d3:5e:c5:9d:a4:0e:6d:f6:87:
                    90:2b:fb:56:00:b9:64:48:c9:a7:85:e5:5c:a6:00:
                    70:96:10:43:9d:58:8d:67:17:be:63:03:c3:10:bc:
                    56:3a:6d:0f:98:d9:d6:d3:00:28:ab:88:53:a5:41:
                    cf:9d:33:2d:ee:b0:74:54:df:e2:82:ab:00:2a:65:
                    06:39:d4:3a:66:5b:12:f8:c9:37:6c:32:14:98:f4:
                    7d:20:f8:e0:3d:f5:f4:d7:b5:3a:fc:bd:9d:c7:bd:
                    3e:50:e4:2f:a6:50:66:91:0d:da:d4:f9:95:1e:2c:
                    ae:e2:2e:48:8f:a9:e8:6b:3c:bc:21:c0:e2:87:a9:
                    96:4b:73:97:f3:c6:c3:08:3a:aa:49:b2:f2:bb:bb:
                    5c:54:a3:51:80:f4:9c:3b:f8:c6:34:67:fe:a0:e9:
                    b5:1d:2d:b8:26:26:6c:45:db:99:7b:38:10:66:68:
                    17:ac:78:e0:ad:fd:14:d3:a0:d4:9d:9e:06:f4:1f:
                    4d:87:03:7c:db:fe:c8:01:51:3e:95:99:93:4f:27:
                    6f:da:0c:13:de:7d:66:32:da:36:6c:79:ee:fc:50:
                    a3:7b:84:51:b0:27:12:1c:7e:58:17:f3:da:3a:09:
                    8e:0b:70:ca:10:1a:19:e9:26:66:41:c6:89:a3:b6:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.216.24.0/21
                IPv6:
                  2001:678:e74::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196994

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:8e:53:85:20:38:cb:fb:89:a4:63:a4:79:21:d7:38:08:
         3a:3f:71:e2:8f:e8:bf:fa:2b:ff:6f:cd:4b:db:a3:06:fc:39:
         55:e8:98:f0:08:e1:44:4e:67:28:64:7a:8a:79:9d:95:74:e7:
         79:69:f3:b1:67:18:53:8f:60:00:2a:2b:e9:e8:7a:62:72:39:
         8d:21:e7:cb:fb:b9:3b:aa:ee:74:06:22:94:fa:27:c0:7e:bf:
         4b:2c:98:c8:31:f0:f7:4f:f1:50:e5:48:b3:4f:e5:a4:57:47:
         96:ea:e0:ec:4f:81:73:e9:83:fc:38:cb:7d:d4:c5:5a:81:60:
         58:e2:3d:49:71:a7:66:6c:d1:07:49:aa:37:5a:c0:34:51:d3:
         4b:87:6d:21:ca:99:db:60:a2:6a:0e:6d:05:19:11:69:f0:e5:
         ba:78:f3:b7:f8:70:bf:ff:48:e7:9c:32:d3:ba:26:50:07:ed:
         4b:f7:d0:1d:55:03:62:ee:cc:68:ed:e5:74:d7:f5:c6:b8:38:
         00:b4:2b:d6:8d:a7:3d:5d:12:ea:d9:57:1b:10:f5:12:b8:c0:
         8b:20:61:a4:f7:55:83:92:54:38:e5:c1:c8:bc:6c:8f:07:3c:
         05:87:fb:5c:a1:4f:e9:10:5f:8d:8b:f0:46:af:d9:68:9a:e9:
         a3:5f:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:47 2024 by rpki-client on console-ams.rpki-client.org