Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
File:                     stitAnqWdO3JNueMXU0bZJZNhEA.cer (raw, json)
Hash identifier:          vOLlHZ0glqDj9DN69/NRhYmTWQNSIIUph+b8X9xT5RE=
Subject key identifier:   B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94AF09575AB047BCD2783327A9BE58B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198895
                          IP: 45.140.133.0/24
                          IP: 46.229.241.0 -- 46.229.242.255
                          IP: 188.65.167.0/24
                          IP: 193.16.149.0/24
                          IP: 2a13:2580::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4a:f0:95:75:ab:04:7b:cd:27:83:32:7a:9b:e5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:e3:fe:82:22:96:6d:dc:ea:13:f2:e7:bd:
                    c2:10:b7:d4:2a:87:e2:d0:94:89:c4:15:76:b7:2a:
                    f6:ff:a6:a3:8b:15:5f:48:aa:e8:24:a2:3a:f5:e1:
                    09:1f:58:a7:00:e9:d0:75:47:04:be:da:d9:23:2a:
                    26:48:ea:5f:5a:df:8d:93:29:be:40:2d:7a:37:a1:
                    49:c8:35:aa:9d:64:ea:36:ad:3e:86:f8:37:54:c2:
                    f2:60:4c:90:11:14:7a:f1:f5:f7:77:d6:b1:2a:39:
                    4d:de:df:68:69:2c:a9:e2:9f:dd:43:d8:5a:67:81:
                    5e:67:d2:e1:70:0f:69:8d:77:c5:c8:fa:9e:66:5e:
                    81:9d:7e:b7:c0:c2:c4:19:72:91:45:92:6b:55:d1:
                    f6:07:a9:c3:26:c0:d9:43:e0:47:7a:aa:d3:45:2f:
                    fc:eb:10:d6:9c:9a:c9:e0:47:5c:0e:32:76:53:18:
                    5c:0e:ff:1f:59:0d:ef:73:11:57:46:10:70:92:2c:
                    4f:30:2b:b0:ec:23:af:64:f0:08:f0:f8:56:02:7a:
                    e2:59:ca:15:cf:47:45:51:66:a3:f9:6f:fa:f6:78:
                    81:04:69:15:cb:2d:9b:eb:e9:ce:58:db:9c:0c:6f:
                    ee:30:5d:18:9d:5c:4c:25:78:bf:11:78:dd:33:bf:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.133.0/24
                  46.229.241.0-46.229.242.255
                  188.65.167.0/24
                  193.16.149.0/24
                IPv6:
                  2a13:2580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198895

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:74:9c:20:e8:b3:7b:07:bb:0c:0d:01:47:3d:20:69:58:
         d0:aa:10:71:39:5c:5d:4a:7b:e0:31:04:65:33:58:56:58:da:
         72:28:83:46:87:28:e9:a5:a1:14:d1:6b:b4:1b:60:fa:1c:04:
         c1:f3:42:de:8e:e2:24:08:a3:91:1a:ee:ed:7b:ff:db:c6:6e:
         78:8c:2f:2e:f4:e3:bd:f9:0f:67:0e:da:07:dc:bb:af:5d:01:
         85:dd:e9:f4:76:07:28:72:09:02:a7:b4:6d:de:9b:ca:2c:5a:
         50:9a:a4:a8:7a:25:9e:b4:c5:e2:ff:97:ec:c3:9b:0d:19:ea:
         95:71:d9:cb:3d:b3:ee:8e:6b:12:3c:66:37:00:99:0c:c0:41:
         cb:82:30:44:bf:00:5a:d8:5f:6e:39:e7:1d:22:80:a9:e7:eb:
         e2:2d:28:77:6d:e8:aa:ed:94:c0:b7:50:00:31:82:9f:fe:88:
         e1:55:18:9a:4a:86:67:74:36:ba:a3:79:11:fa:ff:ae:ed:eb:
         bc:fe:9a:6a:e1:5b:27:00:08:c9:b0:a6:69:97:c5:bb:85:22:
         9b:e8:ee:49:67:9c:02:e6:cc:72:76:36:4b:93:6c:c2:7c:85:
         92:b5:32:47:28:94:06:0f:6d:78:cf:18:5a:1a:46:0c:84:f6:
         eb:e7:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:30 2024 by rpki-client on console-ams.rpki-client.org