Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer (raw, json)
Hash identifier:          8YJByaOET2yxBnFAoRkA4q8uP8iw3iI3qenJ50LXS80=
Subject key identifier:   C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9CDD27E366F832C0DD0D416DFC9A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211081
                          IP: 185.193.47.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:cd:d2:7e:36:6f:83:2c:0d:d0:d4:16:df:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:33:1e:6a:f3:a4:37:39:6c:42:fa:6e:6c:
                    e0:b4:74:46:b8:da:02:60:9b:21:b5:70:32:73:49:
                    ba:c8:07:1c:ab:92:c6:5b:71:5a:55:8f:7f:5c:45:
                    ae:2a:3c:a3:f2:ca:10:78:30:89:3f:15:3e:7f:cb:
                    61:31:f8:c5:78:c7:56:0c:15:a2:17:3b:f1:c4:ff:
                    6f:92:17:40:7f:08:4e:d8:4a:f3:12:89:b8:15:a7:
                    21:7a:4e:3a:08:98:33:45:c7:0b:dc:a5:18:d7:d0:
                    2a:07:62:b8:1a:0b:5e:c9:25:c4:03:19:58:b4:46:
                    19:05:f1:1e:f1:b5:ed:70:e2:f6:b8:02:4f:b9:32:
                    ee:c4:1f:37:84:67:e5:f8:29:a7:ff:9e:4c:79:e6:
                    16:eb:fd:a7:82:a9:f6:e1:b5:6e:75:c8:0d:30:6f:
                    8e:b8:1d:43:c5:c1:0c:64:c9:87:a5:91:19:51:c0:
                    b6:6c:58:b1:3c:84:e9:4d:94:8e:b4:01:74:44:15:
                    dd:9a:a9:c3:f4:39:e3:2e:9b:a7:f2:a3:8b:6f:bc:
                    dc:3c:31:7f:82:16:b2:81:53:4b:54:87:c9:e0:40:
                    07:25:1b:37:c4:0e:1d:86:9c:ee:a2:e8:5e:6e:31:
                    4a:54:ed:12:67:90:95:dc:83:89:8d:cd:57:5a:35:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.47.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211081

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:48:b1:e6:64:9b:dc:d1:5d:e6:a3:ad:6c:98:a4:9e:84:
         3e:4a:31:ed:ea:b8:c9:f0:ba:d8:f0:38:e8:e8:8d:71:e4:69:
         31:2f:7d:37:69:35:3c:23:e4:39:1e:9e:25:15:9a:0d:e2:c2:
         8f:a0:b4:8e:41:a9:0c:f4:26:00:69:e5:aa:40:b5:4b:58:38:
         b4:bd:ac:05:86:33:3f:ab:cc:2a:4a:b2:66:67:3a:c0:f2:b5:
         11:77:c2:83:25:89:51:e9:89:85:fc:f5:a0:cd:f3:87:51:5c:
         4b:53:00:f0:e0:01:22:0d:f8:b2:e2:b3:84:12:a1:02:a9:72:
         28:2f:29:32:c3:64:c6:41:cf:3c:bb:e7:30:c0:ef:45:0a:7d:
         56:de:f0:9f:b7:66:e2:64:0b:e2:ce:af:87:01:fd:82:4a:e2:
         e2:0e:d9:3e:99:75:06:bc:5a:14:77:9a:3f:fb:22:10:0d:c5:
         d4:c0:75:bc:d8:81:c8:32:7f:d0:66:cc:93:cc:4e:e8:5b:93:
         d5:4e:d8:77:5f:54:11:85:bd:82:cb:d8:e7:9c:eb:1b:5b:7b:
         e8:b6:33:f8:84:c7:f6:2d:2f:6a:f8:ca:18:cf:bf:d3:ce:05:
         f3:d2:33:30:c6:56:09:4a:23:fa:c8:01:02:7e:f2:3b:62:1e:
         0a:7b:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:12 2025 by rpki-client