Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.cer (raw, json)
Hash identifier:          qdbD8qdTJNBp8rqWmTwybbMrNYjcb4Im0VnNIk9jwZs=
Subject key identifier:   C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF2013F912E8FC07E65BF49BB12D71
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:31:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 15923
                          IP: 193.41.6.0/23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:20:13:f9:12:e8:fc:07:e6:5b:f4:9b:b1:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:31:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:13:ab:a8:02:79:45:a4:08:9d:22:ee:5d:
                    82:e9:11:1a:69:72:8f:ed:d8:fb:9a:02:31:20:b3:
                    f3:ad:d6:81:31:a6:79:a6:a2:0e:c2:a9:94:41:97:
                    5a:8d:0b:58:6b:5f:b4:80:e2:90:fe:0c:d0:5f:60:
                    79:a0:b4:1c:d9:bd:72:70:52:b0:99:f5:1c:33:26:
                    e7:5a:7b:77:01:18:dc:52:2c:8f:02:1f:dd:66:76:
                    e2:ed:c3:c1:5b:65:34:20:f8:75:28:cb:a8:12:83:
                    8e:5d:c1:26:3e:39:8f:7a:fe:2a:43:22:20:cd:11:
                    c8:22:b1:1f:7f:d8:fd:32:3b:32:5a:24:10:33:ae:
                    a2:2a:54:fa:3f:85:e3:e7:90:26:72:c9:54:d5:e2:
                    5b:58:12:7c:9b:96:1c:7a:a1:48:fc:c6:0e:74:33:
                    9c:f2:13:41:2a:57:06:2e:43:a6:eb:fe:ce:4f:34:
                    81:87:97:4f:a3:e7:e0:dd:be:6f:d0:20:5e:fa:41:
                    f7:54:25:a0:68:0b:8e:41:40:a3:82:87:04:1a:86:
                    84:83:03:fa:67:17:9e:56:da:4a:60:98:12:01:7a:
                    de:40:41:04:15:37:8c:35:9f:53:96:03:3c:d3:d4:
                    3a:3b:58:6e:ac:3b:ed:f9:55:51:08:2c:fc:b0:eb:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.6.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15923

    Signature Algorithm: sha256WithRSAEncryption
         3e:82:ef:0c:01:e6:48:7c:fb:ac:1b:af:24:b5:09:12:95:93:
         c2:33:83:03:b1:da:59:60:69:44:be:c9:be:00:50:fb:f5:08:
         fb:05:31:58:79:e3:bf:71:86:37:40:46:d6:b6:44:39:1d:62:
         2e:67:c6:7e:e2:fa:d6:d4:26:27:96:22:7c:d5:82:29:91:8c:
         b8:a5:8e:79:e1:db:b3:b3:ec:b7:48:4c:a4:44:fb:f8:56:e0:
         b7:47:c2:75:fa:f3:5c:36:53:5d:70:e8:4c:ca:f2:10:76:34:
         51:32:c6:91:53:a9:fd:6e:3e:00:4a:c0:4d:9e:5e:d3:77:9e:
         47:b7:26:e2:f8:ba:21:55:01:d5:68:2e:8e:4a:b9:6a:1e:e6:
         24:10:25:f9:16:30:9d:20:37:b0:4c:c9:8c:29:6c:e6:a3:db:
         69:c1:ac:73:c9:b6:4b:83:f3:c0:d9:9b:73:7a:4c:a7:b3:45:
         25:3e:e2:22:40:8f:0c:2a:f0:89:d2:28:fb:67:35:40:e5:ca:
         93:3a:53:ab:05:c0:de:78:38:68:ba:92:69:bf:0f:fb:1d:a4:
         d8:48:de:65:e6:1c:ff:e4:58:d5:2a:8a:4e:f4:d5:49:ae:e3:
         ba:6e:4d:28:4e:fd:dc:1a:c6:7d:ee:87:01:2d:e9:75:27:2b:
         e1:c1:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:34:37 2024 by rpki-client on console-ams.rpki-client.org