Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
File:                     wcIPvEj6WafY3qV5CPNQobl0Wd8.cer (raw, json)
Hash identifier:          EnaXWrogk2qhvuUpEoKkGxpPOgtRxoegMtw7WU1pQPs=
Subject key identifier:   C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3491380D0B926C7E018C3EA6C8CE175
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 33930
                          IP: 45.15.212.0/22
                          IP: 80.75.152.0/21
                          IP: 91.223.207.0/24
                          IP: 93.187.40.0/21
                          IP: 185.56.204.0/22
                          IP: 194.6.240.0/24
                          IP: 2a02:668::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:13:80:d0:b9:26:c7:e0:18:c3:ea:6c:8c:e1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:68:69:e7:0f:78:8d:25:48:a7:81:04:6f:
                    9b:1f:15:ea:43:76:7d:c5:29:53:ca:e4:44:27:c9:
                    89:d9:88:d2:20:2f:09:91:6f:f2:50:11:58:56:a3:
                    ed:eb:ff:a3:c3:8e:46:af:8c:1d:27:05:0c:00:39:
                    2e:a5:15:77:50:20:cb:3e:6e:7c:fa:4f:9b:c4:e4:
                    73:c5:c9:6a:34:4f:8d:91:86:41:06:f1:f4:51:5a:
                    56:25:fa:20:a0:88:c5:19:73:f5:d9:fc:70:67:ef:
                    5e:98:42:f4:49:8c:9e:e0:4b:60:93:da:b9:18:e7:
                    1d:13:03:47:9c:b3:b5:09:ed:61:2a:af:c1:b7:f8:
                    27:83:86:16:e3:e9:ce:5b:e2:fc:af:84:62:e0:25:
                    c5:f8:04:6d:f0:47:17:51:04:25:c2:73:41:0c:fa:
                    49:7e:4a:b4:ac:ba:ca:02:ba:5f:c3:0a:29:06:f9:
                    1d:14:c0:d7:09:b2:6f:9e:b2:87:86:97:fd:5c:6f:
                    48:42:bb:ce:16:f9:47:ac:e0:25:01:0e:51:3d:48:
                    e3:c9:a6:b4:62:63:f4:b5:dc:59:5b:93:19:92:0f:
                    f7:bc:95:49:2a:bc:b2:17:cc:7d:56:c5:cf:5f:23:
                    0a:d9:b8:c0:ed:ff:0e:aa:09:2f:77:15:9d:76:2e:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.212.0/22
                  80.75.152.0/21
                  91.223.207.0/24
                  93.187.40.0/21
                  185.56.204.0/22
                  194.6.240.0/24
                IPv6:
                  2a02:668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33930

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:12:a0:d6:17:67:05:2a:87:68:cc:29:f8:e4:36:5b:49:
         99:eb:46:04:d2:5f:d3:0e:d6:e6:79:6a:78:77:b4:0b:51:66:
         02:96:d6:fa:2d:43:5f:73:ef:75:84:a0:fd:e3:4f:80:6f:79:
         6f:7d:c2:b4:a2:99:2e:31:9b:de:5f:fa:cf:c4:db:96:6e:3f:
         fe:15:bc:8b:fd:bf:66:f3:2a:89:d6:40:65:f1:73:b1:ce:c0:
         3e:36:03:65:ac:35:db:9c:83:71:7c:71:69:ff:df:d8:30:3a:
         3a:3b:66:f3:10:08:49:92:67:78:01:dc:fe:ef:7c:2c:18:2c:
         a4:e6:29:47:d1:ff:e0:eb:11:a1:0c:6e:0f:ac:45:39:64:a7:
         24:96:f1:c5:72:20:1b:29:8c:7d:ba:58:cc:9c:bc:5f:0f:92:
         9f:a1:80:47:c6:4e:65:25:36:77:1d:7b:fb:e2:91:8b:c9:88:
         f9:97:0c:b4:99:58:61:77:42:71:99:52:21:fa:77:d4:e3:e3:
         a2:0e:28:83:7e:3f:84:a4:8a:aa:81:62:87:7d:9b:af:e4:d4:
         76:98:28:42:b8:d8:da:b9:73:e7:e7:c4:af:12:d0:89:d9:2b:
         94:82:f3:1f:8d:5c:1f:88:ff:8d:9a:69:fe:df:0f:ec:ef:f5:
         e3:fd:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:34:37 2024 by rpki-client on console-ams.rpki-client.org