Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
File:                     i7i2EnIdTUwtB8v-LklemGoPAm0.cer (raw, json)
Hash identifier:          DDSIQCQGZesefVztJ/huuHaSIpQ8088t3WIiEtTTIgA=
Subject key identifier:   8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D6A0724F08306D92AC9F0F43BF7059573
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Feb 2024 13:34:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215586
                          IP: 185.118.116.0/24
                          IP: 2a14:6c80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:6a:07:24:f0:83:06:d9:2a:c9:f0:f4:3b:f7:05:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  2 13:34:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:1e:2a:16:42:1f:51:49:1c:40:e3:6b:79:
                    a9:b9:92:1a:43:08:4e:ed:e0:09:b7:d0:8a:2b:7c:
                    09:6b:8b:ab:88:c1:1d:92:dc:2e:0e:25:af:b5:58:
                    b3:d1:c5:e9:ec:1c:a5:38:be:31:d7:53:81:ee:8a:
                    4d:f9:c3:11:a6:49:be:ab:e5:0f:1c:e8:63:6e:0a:
                    8e:8f:1c:8c:05:0c:fa:d2:6e:cd:33:22:e0:d1:a6:
                    14:c9:45:76:45:6a:35:ef:63:85:66:2b:99:95:5e:
                    38:df:00:38:53:08:cf:6a:b1:b7:bd:76:f3:66:44:
                    81:21:56:0c:bf:4b:4f:f2:88:34:65:87:83:10:1b:
                    99:c6:a5:57:ac:49:f5:eb:2f:f7:71:34:b0:7a:b8:
                    95:05:65:5e:14:e8:52:89:80:3f:34:72:dd:e4:dc:
                    c2:10:1f:af:20:7d:89:ce:a9:6e:15:20:fb:84:ea:
                    af:bc:43:ac:28:b1:7e:a1:a0:95:9a:9f:69:6f:a1:
                    6e:02:15:af:de:30:82:e2:8a:9b:85:52:b7:41:63:
                    bb:ea:37:10:b5:42:4e:9c:05:cf:1a:f0:f4:78:69:
                    15:3e:de:e8:10:c7:b4:75:96:7d:ad:df:4f:17:7b:
                    97:30:70:4e:31:69:84:14:24:b9:0c:40:3f:50:b0:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.116.0/24
                IPv6:
                  2a14:6c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215586

    Signature Algorithm: sha256WithRSAEncryption
         3e:9a:13:dd:23:61:4a:a3:a0:04:26:64:ca:2e:47:56:c2:ae:
         33:1d:e1:51:f2:81:ce:7e:ac:d3:f7:bb:2e:1d:98:46:2e:1a:
         02:09:ee:88:5c:1d:00:6d:02:ae:8f:be:f6:a6:bb:55:ab:73:
         1b:a2:e5:21:3b:68:9d:93:91:ae:d3:c9:67:03:3d:73:8a:43:
         6a:67:07:82:03:63:61:8f:55:43:de:f7:72:d7:e8:4a:60:9b:
         93:23:e9:17:43:60:c6:e5:16:eb:52:98:f9:a2:2c:35:79:a3:
         6f:5d:50:b4:7c:79:26:cf:72:cb:70:b6:f1:4d:f9:5a:03:cd:
         2a:7f:79:46:cc:55:3b:f4:e7:8a:26:d0:43:de:e0:0a:14:df:
         da:65:e5:e1:88:21:bd:cf:f6:ac:e7:b2:bd:aa:ce:27:92:fe:
         e2:1e:b4:5e:e3:4f:80:67:7f:97:84:1e:9e:2e:b6:39:0b:bf:
         2b:56:f0:bd:a2:61:77:14:d6:67:63:5d:fa:fe:12:73:17:32:
         e7:a6:6c:ad:19:1a:d7:3a:f3:b3:11:bb:63:3a:ff:86:b3:64:
         22:6f:9b:e9:b6:71:f8:4b:8c:c3:96:a1:5e:06:3d:7f:c8:e8:
         81:22:3c:a5:63:e4:00:33:23:5d:e5:89:cb:78:e5:01:2e:ff:
         b9:68:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:58:25 2024 by rpki-client on console-ams.rpki-client.org