Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sy4-N1Phw0647Ando2PwbGe324o.cer
File:                     sy4-N1Phw0647Ando2PwbGe324o.cer (raw, json)
Hash identifier:          IHjNWO44EucDS6Ltk84duIEs0Kgb+frcQKzNt7PEHtk=
Subject key identifier:   B3:2E:3E:37:53:E1:C3:4E:B8:EC:09:DD:A3:63:F0:6C:67:B7:DB:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7B9B6E3A3510161955C77B6184B9FEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/0/B32E3E3753E1C34EB8EC09DDA363F06C67B7DB8A.mft
caRepository:             rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/0/
Notify URL:               https://pub.krill.ausra.cloud/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 01:11:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60234
                          AS: 197993

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:b9:b6:e3:a3:51:01:61:95:5c:77:b6:18:4b:9f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:11:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b32e3e3753e1c34eb8ec09dda363f06c67b7db8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:33:22:f1:7f:c1:fc:7c:ad:b0:cf:22:6b:
                    2d:dd:54:32:ae:41:3c:4d:95:8d:94:c9:9d:48:ea:
                    4a:a4:dd:3b:77:83:b2:01:46:3d:0e:00:72:90:d7:
                    27:5f:9d:c0:a5:63:56:16:be:ab:76:37:90:38:b5:
                    99:f6:4b:45:31:d5:8a:f5:e5:a1:7f:bc:d1:93:16:
                    88:cc:5c:32:2d:1d:ca:72:79:80:bf:fe:64:1a:82:
                    29:c7:13:eb:bd:60:bd:b2:e2:30:48:e4:62:4d:d6:
                    47:28:84:f0:a6:62:97:3f:d1:a3:c3:90:23:85:5f:
                    2e:ff:e4:17:84:85:78:d9:61:f0:bd:f9:48:69:e1:
                    21:c9:64:9f:a4:4c:9d:f5:bd:62:fc:d7:18:d5:5f:
                    2d:d7:14:e2:bf:b5:40:05:b6:97:f2:62:b5:52:b9:
                    96:3a:1d:9b:b3:c7:62:12:88:2a:9b:e7:3d:dc:14:
                    99:83:55:95:6b:6b:38:88:b3:5a:1d:3b:86:d5:e2:
                    0c:cb:12:8c:dc:43:2b:e0:6d:eb:fb:35:7f:3f:45:
                    43:99:db:91:d7:30:15:0a:bf:5d:12:e8:16:e3:49:
                    60:09:ed:8a:68:fc:57:b9:7a:f9:98:79:03:05:c3:
                    f1:8a:35:33:0d:ba:50:ca:46:8b:8f:b6:a5:3b:34:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:3E:37:53:E1:C3:4E:B8:EC:09:DD:A3:63:F0:6C:67:B7:DB:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/0/
                RPKI Manifest - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/0/B32E3E3753E1C34EB8EC09DDA363F06C67B7DB8A.mft
                RPKI Notify - URI:https://pub.krill.ausra.cloud/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60234
                  197993

    Signature Algorithm: sha256WithRSAEncryption
