Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
File:                     yq7leeATIY9XE4ZBPixbK8JFqDY.cer (raw, json)
Hash identifier:          JNXi3jY9rOGFFbjsZSoWuTChR9aLiH1GtX2igiKl/iw=
Subject key identifier:   CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D4C67FB1DDA230E2E1FC0D3EF0D31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208349
                          AS: 211933
                          IP: 5.35.120.0/22
                          IP: 31.10.6.0/23
                          IP: 45.134.124.0/22
                          IP: 77.105.156.0/22
                          IP: 185.31.133.0/24
                          IP: 2a0e:7e40::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:4c:67:fb:1d:da:23:0e:2e:1f:c0:d3:ef:0d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=caaee579e013218f571386413e2c5b2bc245a836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:ed:9b:10:a6:4f:0d:ac:87:e3:02:ce:4d:
                    69:db:13:59:ad:48:ac:1f:9f:fd:42:8a:ff:0b:2a:
                    d9:ce:8a:25:f9:d8:5b:e2:5e:e7:88:87:c7:e5:0a:
                    2d:9d:12:f9:46:ef:16:fb:c9:6f:20:ed:80:c1:93:
                    42:d2:58:51:1d:53:e3:69:fd:f1:d5:ac:5a:e4:78:
                    52:b0:08:50:26:a1:1e:b0:87:82:9f:9b:fc:fb:93:
                    a5:46:4d:b3:4c:07:77:30:6e:47:24:42:c7:93:81:
                    d9:95:31:5d:e1:b9:f3:fe:91:fa:92:d6:35:c2:59:
                    de:17:43:82:3c:5e:77:e7:e2:1f:af:ff:3a:7e:a4:
                    d5:45:0b:d3:dc:16:50:d8:83:a6:df:1c:a1:85:27:
                    ad:e2:b1:a0:11:ee:98:bf:b3:20:c7:2d:4c:a2:ec:
                    31:f0:e4:df:32:41:fe:98:af:cd:20:67:54:15:eb:
                    cf:ea:b8:09:99:56:0a:93:4b:db:01:7e:94:a6:57:
                    a1:ff:7e:81:fd:9b:36:6e:55:38:d2:22:e0:56:f3:
                    59:a7:8e:a8:d3:a6:7e:e6:9b:52:e6:f1:e9:21:8a:
                    75:34:c7:0e:44:74:86:e5:d5:47:12:fa:00:e1:39:
                    55:a0:a2:27:99:a7:bb:9c:82:10:a8:28:cd:11:8a:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.35.120.0/22
                  31.10.6.0/23
                  45.134.124.0/22
                  77.105.156.0/22
                  185.31.133.0/24
                IPv6:
                  2a0e:7e40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208349
                  211933

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:b4:50:59:e3:01:2f:2e:d4:6f:aa:56:b4:8c:af:d3:17:
         fc:c2:de:d1:fa:18:5a:a7:c9:97:1b:04:f6:a4:5e:19:f4:97:
         d5:9c:62:c0:2d:e3:20:7c:83:96:95:e5:59:7c:7a:8f:dc:c7:
         5a:9e:14:db:a9:b6:a7:d4:47:83:fb:a4:cb:42:af:92:3c:4e:
         ff:50:b9:29:f2:11:69:6f:9c:bc:67:6e:17:b7:49:b7:0f:bf:
         71:b4:d6:6d:f6:b9:35:6f:a2:60:10:47:61:d1:c2:c9:e9:82:
         63:9d:1e:a9:72:89:aa:28:14:db:7a:90:80:5d:67:58:35:05:
         2a:17:bd:d1:51:8b:5b:0f:ae:90:6d:75:5d:d0:2e:79:20:6d:
         9e:56:78:53:49:e0:6c:a0:5b:90:5b:81:eb:34:74:cb:16:21:
         57:d5:95:fe:e9:3e:44:1a:b8:c9:6f:2e:5e:65:4f:78:ed:b9:
         a6:03:78:4a:51:0f:72:24:6d:1f:0c:ae:ce:85:8e:f0:fb:b8:
         07:6f:a0:15:0e:45:0d:9e:e8:bf:12:6f:8e:cd:e3:ce:34:28:
         cf:8f:a3:89:d7:34:cf:68:00:92:1c:f6:8a:7b:65:3f:df:7c:
         71:28:16:83:55:84:5a:c1:0b:5c:d5:a9:a3:96:38:68:72:f0:
         ad:75:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:03 2024 by rpki-client on console-fra.rpki-client.org