Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
File:                     t6nDTT-EPNsDW3wws-hOIkElIsU.cer (raw, json)
Hash identifier:          OAHODFsuIpyBPcFGksxY6VMpWkSyD0DNmpi/apz3xFA=
Subject key identifier:   B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D3DA84F64C786ABEABB35A77262EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 41666
                          IP: 91.216.79.0/24
                          IP: 2001:67c:8e4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:3d:a8:4f:64:c7:86:ab:ea:bb:35:a7:72:62:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:16:44:17:ab:55:e4:74:f6:df:db:56:7d:
                    c6:e3:55:14:10:c6:cc:0f:e9:b9:84:b0:a0:40:f4:
                    6e:4e:2f:37:57:a1:a4:a6:0d:ee:ff:27:6a:b0:b4:
                    65:c9:7f:47:c8:95:d0:2e:50:f7:f4:29:84:f3:b1:
                    86:6b:1a:09:21:81:ff:93:f6:cb:85:0f:8c:c6:64:
                    3f:7c:86:eb:9a:ec:ef:75:01:c1:2e:11:7a:70:f6:
                    68:03:90:32:0f:10:d9:33:67:3f:97:b7:5d:f0:fc:
                    c9:30:b4:cb:89:51:aa:43:11:b6:ce:57:30:09:ad:
                    b7:90:34:b5:92:74:1c:cc:c4:55:45:fd:f7:84:b2:
                    19:46:01:3e:3d:c2:77:42:82:ff:41:96:35:29:62:
                    62:d4:b8:27:33:73:66:b0:84:38:61:bc:f4:89:56:
                    18:82:88:40:be:26:ea:0f:94:4b:af:f6:17:b5:d7:
                    91:18:61:f0:a5:97:33:7d:ae:2c:ee:8a:12:2e:c6:
                    fd:01:2c:3a:fb:0d:e6:12:77:18:a3:a6:a8:20:13:
                    7f:45:f8:0d:5f:d4:81:6a:86:f6:c8:ea:e7:50:c9:
                    fa:1c:fb:74:7d:c8:73:b4:8d:2a:3a:15:1e:30:10:
                    5b:3a:ad:1b:d7:2d:3b:6b:0f:16:eb:57:14:e6:72:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.79.0/24
                IPv6:
                  2001:67c:8e4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41666

    Signature Algorithm: sha256WithRSAEncryption
         00:ac:5c:fa:4a:cb:fb:58:2b:05:ad:60:a9:7f:cb:75:40:46:
         1d:d1:71:61:01:82:3c:2a:cc:4c:4d:61:91:25:76:92:3a:34:
         de:92:7b:eb:b2:5e:67:b9:c2:8d:16:ef:6f:2f:3f:f0:99:31:
         f3:01:b8:7b:d0:31:58:94:67:e4:fd:c9:17:1b:d3:8b:dd:75:
         92:f1:be:50:47:dc:e4:83:4f:8c:dc:8a:04:63:b0:89:c9:d4:
         80:85:51:e0:2c:d4:ed:08:e0:a9:fc:91:ac:5c:e0:aa:f7:9c:
         7d:e4:23:73:87:86:2e:7d:23:d8:74:94:f0:33:fc:aa:27:fc:
         98:ab:cb:89:45:12:0c:f4:39:e6:80:2f:e3:b8:47:7b:19:81:
         07:93:dd:fe:cb:99:1a:de:8c:99:60:f1:0f:75:b1:26:26:d5:
         8b:25:e2:a8:31:76:36:a9:3b:d5:c7:cc:e0:1c:28:7b:e9:f9:
         cc:d4:89:c7:a3:01:6f:c9:33:f7:23:4b:6b:8e:07:30:68:78:
         21:fb:f1:27:32:c6:68:a0:15:09:14:84:6e:9a:66:1e:41:da:
         35:4e:42:4f:97:23:7a:77:88:be:fc:e5:0d:16:d7:d7:33:c0:
         a4:bc:86:47:db:fd:20:1f:bf:54:0e:18:df:5c:33:28:c2:5b:
         c6:c5:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:47:14 2024 by rpki-client on console-fra.rpki-client.org