Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
File:                     wWfFkcwblqHKT5EP4QHvkE2h4hg.cer (raw, json)
Hash identifier:          ZmWCNEaWexZ/0U8WbyrUViF6m+ttraGJ3s+7xnJ+QEA=
Subject key identifier:   C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BCAC6B42E7C1420E11DCB4678D6D5B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 6738
                          IP: 46.18.192.0/21
                          IP: 185.86.176.0/22
                          IP: 195.114.26.0/23
                          IP: 2a03:3280::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:ac:6b:42:e7:c1:42:0e:11:dc:b4:67:8d:6d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:da:01:ae:b8:88:14:b2:38:38:11:fa:5d:
                    d3:e5:62:59:c6:9c:c0:be:c1:3f:da:d9:a8:03:e9:
                    10:98:f2:66:04:56:99:ea:b6:4b:eb:e9:91:bc:f5:
                    8f:a6:e8:7d:4a:c5:d6:40:21:d6:e0:95:63:9d:3b:
                    ba:f4:f8:ea:fd:8a:da:e7:cb:51:eb:f1:e6:0e:07:
                    a6:d2:16:66:87:93:ac:20:8e:6d:73:47:59:bb:0b:
                    10:14:12:4f:c7:3a:1f:ef:1c:65:63:de:db:00:8e:
                    c9:c8:3e:39:cb:60:e9:2b:e2:98:18:83:ff:64:b2:
                    db:7c:16:50:42:c5:17:fe:20:fb:81:64:3a:d5:43:
                    12:eb:e9:94:ce:67:57:b0:1a:6a:c4:6e:6b:52:5f:
                    f1:b3:ca:a0:0d:28:8e:39:01:4f:b8:23:92:f2:1f:
                    0e:ec:62:36:03:08:96:1f:59:48:fe:6e:48:ae:e6:
                    4e:e3:57:78:21:03:d6:10:fc:98:f3:ad:46:74:27:
                    3a:83:31:99:00:98:a7:18:e0:4f:ce:b8:44:8b:01:
                    6e:db:77:9b:15:e7:8a:35:b2:72:11:9e:ca:55:b0:
                    b9:b9:e2:75:e7:84:43:5f:25:80:46:4b:66:6d:9d:
                    87:3a:58:31:95:be:28:30:30:b5:cc:d3:87:6a:de:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.18.192.0/21
                  185.86.176.0/22
                  195.114.26.0/23
                IPv6:
                  2a03:3280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6738

    Signature Algorithm: sha256WithRSAEncryption
         17:97:28:75:79:6a:19:83:13:d3:fe:ca:ae:b7:3a:94:fb:13:
         ec:36:bd:4e:2c:ab:f1:7a:06:30:70:ae:53:34:a0:1e:b1:23:
         ba:aa:f2:d2:b0:5e:80:8b:28:ce:1b:7c:d3:ca:c1:30:5f:89:
         0f:f1:78:85:eb:74:49:fb:47:66:c0:4d:6f:b5:11:72:76:11:
         06:99:2f:6a:83:b6:b2:03:16:55:57:51:ca:6b:ce:48:61:a5:
         0e:fc:57:d5:bc:4b:a1:52:40:4e:ea:a9:bd:07:5e:03:2a:25:
         a5:eb:dc:22:7c:27:05:78:e4:f9:6e:44:ab:d5:46:b7:3f:ec:
         1f:78:c1:3c:b0:db:8b:49:18:18:3c:77:5d:df:86:23:13:1f:
         0e:bd:85:fb:e8:00:e8:77:dd:1f:ac:c1:2a:a5:1a:60:ba:9c:
         14:b8:7b:ca:73:a3:1a:8f:5a:7d:05:8f:17:81:49:01:b5:91:
         87:1b:44:88:43:0f:20:42:e3:96:a2:f0:26:24:80:5d:9a:43:
         98:57:f4:b2:47:27:24:9b:73:4f:b8:47:c0:08:2d:88:74:64:
         7e:2e:48:a1:39:f4:10:27:2b:c7:9c:26:cf:e1:ce:85:2c:f3:
         7f:97:9f:fb:5f:98:54:cf:23:59:60:3d:3d:75:57:38:a2:42:
         a4:9a:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:08 2024 by rpki-client on console-ams.rpki-client.org