Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer (raw, json)
Hash identifier:          pVi+JVgIYNdpJ0MN+Ssg90JWz0ZmG2VmTjVFFJR1AdQ=
Subject key identifier:   C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DC11EFD9213968B55EB5562549F894648
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 19 Feb 2024 11:27:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211081
                          IP: 185.193.47.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c1:1e:fd:92:13:96:8b:55:eb:55:62:54:9f:89:46:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 19 11:27:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:33:1e:6a:f3:a4:37:39:6c:42:fa:6e:6c:
                    e0:b4:74:46:b8:da:02:60:9b:21:b5:70:32:73:49:
                    ba:c8:07:1c:ab:92:c6:5b:71:5a:55:8f:7f:5c:45:
                    ae:2a:3c:a3:f2:ca:10:78:30:89:3f:15:3e:7f:cb:
                    61:31:f8:c5:78:c7:56:0c:15:a2:17:3b:f1:c4:ff:
                    6f:92:17:40:7f:08:4e:d8:4a:f3:12:89:b8:15:a7:
                    21:7a:4e:3a:08:98:33:45:c7:0b:dc:a5:18:d7:d0:
                    2a:07:62:b8:1a:0b:5e:c9:25:c4:03:19:58:b4:46:
                    19:05:f1:1e:f1:b5:ed:70:e2:f6:b8:02:4f:b9:32:
                    ee:c4:1f:37:84:67:e5:f8:29:a7:ff:9e:4c:79:e6:
                    16:eb:fd:a7:82:a9:f6:e1:b5:6e:75:c8:0d:30:6f:
                    8e:b8:1d:43:c5:c1:0c:64:c9:87:a5:91:19:51:c0:
                    b6:6c:58:b1:3c:84:e9:4d:94:8e:b4:01:74:44:15:
                    dd:9a:a9:c3:f4:39:e3:2e:9b:a7:f2:a3:8b:6f:bc:
                    dc:3c:31:7f:82:16:b2:81:53:4b:54:87:c9:e0:40:
                    07:25:1b:37:c4:0e:1d:86:9c:ee:a2:e8:5e:6e:31:
                    4a:54:ed:12:67:90:95:dc:83:89:8d:cd:57:5a:35:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.47.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211081

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:c4:8a:47:cb:2c:b3:29:3c:1e:38:4e:88:14:b3:43:9c:
         ed:bd:fa:87:24:7b:71:7e:f0:b7:7e:46:77:db:d4:d3:21:ce:
         e2:ec:df:33:6f:f1:56:92:ad:8b:2e:ff:88:07:cd:cf:a6:04:
         db:dc:bb:73:09:cd:d0:e3:98:54:28:d4:94:a7:6c:9e:1d:7a:
         6e:b8:ab:b7:61:8f:ae:d7:7a:bb:3a:26:4c:d0:7d:c8:1a:00:
         46:39:6d:f8:a1:3d:f6:7d:85:76:77:59:6e:64:a3:d6:ab:04:
         59:fd:86:da:1c:d7:f3:be:c1:ab:93:14:76:43:07:16:6c:26:
         cc:e8:90:8b:62:41:45:10:c2:6f:71:63:82:35:f0:d4:3b:27:
         db:b6:c1:83:da:a9:ed:3e:e3:d0:c8:64:fa:7b:13:de:e8:60:
         eb:9b:6d:5e:39:2b:a8:83:59:6e:96:6f:b1:84:e2:94:5c:cf:
         90:14:65:d0:a7:6a:3d:33:52:68:79:6e:8a:04:a3:ec:9c:34:
         37:b5:3c:b5:a5:ee:12:34:ce:9e:c9:63:90:8a:2d:05:ea:49:
         2d:56:b6:5a:00:87:a1:60:93:f4:2a:e4:94:e8:25:34:f4:59:
         3c:bb:d2:db:23:d2:30:54:15:aa:54:87:71:85:db:22:17:71:
         48:a0:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:07:15 2024 by rpki-client on console-ams.rpki-client.org