Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
File:                     m4Me6Uw3ubEVnH13MpNhgatUHYA.cer (raw, json)
Hash identifier:          NCFjvc6/jyCkDjH6TGzfC0g44MqbkCSADx6YzPKJqeY=
Subject key identifier:   9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA99FD81EA8FAE2A1E9E7E7C9B1BD565
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 14:35:38 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204704
                          IP: 185.206.88.0/22
                          IP: 2a0c:d880::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:99:fd:81:ea:8f:ae:2a:1e:9e:7e:7c:9b:1b:d5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:35:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:b1:c4:03:65:1c:bf:49:c2:9d:dd:c7:3f:
                    c4:2b:3a:29:80:29:95:8d:d1:33:93:6b:98:ea:ad:
                    e1:72:a0:89:d5:ed:92:57:e9:75:ff:7b:f6:1f:9e:
                    f2:6a:18:a2:9d:7b:df:6c:35:fb:f8:30:61:8d:c3:
                    d9:99:ec:8c:5b:12:31:cb:30:6b:92:b5:6c:cd:a2:
                    83:2e:94:79:07:30:bd:cb:d1:2b:9e:84:05:78:c2:
                    75:af:e4:d2:40:4d:18:5b:ce:80:de:c0:38:cc:63:
                    3f:11:52:cc:48:ed:dc:d1:f6:f8:37:8c:af:1f:8e:
                    12:e0:9d:ab:94:8e:1f:bb:26:34:8d:af:7e:d2:50:
                    4d:86:71:af:5c:8f:23:44:4f:ce:38:e7:41:dc:de:
                    76:13:cd:82:af:24:a8:49:4e:67:d1:49:12:1c:c2:
                    4b:36:30:20:2e:97:86:4c:16:ef:44:88:a0:a5:73:
                    11:9b:1b:47:5f:30:61:ef:9b:be:33:2b:c2:e9:b3:
                    3c:2a:83:24:0e:a8:1f:f7:26:12:5a:8d:d3:38:c7:
                    1a:44:e1:f7:5d:8c:e2:60:07:e9:be:07:96:37:82:
                    eb:19:c5:90:a6:5f:9d:f9:63:06:b2:b1:fc:e7:ae:
                    66:e1:ea:38:43:64:9e:ea:eb:e6:f7:f7:9d:a9:bf:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.88.0/22
                IPv6:
                  2a0c:d880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204704

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:13:d9:7f:7a:81:67:cc:e9:fe:43:0b:55:99:80:9c:92:
         40:bf:7c:07:6f:a5:21:0b:7b:30:e1:89:e4:b9:b7:31:c3:fe:
         d4:48:9e:75:55:c8:a5:7b:51:00:9b:10:24:a5:31:6b:da:34:
         0f:0a:a9:a9:8d:fe:41:33:80:bb:ca:8f:b2:7f:83:d0:e0:e8:
         c9:cf:97:7e:9d:16:41:1f:1a:66:36:ed:0e:07:ff:5a:35:26:
         11:65:b3:ba:3d:88:1a:24:c1:68:42:26:25:ab:4c:e1:70:6a:
         88:3f:99:d1:ce:98:13:fb:14:de:dc:23:e3:f0:4a:39:db:71:
         37:26:6b:7c:8a:be:e2:fc:9c:b5:d7:ba:ef:3e:f7:0e:15:8e:
         2a:9f:73:29:54:53:87:0c:c6:55:ea:2c:f0:03:c4:59:c3:35:
         b9:38:f7:a4:57:37:f3:96:74:72:38:9b:2b:52:f6:28:44:95:
         0e:53:d3:a4:35:17:e5:e0:87:2b:b3:b5:e3:bd:de:90:14:bc:
         93:99:90:d6:12:25:2d:25:d5:8a:50:5e:90:95:38:e1:f4:80:
         09:7a:f9:8b:d8:05:d7:f2:73:ac:24:b5:02:85:de:7b:20:19:
         b5:d7:21:79:3d:85:77:a0:ec:75:8a:a7:a2:ab:d5:bb:a0:f8:
         09:5c:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:12:40 2024 by rpki-client on console-ams.rpki-client.org