Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
File:                     vFvbl-lHb1BjgViIbU2XAmpbeqY.cer (raw, json)
Hash identifier:          9EmXd5vRidNX1bMFEuUTZL7PG+dFQcLHwTWXCJjwjNI=
Subject key identifier:   BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194821581B611FD3529A8915A1DA87D3EF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
caRepository:             rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/
Notify URL:               https://rpki.leitecastro.com/notification.xml
Certificate not before:   Mon 20 Jan 2025 05:00:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200454
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:82:15:81:b6:11:fd:35:29:a8:91:5a:1d:a8:7d:3e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 20 05:00:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:6f:30:8d:4f:e1:1c:88:e8:3d:fe:bf:50:
                    13:09:5b:a3:fb:98:fc:82:72:7e:93:08:5a:97:6d:
                    73:45:ec:3e:cf:ac:f0:45:58:17:e4:66:95:06:aa:
                    3d:69:71:aa:8c:09:bc:b9:c9:5f:3a:9a:2a:83:aa:
                    ac:c3:90:10:ef:26:49:56:1d:19:de:43:d1:6c:40:
                    fe:b4:19:44:5a:56:59:52:5d:df:82:63:40:d0:f8:
                    10:a7:eb:83:6a:ce:bc:4e:89:fd:6b:52:02:86:e7:
                    e2:51:b0:00:b2:33:87:5a:e6:e2:e7:7c:1b:d9:49:
                    32:6d:47:25:26:55:d5:49:db:7b:65:29:f4:ef:a0:
                    8a:b9:23:cb:dc:12:77:1c:a9:70:0e:5a:eb:4b:9c:
                    f1:f7:c3:d5:19:8b:bd:c7:0e:96:f6:71:0e:7f:2d:
                    80:4d:f5:cb:c9:8b:1b:3a:22:92:9d:7b:71:a3:7a:
                    53:cf:3c:22:36:1d:10:dd:01:b0:4d:27:f3:d9:83:
                    37:1f:94:75:2b:e8:c9:dd:0e:47:f3:96:cd:a4:23:
                    7c:13:37:12:0a:67:6c:19:57:17:b2:88:fd:be:ee:
                    54:47:1d:32:7f:24:b9:a5:3a:9a:b0:d8:87:95:f3:
                    13:1d:7c:b5:f5:f2:c6:2b:5f:9e:09:46:2f:ee:57:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/
                RPKI Manifest - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
                RPKI Notify - URI:https://rpki.leitecastro.com/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200454

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:97:1f:1e:a1:58:d7:6a:b9:2c:32:64:f3:f0:3d:cf:22:
         bc:27:63:67:19:e3:06:ef:70:21:5f:f0:48:36:2e:1d:8a:7d:
         1b:36:8a:65:00:66:3f:a5:25:e2:20:da:10:99:63:40:6f:a3:
         d6:68:77:ae:f1:ad:da:c3:3f:2e:35:ba:7e:c4:c9:30:44:42:
         c3:6a:49:a3:0d:ad:f4:fc:42:fb:99:bc:62:b6:ac:4c:b1:38:
         a1:ac:4a:dd:93:c0:46:20:8b:9c:bf:34:be:fc:95:23:e7:f1:
         f2:06:a4:c6:74:85:f5:c8:88:91:e8:84:3c:97:49:29:aa:29:
         d6:50:43:e1:dd:5e:97:7e:0c:7b:eb:1c:e6:86:16:78:d9:c9:
         ec:94:67:f5:d8:46:b0:cd:59:11:ff:cb:fb:d1:60:3a:10:3c:
         2e:5c:85:17:76:6e:32:42:91:a9:27:af:52:59:69:2f:4e:11:
         9c:e9:1e:e0:19:f7:86:2c:07:9f:15:73:d3:68:65:48:c8:78:
         60:75:21:f9:0a:de:b5:a7:cb:04:98:3e:cb:09:e8:10:cf:3d:
         ac:3a:32:ca:8a:e3:3a:41:1c:62:27:28:7f:75:a4:ec:9b:e9:
         c6:a3:ee:12:b8:cd:4a:59:d6:19:b6:e3:ee:04:ae:3d:8a:b3:
         1d:21:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:00 2025 by rpki-client