Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
File:                     sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer (raw, json)
Hash identifier:          MqtNxoWGzFInF2LbsZjzKBh2P1yAPWHxtnWhJswdul4=
Subject key identifier:   B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC49373C70DBB40ACF7C92EBBBBA626F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:46 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210775
                          IP: 2001:67c:848::/48
                          IP: 2001:67c:84c::/48
                          IP: 2001:67c:850::/48
                          IP: 2001:67c:854::/48
                          IP: 2001:67c:858::/48
                          IP: 2001:67c:85c::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:73:c7:0d:bb:40:ac:f7:c9:2e:bb:bb:a6:26:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:f2:6a:cc:9e:0f:c6:31:a9:87:f8:b1:f4:
                    ef:aa:73:cd:35:0d:f9:db:cd:7c:63:bb:51:90:90:
                    ca:3e:08:7d:c8:8e:36:be:bc:a5:be:e3:9d:90:b6:
                    90:0b:07:ee:08:65:70:69:cf:4e:38:c2:2d:42:88:
                    a8:01:58:e4:a5:ac:17:74:8a:8a:03:cb:54:68:fa:
                    70:3b:43:6a:52:5e:11:32:77:50:07:f4:bf:7d:92:
                    eb:3c:86:46:2e:94:ca:0e:40:f8:f5:94:0d:4a:52:
                    4f:16:a2:27:4d:bb:e0:7c:81:52:40:de:f7:7c:33:
                    03:67:78:06:8d:ae:90:75:e4:6f:03:94:b1:e5:04:
                    f0:13:f4:b8:de:a3:b0:c6:f6:8a:9a:13:b0:20:39:
                    2f:0e:bb:77:25:47:cb:ac:52:dc:a8:8e:03:ac:0d:
                    95:84:b0:0c:b8:e2:a3:18:e0:a1:76:42:0e:32:05:
                    ba:63:8b:54:06:02:29:5a:e5:af:2a:42:d2:f6:ee:
                    79:bb:af:96:49:10:e7:96:32:47:82:a7:7f:a1:47:
                    dc:ae:b3:d7:74:db:c6:b8:5d:9d:01:4e:c3:0d:e2:
                    05:76:9b:a5:b9:92:43:96:46:92:9f:df:e9:3c:e5:
                    73:67:1d:a4:5a:01:a8:3b:99:51:bf:e4:05:a2:c9:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:848::/48
                  2001:67c:84c::/48
                  2001:67c:850::/48
                  2001:67c:854::/48
                  2001:67c:858::/48
                  2001:67c:85c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210775

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:be:72:75:6e:f7:ff:ab:55:6e:c4:5a:f3:1d:63:4c:b7:
         e6:34:91:bf:14:70:2c:2b:73:12:25:91:ff:75:f9:d9:6b:15:
         92:a1:f3:a2:26:2e:6b:3e:54:64:7e:4d:8e:c6:cc:d9:ed:35:
         fc:75:eb:ea:4f:31:88:c8:9c:f3:33:e2:53:be:2d:bc:52:4e:
         99:6c:ec:da:43:ad:aa:fc:9f:f2:f2:ef:67:14:df:30:0d:1b:
         13:7d:a0:69:e9:3d:74:83:f9:f3:15:ff:d5:0d:d5:00:ea:ce:
         6e:f7:62:2d:67:d8:88:0b:9a:e0:4d:f4:e2:3f:19:88:f6:cf:
         6b:0e:f5:56:11:1b:ed:28:35:9c:8c:1e:a1:14:20:4c:e8:d3:
         e2:70:67:8e:69:05:6e:5d:ed:bc:22:03:4d:7b:87:c1:52:d2:
         fd:01:31:49:36:31:b6:43:09:f6:99:df:ce:1d:95:a9:58:d5:
         24:9a:75:a2:ce:43:28:8f:83:d5:30:0c:2d:e5:4d:3c:01:a8:
         c8:67:fb:99:bc:d0:36:9e:11:2f:75:f6:45:7f:3c:04:8d:02:
         8d:4d:11:26:a5:af:70:16:6b:d8:82:69:67:76:af:fa:c9:40:
         13:c3:2f:76:7a:32:71:26:43:a9:db:f2:ae:c5:0f:d3:4b:98:
         03:08:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:34 2024 by rpki-client on console-fra.rpki-client.org