Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.cer (raw, json)
Hash identifier:          mOtw7li0yPuhCSkRU7rIQfaFRggsX/HQHiYFYOpB9G4=
Subject key identifier:   B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F32FD19E0E65F448ED6D319CD84EA7930
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 May 2024 07:09:59 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 41870
                          IP: 46.253.0.0/21
                          IP: 91.132.60.0/22
                          IP: 93.94.140.0/24
                          IP: 93.94.142.0/24
                          IP: 95.169.196.0/24
                          IP: 95.169.202.0/23
                          IP: 185.1.156.0/24
                          IP: 185.7.219.0/24
                          IP: 185.243.212.0/23
                          IP: 2001:7f8:e8::/48
                          IP: 2a09:be80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:fd:19:e0:e6:5f:44:8e:d6:d3:19:cd:84:ea:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 07:09:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:6d:f3:e8:d7:3a:ee:7b:93:70:cd:3a:a9:
                    c7:da:50:0a:b6:c2:fe:07:04:57:3f:fc:76:1e:bc:
                    ef:39:91:ef:b4:06:0f:13:bd:f7:e0:e1:0d:02:f1:
                    e8:ea:79:7b:20:de:a2:fa:9e:14:75:b9:28:3e:dc:
                    3f:ee:48:29:f4:86:ea:43:96:86:b4:5b:da:72:00:
                    10:ee:95:2b:cf:5a:92:a6:a9:35:23:79:01:c6:76:
                    02:d8:f0:ec:97:23:2f:5b:ef:c6:70:14:51:67:ae:
                    35:59:09:ca:81:68:cd:3a:0e:4d:87:5a:d3:90:6a:
                    68:69:f4:67:a8:0c:61:5d:21:5f:0e:e4:26:02:a8:
                    4d:47:d7:ea:a0:91:39:33:33:3b:33:7c:c9:72:d1:
                    d2:9d:bc:31:69:35:fa:aa:c4:ad:f1:22:9d:8a:4e:
                    40:c4:ed:82:0b:7e:ac:f3:16:ee:00:fe:9b:4b:8a:
                    16:9c:a8:5b:f8:75:09:b0:7c:c5:a6:22:31:66:c5:
                    0c:d2:69:a9:28:f2:b7:91:a0:73:ef:6e:c6:e4:d7:
                    73:12:7b:ce:48:ce:b5:6d:0f:99:f6:f2:b8:5b:d2:
                    8c:70:16:70:0d:50:de:60:e3:d7:30:5c:2d:5e:79:
                    02:2f:fe:23:6d:4d:8a:d8:9f:67:6a:2d:e4:f1:33:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.0.0/21
                  91.132.60.0/22
                  93.94.140.0/24
                  93.94.142.0/24
                  95.169.196.0/24
                  95.169.202.0/23
                  185.1.156.0/24
                  185.7.219.0/24
                  185.243.212.0/23
                IPv6:
                  2001:7f8:e8::/48
                  2a09:be80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41870

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:05:d7:8a:fc:2b:84:ee:2f:ca:90:7c:f3:f8:45:15:db:
         28:78:2f:93:28:9c:cf:3c:21:4c:68:a4:13:81:57:0d:78:14:
         74:35:f9:49:ff:cf:df:53:bf:85:a9:ba:6b:1d:aa:ae:d4:aa:
         33:5e:71:c7:00:f0:03:0b:ae:36:6d:6c:5d:b6:51:83:ea:b3:
         6b:7e:fe:11:ee:4b:57:12:4e:c3:e8:65:06:bb:09:96:a4:b9:
         7d:3e:ce:8d:8d:f6:84:fb:23:f5:18:9f:fb:21:d5:f0:26:73:
         e5:d2:78:e4:2f:1f:af:42:95:a9:d5:0d:28:60:db:9c:b0:81:
         cf:7c:29:11:d8:8c:82:95:09:49:56:7b:71:4a:5c:bb:ca:96:
         05:6c:4c:20:e6:60:91:d6:cf:d6:d9:41:0f:5d:be:1a:55:63:
         e8:ed:ff:8d:ea:ce:5e:e4:a7:eb:96:a6:de:52:c7:d4:0b:53:
         d0:3a:68:16:49:ad:24:31:1d:3a:8c:e0:e3:78:a5:b0:8c:8d:
         97:8e:f1:be:a6:1f:06:6b:d1:20:69:2f:81:4d:91:b5:7b:1c:
         03:60:f2:28:7f:a4:26:56:f7:96:7a:df:af:c8:93:ac:ea:8c:
         d9:76:0c:c2:6a:70:19:87:b6:58:14:44:75:4e:ee:4d:5d:ca:
         93:2c:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:03:23 2024 by rpki-client on console-fra.rpki-client.org