Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
File:                     uTYoo2ME473CH4U7s_rUPkhhpcU.cer (raw, json)
Hash identifier:          1Ggai2HYb0ldUPJV0feLuV0Ilik0v0hqqYztDc1Df00=
Subject key identifier:   B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BC55239CBD8364D501D6BB89AA8217
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204560
                          IP: 185.246.140.0/22
                          IP: 193.194.102.0 -- 193.194.104.255
                          IP: 2a0d:8380::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:55:23:9c:bd:83:64:d5:01:d6:bb:89:aa:82:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:95:39:b7:b3:18:55:19:04:db:a0:83:46:
                    52:df:62:49:3d:d7:e5:61:69:3d:40:19:a7:8c:47:
                    03:8e:44:a7:df:c5:56:39:2a:56:32:88:3b:f2:10:
                    43:9a:27:e2:51:1e:f0:f6:25:0c:75:49:6c:46:03:
                    7e:7a:c1:0c:74:22:98:48:e2:05:cc:07:78:b0:53:
                    9a:a7:c9:28:de:d0:4c:be:3a:bd:da:b9:ce:e4:e8:
                    d0:ac:ed:ae:16:c7:c7:bb:97:47:bb:7f:cd:a3:d6:
                    c6:03:56:00:f8:d5:b9:51:d0:16:54:68:3e:d1:bd:
                    43:53:39:a9:dd:cb:0a:c6:86:af:74:69:71:10:fe:
                    19:f4:34:78:27:79:a6:47:3e:0e:39:5c:84:e2:87:
                    f9:c7:ba:67:30:b5:87:17:a0:63:50:2b:4a:c4:1e:
                    25:10:9a:f6:96:b3:fa:b9:c3:59:95:d9:6c:e0:47:
                    f2:d8:76:c0:d0:23:e4:56:60:67:55:a6:da:f5:59:
                    a4:8b:ca:88:8b:f6:59:7f:8e:6b:d6:9e:28:4c:91:
                    ee:66:93:3c:70:6f:eb:7b:83:23:b6:49:30:ef:09:
                    c4:c9:78:2a:ec:35:6a:40:e9:f1:82:1b:2b:8f:73:
                    58:29:5a:47:1e:4f:61:d7:b3:34:21:ec:3c:7e:60:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.140.0/22
                  193.194.102.0-193.194.104.255
                IPv6:
                  2a0d:8380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204560

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:7d:78:10:82:b6:03:2a:42:90:aa:90:3b:65:a0:3a:2c:
         09:ca:d2:9e:19:92:e1:d8:6c:c8:c4:6f:40:dc:06:b8:44:4f:
         b5:4a:f6:7f:16:e3:6f:ef:39:be:f2:0f:f1:11:c0:ec:d9:b1:
         7f:6e:31:9a:61:f6:de:5a:d8:3e:57:20:76:59:9b:75:a9:9b:
         1a:c6:43:31:c7:b4:8d:1e:20:36:bb:99:f3:2f:be:bf:7e:42:
         d8:f8:79:b6:8a:f5:cc:63:84:eb:2f:c4:f0:93:c1:93:01:31:
         8d:ab:12:a8:28:5c:c5:a8:35:13:ff:be:41:84:bf:ae:d7:02:
         c8:d4:ab:d7:92:03:83:8d:bf:98:00:7a:5e:dd:53:7e:e6:6e:
         e6:0f:51:0f:c7:df:f8:ab:fc:64:a9:ab:69:c3:9e:c2:28:0c:
         d1:da:54:19:6c:6f:64:15:e5:99:8f:a7:e4:44:b5:f7:b1:2d:
         bf:87:98:66:32:39:4c:5e:f0:05:f2:e2:7f:c5:c3:45:48:25:
         aa:4b:63:c1:c2:eb:5f:b1:84:34:20:a6:75:05:35:15:22:df:
         d0:92:b4:22:a4:cd:18:0a:78:6a:9d:23:49:af:e1:ed:56:cd:
         90:50:67:fb:2a:9a:15:d5:43:3a:c9:8c:45:6a:3e:00:46:f7:
         b7:57:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:51 2024 by rpki-client on console-ams.rpki-client.org