Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
File:                     rVLCjvmlsikaumcayaZdj6rcVRg.cer (raw, json)
Hash identifier:          4JF9nPH37vWc1h0DACKDuzI2C0jx3zHYKKZhjQKU1Mc=
Subject key identifier:   AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC06ABC229ED712293F2449EA52161
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 29255
                          IP: 45.135.112.0/22
                          IP: 78.138.192.0/18
                          IP: 82.147.192.0/19
                          IP: 85.194.64.0/18
                          IP: 89.237.128.0/18
                          IP: 212.24.224.0/19
                          IP: 2a00:f580::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:06:ab:c2:29:ed:71:22:93:f2:44:9e:a5:21:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:99:bf:14:fb:99:ab:27:19:50:e6:76:15:
                    28:06:c8:43:5f:d3:dc:c6:bd:ca:3f:bf:bf:a4:55:
                    5f:4b:8f:ff:8b:76:fe:c0:1e:aa:ce:3b:5b:81:26:
                    69:4d:b9:43:da:72:ec:7c:a9:ee:41:78:33:2e:10:
                    bb:0a:e3:e7:75:c1:d9:0b:86:51:a2:03:e3:10:c7:
                    7a:b5:13:e1:7e:81:bb:b4:ba:73:65:d7:72:4d:08:
                    27:66:c8:62:cc:2f:e2:c0:e9:d7:3d:ea:43:aa:f7:
                    e3:99:34:2b:05:73:05:6f:d7:e5:8e:c1:bd:37:52:
                    d1:4b:37:61:4b:79:82:9f:5f:19:a8:96:e8:cc:86:
                    dd:23:2b:df:0a:d1:e0:28:0b:6a:b3:78:f7:2d:91:
                    f9:e9:88:22:b7:db:f1:38:cc:5a:95:db:fc:89:50:
                    fb:49:60:d9:b3:82:eb:0a:c9:2f:fc:f0:92:6a:de:
                    86:a1:ae:ff:09:dc:d5:af:2f:71:40:75:d5:eb:fa:
                    9a:99:ea:16:ba:84:0a:bd:02:62:70:d2:2c:25:34:
                    39:3f:09:47:3d:f2:0f:c9:d4:3c:29:07:b3:ff:a9:
                    4c:0c:7b:71:d2:4e:c3:8c:f2:2d:ed:20:4b:e2:f5:
                    05:ff:f6:91:27:c9:2d:8a:33:e1:20:39:5a:1c:aa:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.112.0/22
                  78.138.192.0/18
                  82.147.192.0/19
                  85.194.64.0/18
                  89.237.128.0/18
                  212.24.224.0/19
                IPv6:
                  2a00:f580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29255

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:07:e3:bb:32:ea:fa:02:46:f3:4e:30:7e:c9:8d:70:5a:
         af:67:3a:ee:33:7a:f0:3e:07:75:bf:49:1e:e0:8d:0f:3c:d0:
         b2:e0:8d:8e:4b:46:09:45:ca:c2:2f:29:24:31:e2:d4:b8:23:
         85:30:4b:b8:44:4a:98:bd:15:11:ae:d7:84:d1:d0:89:b0:00:
         7e:e8:25:6a:1e:6e:27:57:1e:8b:5a:66:b6:b0:c5:8a:29:35:
         72:d8:5c:55:f2:7c:72:32:37:11:e9:8f:c1:ef:07:5c:c6:b8:
         97:c3:09:73:4e:89:19:ad:88:21:d1:f2:79:2a:0e:6f:71:1b:
         be:3b:e4:19:5c:ce:25:a1:b6:3f:2d:68:6c:25:65:ce:c2:c0:
         ce:2a:02:ac:6f:0e:1b:b0:aa:80:74:03:d2:5e:94:89:7c:1f:
         78:b8:28:67:45:0c:a3:e9:59:fc:a2:37:15:3c:99:77:fa:7f:
         2e:85:a5:28:81:54:86:59:0e:6e:66:04:00:2e:30:a8:b6:e0:
         d7:86:b0:66:5c:4d:c4:05:e8:25:ff:3d:9f:92:1c:87:0f:03:
         80:b3:fe:3c:14:a6:07:83:9a:e5:9a:b5:a1:09:4a:67:1a:f6:
         af:c6:42:d3:9c:af:ba:25:55:54:84:94:71:82:f7:31:db:e0:
         3e:b1:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:39 2024 by rpki-client on console-fra.rpki-client.org