Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.cer (raw, json)
Hash identifier:          +pYv8etF2xDsKxx6LIDdcX7tWC3wTE9ZUSGfaoM3eBY=
Subject key identifier:   8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DB0C1A3E3E4B87832792E252206742
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212606
                          IP: 185.178.49.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:0c:1a:3e:3e:4b:87:83:27:92:e2:52:20:67:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:41:a1:e0:2c:62:e9:ac:d1:0c:bc:08:0f:
                    80:eb:0f:02:ca:8a:8d:75:f1:10:7b:a2:a9:eb:17:
                    9b:74:78:e4:25:73:67:01:15:08:de:38:6e:8b:24:
                    08:ec:ec:d3:9a:c1:99:76:68:71:d8:d5:e0:bc:b5:
                    2a:61:3c:aa:fe:ff:23:f4:d7:a9:0e:29:84:1f:33:
                    f9:27:6c:f3:21:ae:8f:60:61:24:3e:06:8e:a2:0e:
                    af:c7:93:77:0e:3b:96:f0:1c:ba:85:af:83:7b:4a:
                    df:10:b2:1f:8a:03:11:43:74:c3:f7:5b:85:70:01:
                    2b:8e:fe:2d:a0:15:9b:52:79:65:2a:f1:5c:9e:a0:
                    80:31:f0:2b:f2:09:95:92:87:fc:46:e3:26:d0:18:
                    e5:57:a3:aa:17:3f:b1:6e:33:b1:e5:e6:86:b3:52:
                    bc:0f:7f:db:3c:b6:10:40:06:a4:07:13:56:c9:c8:
                    21:bb:6a:4a:a8:8c:bd:11:40:81:89:99:ed:f6:fd:
                    8c:f9:d8:3a:3a:5c:23:ae:56:7f:65:41:b0:99:91:
                    4d:d4:f9:35:09:8e:46:15:c0:be:4e:53:d0:93:68:
                    0a:ea:11:29:09:33:ca:7c:af:8b:25:83:b4:e0:d5:
                    cb:e0:62:83:78:5c:a9:fb:bc:5c:70:a1:cc:16:78:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.49.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212606

    Signature Algorithm: sha256WithRSAEncryption
         14:aa:ad:50:cf:dd:23:f0:ac:04:f9:c9:03:b7:39:bd:c1:85:
         01:8b:47:21:b3:29:ce:31:b4:88:05:ef:7a:d1:63:31:f3:f2:
         08:c6:d6:7f:7d:56:4d:e9:28:12:04:7e:7a:8d:56:81:99:20:
         cd:77:01:2c:77:ec:1a:19:74:f1:38:d0:39:e7:d9:f0:8d:67:
         bc:3f:6b:b7:cf:1e:0e:20:a0:ff:86:0b:55:d7:a3:2c:8c:2f:
         a0:e8:f6:5c:1f:7b:e9:4d:98:f7:e4:dd:68:c6:a6:ac:41:25:
         95:66:d0:86:c1:de:3c:d6:8f:20:23:0e:27:a7:04:77:1e:36:
         e2:69:92:4d:aa:35:59:ea:dc:d2:68:e9:20:4b:54:80:ab:40:
         29:5d:b6:7b:2d:1c:f6:8c:79:34:8e:01:ac:cd:11:46:16:0f:
         b3:83:41:c5:1a:6f:46:87:a8:44:63:6c:d8:20:fa:71:8e:76:
         cc:c5:78:f0:7a:8b:c5:50:82:02:0c:ec:3d:de:d2:6e:5c:ff:
         21:98:5f:77:4e:ea:c7:cb:be:12:bf:13:ab:f5:74:1e:ec:68:
         98:78:58:9d:c5:93:b5:30:75:2d:4c:ed:12:0a:2a:66:f3:bf:
         ae:78:db:05:be:a7:3a:8d:c9:17:a6:e9:a1:48:db:87:6f:0b:
         f8:e6:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:33:47 2024 by rpki-client on console-ams.rpki-client.org