         2e:7e:a5:04:e3:25:4a:4c:2d:45:c7:28:1e:ab:6b:4a:cc:71:
         8c:62:93:41:86:01:da:ab:80:87:70:07:a4:40:74:d4:3a:03:
         26:e6:73:e4:74:27:31:34:8f:57:90:82:2a:9c:1d:dd:e3:21:
         c5:3d:17:dc:84:38:30:1c:14:7f:21:e9:27:54:c2:1d:dd:e3:
         fa:f3:f7:aa:af:d1:2c:53:b5:72:67:08:52:b4:44:82:4c:2b:
         6f:b4:a8:1f:ef:c7:b5:c6:75:f1:c1:cb:7a:d7:98:79:8c:9a:
         82:b4:a9:df:14:c7:4e:5b:39:2d:b9:15:c1:e7:10:5a:e8:81:
         6e:c6:17:20:d7:0b:ae:09:5c:07:34:0c:b2:ff:e4:54:e6:99:
         1e:94:c3:71:ee:1d:80:63:b5:8e:7b:e2:d5:3e:81:76:73:3b:
         11:23:6a:18:df:79:11:b5:ee:cb:b7:84:61:b7:af:00:39:43:
         c6:79:e5:b7:e7:60:c5:31:b4:c8:04:67:fb:e6:bb:de:fa:b9:
         85:37:24:9a:91:ca:16:3a:91:3e:8e:fe:80:0c:e9:3d:37:62:
         23:43:72:e8:bf:33:06:69:dc:8f:ca:66:53:c4:d6:06:62:2d:
         9d:45:24:34:93:ba:03:57:96:45:4c:7c:05:00:64:64:f4:6c:
         27:6d:43:24
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgISAYzHubbjo1EBYZVcd7YYS5/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDExMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzJlM2UzNzUzZTFjMzRlYjhlYzA5ZGRhMzYzZjA2YzY3YjdkYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiUzIvF/wfx8rbDPImst3VQyrkE8
TZWNlMmdSOpKpN07d4OyAUY9DgBykNcnX53ApWNWFr6rdjeQOLWZ9ktFMdWK9eWh
f7zRkxaIzFwyLR3KcnmAv/5kGoIpxxPrvWC9suIwSORiTdZHKITwpmKXP9Gjw5Aj
hV8u/+QXhIV42WHwvflIaeEhyWSfpEyd9b1i/NcY1V8t1xTiv7VABbaX8mK1UrmW
Oh2bs8diEogqm+c93BSZg1WVa2s4iLNaHTuG1eIMyxKM3EMr4G3r+zV/P0VDmduR
1zAVCr9dEugW40lgCe2KaPxXuXr5mHkDBcPxijUzDbpQykaLj7alOzQWGQIDAQAB
o4ICejCCAnYwHQYDVR0OBBYEFLMuPjdT4cNOuOwJ3aNj8Gxnt9uKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEZBggrBgEFBQcBCwSCAQswggEHMEsGCCsGAQUFBzAFhj9y
c3luYzovL3B1Yi5rcmlsbC5hdXNyYS5jbG91ZC9yZXBvL0F1c3JhLVN5c3RlbXMt
SW50ZXJuYWwtQ0EvMC8wdwYIKwYBBQUHMAqGa3JzeW5jOi8vcHViLmtyaWxsLmF1
c3JhLmNsb3VkL3JlcG8vQXVzcmEtU3lzdGVtcy1JbnRlcm5hbC1DQS8wL0IzMkUz
RTM3NTNFMUMzNEVCOEVDMDlEREEzNjNGMDZDNjdCN0RCOEEubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3B1Yi5rcmlsbC5hdXNyYS5jbG91ZC9ycmRwL25vdGlmaWNh
dGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsu
Y3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAOtKAgMDBWkwDQYJKoZIhvcNAQELBQADggEBAC5+pQTjJUpMLUXHKB6r
a0rMcYxik0GGAdqrgIdwB6RAdNQ6Aybmc+R0JzE0j1eQgiqcHd3jIcU9F9yEODAc
FH8h6SdUwh3d4/rz96qv0SxTtXJnCFK0RIJMK2+0qB/vx7XGdfHBy3rXmHmMmoK0
qd8Ux05bOS25FcHnEFrogW7GFyDXC64JXAc0DLL/5FTmmR6Uw3HuHYBjtY574tU+
gXZzOxEjahjfeRG17su3hGG3rwA5Q8Z55bfnYMUxtMgEZ/vmu976uYU3JJqRyhY6
kT6O/oAM6T03YiNDcui/MwZp3I/KZlPE1gZiLZ1FJDSTugNXlkVMfAUAZGT0bCdt
QyQ=
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:23:06 2024 by rpki-client on console-ams.rpki-client.org