Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.cer (raw, json)
Hash identifier:          243Bu0afAyQzsluJhZAUX3F60J7afL2nr8d8a+J9J1U=
Subject key identifier:   C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D0CCA4DEB5415C8211C9267A78BE8379B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 15 Jan 2024 11:03:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 39368
                          IP: 185.211.56.0/22
                          IP: 193.58.119.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0c:ca:4d:eb:54:15:c8:21:1c:92:67:a7:8b:e8:37:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 15 11:03:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:9e:15:32:38:f4:94:f3:4f:ad:a2:73:fc:
                    e0:71:a7:25:d4:1e:18:14:c4:07:c4:0a:ec:9a:14:
                    f9:71:de:82:ba:21:89:a0:31:74:79:da:94:b6:5b:
                    dc:63:ad:b9:ab:ab:f1:21:bc:c3:92:52:54:29:39:
                    0d:fb:57:5a:c3:57:97:01:f0:44:5e:e2:c6:75:d1:
                    88:29:d0:35:f9:bf:ea:f8:39:c1:a2:68:7b:ac:ec:
                    3c:b7:30:15:13:c1:72:64:44:f9:53:98:27:71:e2:
                    6b:38:fc:9d:6a:72:e0:86:12:40:3f:03:98:32:6e:
                    42:14:c8:c1:dc:12:6f:5c:71:4f:3c:78:03:df:9a:
                    b0:35:79:b6:1c:c4:e3:91:fe:80:79:bc:9a:46:59:
                    e9:6d:ad:f1:b2:23:b5:54:e1:d2:4e:c9:a6:17:6e:
                    31:5b:c1:20:6e:88:58:2e:85:52:4f:be:09:10:75:
                    14:d9:31:b3:77:37:97:c3:29:37:df:0c:bc:2c:b9:
                    f0:2a:4e:bf:02:db:b2:16:81:a5:71:ef:97:a9:be:
                    ee:68:22:52:8b:94:6c:85:fa:c5:be:d1:ec:7c:d8:
                    00:89:60:5d:85:ae:34:cd:d7:36:8c:cb:fe:c9:0b:
                    d7:33:b9:b0:b2:f0:36:ad:ec:87:1e:26:45:3f:60:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.56.0/22
                  193.58.119.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39368

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:0b:fe:9b:ea:50:df:48:80:a6:8b:42:1b:a6:8f:b5:d1:
         50:8a:07:0c:ad:b0:86:e4:df:62:a3:a0:1d:32:cc:25:6e:6b:
         cc:18:b1:86:af:1b:9e:27:3d:10:95:4f:aa:3c:eb:7b:d8:aa:
         6d:cf:ac:be:ba:94:ec:8f:36:e6:56:05:6a:5d:80:dc:4f:6f:
         05:83:42:fc:b7:9d:69:01:f1:5b:83:f5:af:ef:05:2f:b4:23:
         9c:fa:38:30:2b:cb:6c:c8:b9:80:4a:cb:ce:73:c1:90:29:0f:
         de:99:ff:99:5a:5d:9c:ed:ae:88:5d:96:9d:1f:9d:3d:00:71:
         6a:01:ab:38:1b:bf:bb:4e:d8:ed:b1:90:9c:07:41:77:6d:b1:
         44:17:82:da:81:82:7c:df:9b:4a:70:42:79:b0:98:2b:b2:c1:
         78:bf:67:2d:5d:8f:bd:9b:26:2e:1d:0e:87:a7:63:f5:8b:14:
         ed:54:1f:b4:80:6f:66:be:fd:61:66:45:05:4a:ca:3b:64:bc:
         a2:a5:a1:13:1f:e8:45:55:23:9c:b6:53:96:38:54:91:93:d7:
         a3:24:11:31:71:6f:f7:b6:c8:35:e5:0d:a4:8e:be:2f:86:cc:
         b0:db:be:60:c5:be:44:22:b7:c3:28:b4:2c:a2:d2:0e:1f:df:
         79:03:f2:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 09:41:51 2024 by rpki-client on console-ams.rpki-client.org