Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
File:                     oBocfbuaFXGlv0kkqz_FBJMUX08.cer (raw, json)
Hash identifier:          lNh5Xz56L8Ez8XkdX0ZQg6pFoZwcP75X97+drWc6WxA=
Subject key identifier:   A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B848DE4BDC81D4C8C4E5B83EC812AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:30:15 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 5582
                          AS: 198788
                          IP: 91.239.90.0/24
                          IP: 185.113.32.0/22
                          IP: 185.182.224.0/22
                          IP: 2001:67c:2e50::/48
                          IP: 2a0a:fa80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:48:de:4b:dc:81:d4:c8:c4:e5:b8:3e:c8:12:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:30:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:22:9f:ef:96:10:d7:bb:29:4c:d4:9e:5d:
                    d2:e8:1a:e7:7c:95:85:39:16:24:ad:9a:65:81:af:
                    f5:45:4d:9f:c1:70:ed:7a:ab:0e:c0:73:cc:26:ad:
                    72:26:a7:3e:bf:7d:d1:d8:0b:79:52:b6:16:3c:f6:
                    e2:2e:e8:f1:7f:27:05:c3:2a:9f:9e:b3:a4:2c:b5:
                    b4:cf:4a:e4:2d:ed:ad:5d:c1:73:b1:e8:6b:af:c0:
                    e9:2c:6a:d2:0c:3a:62:b0:91:1e:fd:15:bf:44:4f:
                    9f:97:51:4c:59:21:62:b1:bd:5d:dc:c5:9e:fe:90:
                    cd:27:97:ad:06:6b:96:e7:3b:a3:03:1f:18:19:8d:
                    15:c7:bc:2f:1a:c9:71:dd:f9:8e:b1:8b:a1:b5:3d:
                    f5:6b:02:48:f7:ad:bd:24:af:07:d2:9c:f1:cc:de:
                    71:88:72:1f:78:3c:87:26:31:e6:89:ad:78:48:7d:
                    0c:dc:16:1c:bc:6e:a1:94:86:71:84:81:24:1d:28:
                    00:69:21:e5:a7:8f:76:94:c9:cc:bb:aa:cf:be:fd:
                    9d:13:80:af:3b:9b:1a:78:94:2f:37:0c:f4:ea:9f:
                    40:58:30:f5:9d:a0:64:9a:2c:fb:24:63:67:11:33:
                    5c:1c:2d:92:68:0f:93:53:86:bc:36:0a:1d:e0:cc:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.90.0/24
                  185.113.32.0/22
                  185.182.224.0/22
                IPv6:
                  2001:67c:2e50::/48
                  2a0a:fa80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5582
                  198788

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:99:c2:0b:66:aa:10:e4:f7:63:b3:9d:f1:df:b4:43:8c:
         df:2f:9d:e5:e3:8f:34:df:e6:60:4d:e6:cd:cf:91:9a:ba:5b:
         e9:90:c6:9f:88:7c:60:b8:f7:b3:5c:eb:9a:24:f8:7c:1b:19:
         98:cb:f4:2e:f2:86:a3:94:eb:f2:16:60:5d:61:3c:6a:ae:44:
         16:9f:9d:bd:e0:96:69:ff:df:c8:85:a3:2a:16:d4:b8:63:50:
         c1:10:11:f0:53:24:4e:fd:05:bd:27:53:cd:00:84:11:5f:13:
         a1:0a:2f:44:f7:98:68:d3:ec:cf:a8:14:5d:44:40:b1:20:46:
         da:4a:87:c9:d5:e3:91:f0:68:80:40:8e:ad:b0:10:66:cf:ff:
         bb:10:7a:a7:4a:aa:76:74:3e:1a:fc:4b:dc:09:f8:2d:73:80:
         cc:8a:b4:c3:85:92:1e:cc:4c:dc:3f:9d:b2:4a:f2:96:e0:b2:
         a3:c5:f1:ef:41:53:4a:61:5b:89:35:d8:62:2a:55:66:7f:66:
         0c:17:c1:5e:84:01:14:c9:0e:e4:99:23:cb:ff:b1:43:ac:3a:
         84:41:fa:15:fd:ce:e2:1b:f8:59:2c:01:7c:ca:ab:97:ef:1b:
         a5:14:98:06:7a:4d:e5:26:19:cc:67:2d:a1:20:a7:ba:00:9c:
         47:6f:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:32 2024 by rpki-client on console-ams.rpki-client.org