Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
File:                     wwOJmXRU-gA-H_yM0ui35l2T9OI.cer (raw, json)
Hash identifier:          zJ0Zj4G3lJNtq34Ls76anDo2vxVwTBkdlA9ST65GeDM=
Subject key identifier:   C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348A0F04A2BAF298A6391374B98D6E1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 29464
                          IP: 195.149.113.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:a0:f0:4a:2b:af:29:8a:63:91:37:4b:98:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:29:ba:2b:6e:01:f2:b5:29:cb:a4:18:17:
                    a7:9a:07:f6:c0:3f:c2:0e:dd:44:9e:2e:f5:1d:f6:
                    0e:4b:f7:f1:dc:f2:31:d9:90:b3:49:e7:00:a0:c5:
                    9c:27:3d:41:a2:72:3e:15:a2:ee:c6:03:47:11:c1:
                    7e:40:79:01:9c:0b:fe:d5:32:c0:83:53:9e:59:8d:
                    d1:23:08:cd:65:36:21:69:c3:91:ab:32:d0:d5:3c:
                    3e:e5:f1:94:d9:8c:71:40:cb:67:6b:69:3a:1c:2c:
                    c2:07:4f:40:2e:f0:e3:63:da:a0:ce:3b:44:5b:1e:
                    f4:d0:6e:bc:bc:85:94:dd:c0:2c:b1:63:f1:dc:ce:
                    72:05:23:24:16:b9:46:33:7b:bb:08:2e:ef:23:d4:
                    60:b4:ab:7b:76:5f:38:64:ea:53:cb:06:0f:59:32:
                    a4:33:34:65:12:12:02:2a:8e:db:28:79:6c:4d:af:
                    df:d1:a2:3c:dd:dc:f2:70:a5:02:1b:d6:8f:f9:10:
                    f0:f6:20:65:d4:72:ea:5b:b3:2e:a7:9a:4d:eb:1e:
                    2b:37:ff:0b:df:67:f0:50:a9:1c:c9:6d:bf:34:37:
                    15:be:db:2d:b6:5c:94:de:df:78:a8:e9:37:be:e1:
                    82:98:03:11:5b:bb:7f:20:45:7f:6b:28:b5:02:c2:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.113.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29464

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:a6:45:15:5c:02:c5:c8:3c:8b:ea:03:1c:22:68:26:e7:
         86:14:7b:6b:a1:4c:2b:ba:eb:23:4b:7e:13:31:7c:cb:96:20:
         ed:3e:8a:5f:94:b2:05:ac:74:9e:7c:0c:2a:17:63:bd:52:e2:
         f3:32:a5:2f:68:71:54:98:e1:d7:4b:4f:b6:14:8f:52:f9:97:
         ef:fb:d9:78:70:02:10:bf:1b:dc:4c:5b:e7:12:46:34:12:5a:
         fb:7d:c3:18:90:85:28:09:9c:1e:09:9e:ff:6e:94:e5:66:80:
         4b:ea:f0:d1:f4:dc:42:db:8d:c2:46:68:72:13:d7:cf:9e:b2:
         db:03:57:5b:fc:19:8a:87:67:1f:82:47:d2:50:1d:25:c1:4c:
         99:e5:fb:31:95:27:78:08:6a:77:11:3f:cf:d9:33:bf:a0:ea:
         8a:02:b2:b6:20:3a:90:20:00:45:60:6e:77:be:27:bd:18:24:
         be:92:4b:e0:bc:a0:c0:41:17:9c:02:71:ae:e3:6c:7a:c6:ef:
         7a:cc:89:36:07:57:fb:06:83:a3:22:8c:5b:67:38:a2:7b:a5:
         84:4a:e8:41:89:ae:66:bf:d1:5e:33:b5:54:51:a5:b3:b0:44:
         18:3e:d2:31:93:9f:b8:fb:f1:0b:8a:7e:e7:c5:40:98:16:d4:
         b2:c8:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:07:35 2024 by rpki-client on console-ams.rpki-client.org