Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
File:                     savnP_2tb4YrC92JTUQyfCyUp9U.cer (raw, json)
Hash identifier:          aM+pzLGIVEVoDG1INKtFIgUQjlULAXD8Xq8YEiXtqvs=
Subject key identifier:   B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190E0B53785C055F5898ADB4D0A375942DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 23 Jul 2024 17:48:10 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215165

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e0:b5:37:85:c0:55:f5:89:8a:db:4d:0a:37:59:42:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 23 17:48:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:fb:9f:39:9b:fd:ff:7b:df:14:79:81:01:
                    e0:c0:6e:38:5a:41:22:f1:10:d8:eb:a0:c0:46:78:
                    c8:bb:45:13:2e:66:aa:bc:e7:97:d4:95:c5:47:62:
                    f4:19:ae:a0:20:98:68:e9:92:95:c5:62:81:83:60:
                    34:ef:35:7d:0f:25:87:04:9a:a4:59:d4:7d:d2:ca:
                    d7:83:9e:cd:51:2e:7a:70:66:6b:e2:db:b5:50:25:
                    0c:1b:f0:5e:2e:67:c1:fa:d1:0a:a7:84:dd:a7:38:
                    ca:d9:7f:2d:c6:db:c7:3e:ba:4d:1c:76:a1:25:20:
                    2f:30:fa:86:70:51:86:5f:5d:66:d5:f4:e8:52:33:
                    65:07:08:8a:d9:ce:04:fa:fb:e1:bf:f0:78:b3:2c:
                    a9:14:d8:38:c3:f2:a6:6a:7d:d3:4d:4f:1a:45:65:
                    dd:d8:c7:23:c9:0b:b0:60:03:a8:c8:e0:a7:17:9d:
                    f3:73:33:3e:dc:e2:d8:58:3f:f4:14:32:6f:74:8d:
                    d1:f3:c4:20:dd:fb:c6:15:51:59:2b:7b:cb:b2:2c:
                    09:97:f3:ee:82:31:25:2c:e0:12:eb:cb:56:2f:f7:
                    52:81:38:c8:21:97:1e:96:17:15:88:dd:46:32:d9:
                    e5:b6:bf:65:da:51:31:1a:7c:fc:6d:c8:1c:0a:24:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215165

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:52:a5:f5:dd:1f:3d:cc:c3:69:95:da:45:4c:1e:0d:5d:
         18:c7:14:f0:86:4a:d8:f9:d9:30:6c:db:04:25:43:61:ed:62:
         bb:d5:56:75:0b:16:c6:ac:32:83:c5:af:9e:a3:91:29:ac:d7:
         02:ca:db:eb:9f:b1:da:d0:dd:9d:65:74:bb:fe:fa:de:fd:9e:
         4f:6e:5d:a1:c4:16:23:18:be:56:77:0a:91:c3:dd:ec:8a:a8:
         a6:b6:c6:57:85:88:a0:e1:2f:e2:b7:00:ff:71:89:66:7c:e9:
         41:76:22:ec:c7:8d:c2:9e:19:b1:7e:be:71:9d:bd:87:f0:33:
         f5:9a:64:b3:45:5d:1d:d2:7a:5d:3c:1e:b6:9d:1c:ef:11:58:
         6b:96:81:9f:9e:4a:2b:e0:aa:67:6e:98:35:1d:ea:8b:9c:b1:
         68:c8:7f:68:c7:89:61:5f:8a:07:6f:f0:eb:de:90:a1:8c:51:
         27:ee:2f:45:00:af:f4:8e:a1:e8:41:d1:79:48:db:e4:53:b8:
         b0:b6:60:44:1e:d4:29:4c:a1:40:50:a2:4a:61:3b:67:58:2d:
         d0:2d:90:55:14:d3:4a:cd:41:b7:17:37:03:36:45:e0:0f:5f:
         a9:e4:14:81:99:ab:03:50:c6:48:33:d2:7d:2f:3e:27:a3:18:
         7f:17:bc:f6
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZDgtTeFwFX1iYrbTQo3WULfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzIzMTc0ODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWFiZTczZmZkYWQ2Zjg2MmIwYmRkODk0ZDQ0MzI3YzJjOTRhN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdj7nzmb/f973xR5gQHgwG44WkEi
8RDY66DARnjIu0UTLmaqvOeX1JXFR2L0Ga6gIJho6ZKVxWKBg2A07zV9DyWHBJqk
WdR90srXg57NUS56cGZr4tu1UCUMG/BeLmfB+tEKp4TdpzjK2X8txtvHPrpNHHah
JSAvMPqGcFGGX11m1fToUjNlBwiK2c4E+vvhv/B4syypFNg4w/Kman3TTU8aRWXd
2McjyQuwYAOoyOCnF53zczM+3OLYWD/0FDJvdI3R88Qg3fvGFVFZK3vLsiwJl/Pu
gjElLOAS68tWL/dSgTjIIZcelhcViN1GMtnltr9l2lExGnz8bcgcCiTI7QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLGr5z/9rW+GKwvdiU1EMnwslKfVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzkxOWIw
MS03YTIwLTRjMDAtODZhZi1lOTE5YzM3ZTRlYmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvOTE5YjAx
LTdhMjAtNGMwMC04NmFmLWU5MTljMzdlNGViYy8xL3Nhdm5QXzJ0YjRZckM5MkpU
VVF5ZkN5VXA5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNIfTANBgkqhkiG9w0BAQsFAAOCAQEAqEFSpfXdHz3M
w2mV2kVMHg1dGMcU8IZK2PnZMGzbBCVDYe1iu9VWdQsWxqwyg8WvnqORKazXAsrb
65+x2tDdnWV0u/763v2eT25docQWIxi+VncKkcPd7IqoprbGV4WIoOEv4rcA/3GJ
ZnzpQXYi7MeNwp4ZsX6+cZ29h/Az9Zpks0VdHdJ6XTwetp0c7xFYa5aBn55KK+Cq
Z26YNR3qi5yxaMh/aMeJYV+KB2/w696QoYxRJ+4vRQCv9I6h6EHReUjb5FO4sLZg
RB7UKUyhQFCiSmE7Z1gt0C2QVRTTSs1Btxc3AzZF4A9fqeQUgZmrA1DGSDPSfS8+
J6MYfxe89g==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:22:43 2024 by rpki-client on console-ams.rpki-client.org