Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.cer (raw, json)
Hash identifier:          7Gbh5vr8WZSeeR94Doik+P7ZprJ1Ne55fgFXGBePygs=
Subject key identifier:   BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BBE54B68DE6B7466F464A3FCEF0AC3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:03 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 16311
                          IP: 194.146.184.0/22
                          IP: 2001:67c:2af4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:e5:4b:68:de:6b:74:66:f4:64:a3:fc:ef:0a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:08:db:d4:22:b7:78:6e:10:12:ae:04:0e:7d:
                    24:bb:c0:2d:b7:c2:1e:9a:ee:1f:19:c7:88:44:9c:
                    4d:89:d5:54:fc:43:68:17:59:c9:e9:36:aa:28:9b:
                    8f:22:7c:4b:25:27:cb:09:93:56:d5:c6:01:1d:bd:
                    93:80:c1:62:3b:19:6f:5f:3f:3b:60:53:fd:7b:f5:
                    0e:e6:1c:d1:fe:42:cc:49:64:21:d7:37:6f:c0:1f:
                    bf:5e:6a:97:c3:1c:5c:39:69:72:45:4a:e7:52:7a:
                    b0:9d:22:a1:8c:42:45:00:4c:85:f1:77:d3:c9:f0:
                    bf:1a:53:a5:03:08:9f:79:86:46:19:d4:85:40:bf:
                    38:84:3d:0c:88:70:28:c2:d4:09:17:ab:f0:01:88:
                    b8:af:2c:0c:b6:10:b1:52:42:05:e2:8b:3e:d9:6a:
                    2c:b4:55:81:e6:04:d1:c8:0e:91:9b:fa:34:fb:56:
                    c0:a9:7a:19:92:ef:a8:21:bd:bb:20:40:f2:42:dc:
                    3a:1f:7b:23:5c:03:54:3b:0f:b2:37:06:4e:05:07:
                    c2:7f:ef:06:a0:cc:3a:ce:7e:37:b2:21:20:23:ff:
                    d1:75:6f:02:d5:c4:99:6f:c0:d8:e0:0d:43:89:1b:
                    e8:60:f9:b5:35:c7:08:30:aa:ae:0d:78:94:72:dd:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.146.184.0/22
                IPv6:
                  2001:67c:2af4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16311

    Signature Algorithm: sha256WithRSAEncryption
         57:98:29:2a:26:e3:0c:ca:c1:89:4d:dc:bc:88:5e:4b:7e:44:
         a5:50:4f:01:fb:3e:dc:b6:76:a4:59:ff:47:07:72:14:34:7c:
         08:d8:5d:6e:e6:31:dc:4b:a3:b5:6c:94:8d:fa:e0:5f:5c:a2:
         29:3f:89:5d:46:93:98:eb:99:b5:c6:62:3a:32:64:ed:e5:f2:
         4a:e6:55:ba:b6:7e:62:1a:50:74:c6:1b:82:a0:b4:14:b4:e0:
         b2:10:a6:97:a9:87:f2:ec:e2:68:b5:9a:44:88:cc:ef:36:ba:
         f0:f7:01:cd:88:e5:8e:08:16:0c:0e:fe:31:25:f3:37:f3:d5:
         5c:0c:2c:65:72:03:b4:bc:a0:f2:0a:7c:45:84:ff:ac:c5:51:
         77:22:58:eb:0f:83:0c:0b:37:7b:23:15:2c:02:06:e8:53:32:
         a6:ea:49:20:d8:39:b7:81:ed:d6:be:78:1a:7a:d2:8c:6f:e2:
         b7:13:4b:44:c4:0b:ad:d7:22:17:81:1f:65:69:3f:ef:57:5e:
         ad:18:e4:2f:da:b0:1a:3c:74:7f:7f:7a:36:78:ff:09:56:be:
         5c:f8:19:e7:af:88:86:c4:f2:56:c0:31:04:9a:fb:3b:90:b9:
         e7:d6:1b:d8:c1:2d:40:b6:ca:3a:d5:ee:42:0d:89:fe:2b:e6:
         5b:56:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:41:19 2024 by rpki-client on console-ams.rpki-client.org