Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
File:                     zv4YrJccgqd399sZ_6szSjJTdwM.cer (raw, json)
Hash identifier:          AVNyvI6M1DhIjchvW1Y8WWqrneyTxDdSYYaTV8atWmE=
Subject key identifier:   CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DBFCF98EFE9E95822D145CA6561079
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:37 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197618

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:db:fc:f9:8e:fe:9e:95:82:2d:14:5c:a6:56:10:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cefe18ac971c82a777f7db19ffab334a32537703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:3c:c4:65:ba:99:67:0a:23:17:3f:91:d5:
                    ab:b4:23:cf:a7:20:64:77:16:30:2c:6f:63:6d:02:
                    92:2c:51:b7:67:71:44:1e:80:1d:21:a3:92:d8:95:
                    a6:0d:31:c8:4e:f5:62:79:60:ec:11:c8:88:ff:9a:
                    90:43:72:85:1a:03:b6:cf:6d:d0:a7:0c:91:e2:e8:
                    8c:4c:51:b5:3a:6f:12:1f:96:7c:ce:f8:9e:83:ff:
                    78:b5:32:b5:b9:51:4e:33:f9:71:36:05:1c:40:de:
                    4b:bc:d4:21:2d:ec:8c:7e:ba:ac:2e:0e:33:0d:de:
                    96:81:46:81:3c:1b:93:65:0a:e3:13:b0:a7:4c:5b:
                    2a:28:b2:ae:0e:b6:d2:74:02:f1:2a:a9:f8:17:92:
                    47:b4:aa:43:3c:41:a3:9c:78:1d:dd:07:b9:f9:f3:
                    20:6e:f7:8a:e9:e2:d6:61:91:a2:ca:21:fa:48:07:
                    63:60:84:22:d1:08:05:8a:93:7a:87:06:56:fd:78:
                    83:39:80:73:fa:ce:f7:3b:e6:0a:92:6d:fe:c1:41:
                    9f:17:39:c3:db:4b:95:9b:be:df:77:1b:e6:fc:a1:
                    c4:0b:35:46:02:ff:d1:51:a4:29:ed:43:3c:ab:2e:
                    26:cf:16:93:ae:26:8e:e3:da:e1:e2:b7:7d:67:dd:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197618

    Signature Algorithm: sha256WithRSAEncryption
         2a:74:c1:7a:72:a4:dc:69:11:d5:70:48:2b:39:d1:6f:b9:3d:
         e9:82:f1:48:5b:9a:e5:29:59:58:5c:b9:b6:a8:46:1b:70:2d:
         0b:c1:2c:97:d2:d4:16:d4:5b:8e:08:ed:e3:ec:b1:dc:6d:69:
         9d:e2:71:15:8c:8b:cc:de:f5:86:9a:78:30:3e:6b:9a:42:57:
         54:d3:59:2d:4a:92:ae:1f:71:4f:d9:d6:48:9d:f4:a9:12:54:
         64:71:25:43:d2:8c:76:26:3e:e2:58:59:38:31:57:e3:2f:52:
         ff:73:5f:6c:0d:e4:d4:1d:b6:50:34:39:0e:91:b2:11:88:1f:
         db:e8:5e:b5:2f:ba:94:44:14:1f:da:11:42:54:16:df:69:77:
         ef:65:b9:d0:6f:fa:10:46:bf:38:86:52:99:fe:32:1c:96:b2:
         05:64:c4:0f:37:c8:67:a9:cb:33:60:7c:1b:6f:c4:d9:47:34:
         ab:49:0a:96:20:d2:25:e7:3a:65:de:f2:94:19:0a:dc:37:8e:
         8e:65:16:05:23:49:e3:c2:af:0e:11:e4:e4:1e:f9:c6:d9:23:
         f0:ef:45:ea:00:65:57:b0:da:5f:06:1b:a9:4b:2f:21:d4:2f:
         fd:41:72:8f:f8:b7:ab:a5:f5:a8:f3:12:bf:8b:0a:b9:4f:9b:
         74:32:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:25 2024 by rpki-client on console-fra.rpki-client.org