Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
File:                     uRHH7b8dPMT7B1OBo392JWuHKF0.cer (raw, json)
Hash identifier:          yUd3ng9BqWdtTfE9DO3Wxp+vWO7gY5NrPLi77/6fJxo=
Subject key identifier:   B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B71BA4C1FB52514C8238F509568676
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:30:06 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 20751
                          AS: 25101
                          AS: 47592
                          IP: 80.64.128.0 -- 80.64.139.255
                          IP: 83.216.208.0/20
                          IP: 185.136.212.0/22
                          IP: 193.111.237.0/24
                          IP: 2a00:a460::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:1b:a4:c1:fb:52:51:4c:82:38:f5:09:56:86:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:30:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:61:6a:1c:b3:12:4d:11:2d:70:2d:1a:db:
                    96:54:4f:66:58:ca:94:42:2a:e0:c5:b2:35:f0:ab:
                    4e:76:e5:48:25:60:cc:ce:61:96:ef:1f:03:4f:cb:
                    2c:20:da:38:e3:68:4e:0c:56:fb:b4:ec:bf:c0:10:
                    91:d6:32:52:65:68:88:bf:72:4a:2b:79:28:20:87:
                    6a:22:15:34:78:69:d7:82:ef:ea:fe:72:ac:62:d1:
                    10:69:45:7f:a8:ec:fa:6b:b4:f9:a1:3c:85:83:d2:
                    1e:9a:dd:7a:b0:0e:a4:3f:e1:23:38:f2:1b:c9:2a:
                    fe:8b:fc:ed:40:2b:e1:18:9d:7e:38:69:dc:36:28:
                    97:01:5f:70:43:bf:15:bd:40:1b:a6:96:44:ee:bc:
                    cb:10:38:ef:27:bd:c5:34:1e:95:4c:e0:a6:95:3d:
                    bb:6d:77:81:c6:3f:18:56:99:5d:4b:89:01:82:10:
                    1c:05:60:0d:d9:66:a9:64:99:eb:33:d3:12:3b:10:
                    fa:e5:b3:52:41:af:58:ef:48:f3:42:d1:db:10:6d:
                    fe:c4:0a:f0:61:f0:88:bb:75:31:0e:c9:ce:81:96:
                    50:70:1e:6b:d5:1b:0a:8e:a7:cd:ab:18:f2:56:a5:
                    4f:4e:80:7f:31:9e:c1:da:e6:c5:51:ef:ed:b5:87:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.64.128.0-80.64.139.255
                  83.216.208.0/20
                  185.136.212.0/22
                  193.111.237.0/24
                IPv6:
                  2a00:a460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20751
                  25101
                  47592

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:89:d8:b1:f1:7e:e2:78:98:d7:93:5e:00:16:40:ed:77:
         c6:4c:99:72:02:9f:fc:d8:51:8f:e7:20:25:ca:40:d0:27:fb:
         39:74:43:e5:94:c8:91:b9:a3:db:7e:e0:08:51:7a:00:89:1e:
         d2:35:39:ea:f9:2c:45:09:dd:a7:9d:74:9a:b1:2d:73:f1:59:
         6c:a8:c1:f2:5e:5a:da:72:ab:67:41:7e:b7:1e:b5:83:eb:e0:
         25:21:db:0e:f4:6d:a9:74:d5:e5:ef:0b:b8:93:ec:5f:39:ac:
         cf:d4:1d:e9:ff:f9:02:c8:3c:16:79:6f:32:d5:d8:ed:7a:ec:
         2d:3c:4f:33:17:71:2e:7a:6f:b1:ff:dc:83:94:c1:35:f4:cf:
         04:78:0a:6a:03:7c:80:aa:58:6b:43:8b:59:41:b7:46:e7:2d:
         fb:c8:a0:96:3d:85:83:f4:56:d9:39:d4:97:e2:ed:86:ba:46:
         15:c2:67:bb:b4:05:75:80:3e:70:93:46:2d:b3:04:e8:5e:88:
         51:35:60:86:fe:67:3e:48:d6:10:a3:df:3d:94:70:86:c2:75:
         45:f8:25:1d:f0:bf:f2:36:21:24:72:37:17:b9:39:bb:13:f7:
         4a:54:d4:d8:a2:74:31:1a:5b:f8:95:9c:b3:52:6c:db:92:5f:
         93:b1:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:48:24 2024 by rpki-client on console-fra.rpki-client.org