Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer
File:                     m09V0lykSIboSjxNmCyNNeVqFpw.cer (raw, json)
Hash identifier:          HPM9NzLsQKnMtMq+lW1YIXVV3/nohenhUdoerugHZBU=
Subject key identifier:   9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CF11DD7F04A627195D46E927B288A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
caRepository:             rsync://rpki.co/repo/AS202400/3/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202996

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:f1:1d:d7:f0:4a:62:71:95:d4:6e:92:7b:28:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3f:50:c9:eb:0e:7f:f1:f1:fe:02:51:98:1f:
                    be:a9:6b:98:e9:fd:2f:2f:47:3d:f4:a2:27:47:8d:
                    f7:76:ab:e6:5c:84:ba:5f:8b:5d:d0:16:e9:e0:f5:
                    27:dd:0f:ac:9a:a8:e1:46:a2:c8:7f:5c:92:5a:08:
                    9a:f7:47:f5:bc:03:9d:c5:6a:f3:e5:b8:04:f2:d9:
                    5b:0a:2a:dd:49:4b:07:f6:86:d2:1c:74:54:c8:44:
                    77:44:45:10:b8:1d:87:c5:32:79:56:a1:da:1d:23:
                    ff:87:39:cc:3d:75:b6:11:fa:cb:e7:af:50:d5:3b:
                    fa:dd:18:64:a2:e7:5a:60:f5:f7:0d:79:01:4a:f7:
                    a2:83:74:50:c0:7e:0f:3d:fd:9b:2a:da:23:ec:97:
                    ab:10:97:48:67:0a:97:83:d2:ec:ff:ec:b3:3b:84:
                    7a:ea:75:f9:30:a3:52:d3:5f:2d:ba:5f:5f:43:5e:
                    e1:a8:0d:7a:9e:38:91:93:31:be:17:9e:25:ad:17:
                    15:a8:c5:fb:ce:5a:0e:f6:72:f4:fd:80:20:fc:53:
                    13:0a:d0:1a:58:44:ab:61:78:80:c5:2e:2f:ba:46:
                    fe:15:30:9c:22:88:86:ff:f2:1a:9e:0d:06:fb:96:
                    ef:d8:90:ff:51:35:e5:34:b4:bb:64:4e:bb:3b:ce:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS202400/3/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202996

    Signature Algorithm: sha256WithRSAEncryption
         41:de:36:ff:ae:a1:34:ba:81:a3:68:e7:b3:1e:fd:5e:d7:56:
         eb:17:29:20:42:70:cd:4a:b0:21:88:9e:f0:cb:26:d4:56:16:
         d8:d7:1c:98:d9:f4:f7:11:91:5e:f1:23:13:02:9a:d8:8f:b5:
         19:98:cc:c6:cb:10:c7:49:e0:51:e8:98:60:e5:36:74:9a:fa:
         25:9c:6f:87:d1:63:2e:7a:3d:ec:78:c3:14:97:3d:49:42:21:
         dc:cc:ba:70:aa:2e:9d:e9:9b:d0:98:13:7c:6a:5d:f4:b1:51:
         21:b7:30:ff:b1:5d:7e:be:e1:6b:26:2e:5b:2a:80:d6:7e:86:
         99:b1:7b:ad:b2:6c:26:42:06:e2:2f:16:96:81:80:6d:5c:54:
         d6:a6:ff:ca:8e:91:47:68:e3:51:17:7f:4d:67:cc:79:6a:b9:
         3d:64:6e:8a:0d:05:2b:54:48:a2:80:98:d3:9e:85:4f:a3:aa:
         8b:9d:78:e2:2f:90:07:e6:cc:63:e8:f2:a0:42:c7:57:fb:39:
         fd:2b:59:26:de:fe:2f:cd:eb:83:65:a4:4d:6b:45:e6:ee:fe:
         02:6a:e8:01:ae:b1:50:4e:0c:e2:52:fc:56:a5:db:d8:12:b9:
         4c:f6:b8:c4:d2:b6:00:42:a2:40:f4:ce:0c:46:73:22:c0:9a:
         bd:30:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 01:41:41 2024 by rpki-client on console-fra.rpki-client.org