Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
File:                     wKopmx5fodUSbfrXXf1Km65EOhc.cer (raw, json)
Hash identifier:          K83qt3kAwv6OcuIlHYdAVKNnS7dRbBKWa0U5iPkpa7w=
Subject key identifier:   C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E31960A9719DF9B37335A77D25F24B32C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 12 Mar 2024 07:35:00 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199097

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:31:96:0a:97:19:df:9b:37:33:5a:77:d2:5f:24:b3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 07:35:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:c1:f5:ba:a3:68:d5:ef:c7:a7:47:00:18:
                    15:10:e7:9a:9d:ba:43:b0:6c:8b:c4:7e:3c:3a:09:
                    9d:f1:fc:c1:99:10:b1:1c:3f:50:59:e9:0b:87:a0:
                    c6:e0:6c:ec:58:32:8e:58:40:58:74:c4:a8:b5:58:
                    00:45:e5:9f:65:46:9a:e3:94:79:f9:18:70:e1:8b:
                    26:65:3b:c3:77:76:e3:90:6a:ce:c5:65:ed:db:38:
                    ac:24:f4:b3:fd:26:66:5a:9a:4e:52:0f:49:e4:eb:
                    6e:fa:b9:bf:36:9d:56:67:50:5e:72:4e:2f:45:11:
                    45:0a:f2:73:e9:8d:0d:c1:c5:7d:73:7d:04:28:45:
                    a4:76:28:98:65:b4:02:27:0d:9c:c6:d7:fd:7b:b8:
                    9d:fb:3c:7d:e7:1a:c3:20:74:48:92:e0:b4:49:a6:
                    a1:52:cf:8d:1e:7c:42:02:3d:9a:59:ec:8f:07:10:
                    ea:c4:e8:b5:c0:44:b2:43:1f:d9:9d:83:4d:69:cd:
                    6d:bb:ce:70:37:19:d6:cc:88:15:6a:94:17:99:8d:
                    94:fa:76:cc:7a:a0:1c:0a:24:14:7c:f4:b3:a9:cc:
                    52:ad:45:5f:60:5e:8e:9e:17:fe:60:8a:b8:d2:75:
                    46:dc:15:cb:64:3d:81:09:46:9d:47:8d:3e:18:b9:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199097

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:6b:3d:78:8a:14:8d:df:61:e4:3a:eb:50:e3:22:8b:86:
         e2:75:a6:94:1e:88:1a:67:22:33:fb:53:12:6f:d6:9c:72:59:
         2f:5d:ab:88:92:6e:e2:13:09:8d:39:c2:e7:27:8e:18:b7:98:
         e0:96:58:f2:ac:cf:3d:60:9b:73:12:6f:36:2b:60:03:1f:32:
         07:ab:61:20:ca:2c:65:65:58:1d:34:76:78:bd:4b:9b:3a:08:
         4d:a9:dc:37:ce:8d:9d:05:14:e9:9d:d6:2d:f5:ae:dd:07:d6:
         fe:8c:6f:db:7d:27:6a:c2:85:92:45:2f:91:66:ff:92:6d:ad:
         da:51:66:79:8c:93:b0:e3:2b:7e:e6:93:da:42:90:d2:31:d8:
         ca:11:b6:1f:9e:ee:84:8d:73:4c:5c:35:5b:72:35:ab:6b:89:
         ab:65:fb:89:fd:15:73:d2:1c:b2:8d:c4:ec:bf:03:65:96:db:
         71:3f:62:78:73:01:40:94:05:52:f1:6c:21:e5:9a:44:e5:a2:
         ba:fc:1a:d3:ec:33:4d:e7:dc:3f:82:5d:d2:61:e8:20:dd:d6:
         49:1e:06:a2:e8:85:b8:d4:f7:ae:70:b4:4a:db:e3:34:45:4b:
         a3:2b:6b:6f:c6:b9:51:4e:fe:22:35:bb:79:13:69:1c:6f:f2:
         d3:91:a0:a9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY4xlgqXGd+bNzNad9JfJLMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzEyMDczNTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGFhMjk5YjFlNWZhMWQ1MTI2ZGZhZDc1ZGZkNGE5YmFlNDQzYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncXB9bqjaNXvx6dHABgVEOeanbpD
sGyLxH48Ogmd8fzBmRCxHD9QWekLh6DG4GzsWDKOWEBYdMSotVgAReWfZUaa45R5
+Rhw4YsmZTvDd3bjkGrOxWXt2zisJPSz/SZmWppOUg9J5Otu+rm/Np1WZ1Beck4v
RRFFCvJz6Y0NwcV9c30EKEWkdiiYZbQCJw2cxtf9e7id+zx95xrDIHRIkuC0Saah
Us+NHnxCAj2aWeyPBxDqxOi1wESyQx/ZnYNNac1tu85wNxnWzIgVapQXmY2U+nbM
eqAcCiQUfPSzqcxSrUVfYF6Onhf+YIq40nVG3BXLZD2BCUadR40+GLn4JwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMCqKZseX6HVEm361139SpuuRDoXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzJmYzgw
NC0yNDc3LTRkNmItODEzNy03MDRhOTk1ZTNkYjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMmZjODA0
LTI0NzctNGQ2Yi04MTM3LTcwNGE5OTVlM2RiNi8xL3dLb3BteDVmb2RVU2JmclhY
ZjFLbTY1RU9oYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMJuTANBgkqhkiG9w0BAQsFAAOCAQEAdSxrPXiKFI3f
YeQ661DjIouG4nWmlB6IGmciM/tTEm/WnHJZL12riJJu4hMJjTnC5yeOGLeY4JZY
8qzPPWCbcxJvNitgAx8yB6thIMosZWVYHTR2eL1LmzoITancN86NnQUU6Z3WLfWu
3QfW/oxv230nasKFkkUvkWb/km2t2lFmeYyTsOMrfuaT2kKQ0jHYyhG2H57uhI1z
TFw1W3I1q2uJq2X7if0Vc9Icso3E7L8DZZbbcT9ieHMBQJQFUvFsIeWaROWiuvwa
0+wzTefcP4Jd0mHoIN3WSR4GouiFuNT3rnC0StvjNEVLoytrb8a5UU7+IjW7eRNp
HG/y05GgqQ==
-----END CERTIFICATE-----
Generated at Fri May 3 03:50:06 2024 by rpki-client on console-fra.rpki-client.org