Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
File:                     Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer (raw, json)
Hash identifier:          Yi8T94hiIe/KxBjoL4VL++W/Rylu13uzrrmpAN6th4A=
Subject key identifier:   37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA294C71AAC8BC92241D16BE2571BB5A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:32:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 31.14.36.0/22
                          IP: 45.132.24.0/22
                          IP: 185.155.52.0/22
                          IP: 2a0e:65c0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:4c:71:aa:c8:bc:92:24:1d:16:be:25:71:bb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:32:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3718b734349bf327d9453b96501e44b192e55142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:d3:55:5b:6f:04:57:fe:bc:07:67:4f:41:
                    41:49:4b:6d:d0:8f:d1:6b:1c:51:e0:00:e0:42:58:
                    c2:5e:bc:8c:4a:5b:6e:27:74:6b:ce:7f:4a:90:2b:
                    ea:45:8d:b7:90:9d:81:00:97:82:ec:10:63:ba:bf:
                    9c:7b:b8:86:0f:34:3f:2c:42:18:6c:af:a3:02:c8:
                    bc:b8:68:36:6b:53:92:7d:ba:c1:d7:65:50:13:b8:
                    27:0e:ee:43:59:99:8a:45:f4:b9:7f:ff:bd:6b:22:
                    a6:11:1a:52:9b:2d:49:c4:d0:f1:31:67:ca:d8:14:
                    18:30:69:dc:b0:bf:b5:4f:11:19:b8:ae:60:4a:e4:
                    af:7e:fa:62:47:c4:32:56:69:e9:26:68:e2:f3:d0:
                    5b:12:41:60:e8:b2:c8:8c:02:9d:ab:e4:60:00:4a:
                    9e:1a:4a:3a:7a:6c:9e:20:4b:7e:6b:7d:1f:99:c5:
                    89:ad:b2:ff:fc:9b:55:51:93:ae:b6:b0:49:08:a7:
                    33:be:63:a2:96:df:41:eb:97:f3:73:0a:94:4c:fe:
                    cf:7b:2c:e4:58:72:c1:0d:5d:1d:11:2f:9c:35:58:
                    19:bd:68:9f:43:5d:27:04:86:9f:c5:d4:a2:7c:d8:
                    d6:c2:2e:d7:b5:2b:9e:fc:69:3d:2d:f8:b8:1a:03:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.36.0/22
                  45.132.24.0/22
                  185.155.52.0/22
                IPv6:
                  2a0e:65c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:25:5a:c1:21:22:0a:42:7c:82:66:9f:90:ee:1c:9c:0f:
         2c:ca:67:1b:51:c7:5e:20:85:de:e4:d4:a0:24:2b:de:b1:66:
         17:c1:47:48:a0:65:00:56:d3:b5:90:4b:fc:85:09:1d:76:a8:
         45:d8:5f:b2:1d:86:ab:27:1c:2d:ac:17:ad:1f:2f:a0:b8:81:
         bb:76:da:51:57:ff:52:13:cd:e0:13:70:b8:83:92:5f:4f:4a:
         28:6b:90:4c:da:69:22:6f:1a:b1:9a:01:97:04:8b:d6:97:28:
         9a:2d:3e:f6:24:d1:d2:98:97:3c:d8:d1:fd:45:c1:a7:3b:9f:
         a7:af:2e:50:db:16:49:57:87:02:70:24:ad:c3:aa:ca:5d:6b:
         5a:f5:5a:1e:eb:5e:98:64:a8:18:a7:9f:9b:ae:39:c7:1f:40:
         13:ef:8f:73:9d:4e:1d:b4:ae:11:c2:f9:42:44:3c:2b:4f:93:
         54:03:44:03:8e:f4:29:4e:c1:d1:9e:a4:82:39:39:42:b0:68:
         fb:a9:45:e5:50:18:52:e1:5b:94:3d:89:78:7b:d7:04:7e:77:
         bc:55:45:48:3c:3c:bc:ec:ff:54:d5:51:4e:75:f8:34:23:e9:
         d2:10:0e:80:25:54:99:f6:6e:e0:df:20:d8:9c:4d:80:0a:be:
         c9:9d:bb:ab
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzKKUxxqsi8kiQdFr4lcbtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzE4YjczNDM0OWJmMzI3ZDk0NTNiOTY1MDFlNDRiMTkyZTU1MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvrTVVtvBFf+vAdnT0FBSUtt0I/R
axxR4ADgQljCXryMSltuJ3Rrzn9KkCvqRY23kJ2BAJeC7BBjur+ce7iGDzQ/LEIY
bK+jAsi8uGg2a1OSfbrB12VQE7gnDu5DWZmKRfS5f/+9ayKmERpSmy1JxNDxMWfK
2BQYMGncsL+1TxEZuK5gSuSvfvpiR8QyVmnpJmji89BbEkFg6LLIjAKdq+RgAEqe
Gko6emyeIEt+a30fmcWJrbL//JtVUZOutrBJCKczvmOilt9B65fzcwqUTP7Peyzk
WHLBDV0dES+cNVgZvWifQ10nBIafxdSifNjWwi7XtSue/Gk9Lfi4GgP2kQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzdiZjhh
OC1lNDljLTQwNmUtOGViNy1jODIzY2M4ZjM4MzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvN2JmOGE4
LWU0OWMtNDA2ZS04ZWI3LWM4MjNjYzhmMzgzNy8xL054aTNORFNiOHlmWlJUdVdV
QjVFc1pMbFVVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCHw4kAwQCLYQYAwQCuZs0MA0EAgACMAcDBQMq
DmXAMA0GCSqGSIb3DQEBCwUAA4IBAQBDrCVawSEiCkJ8gmafkO4cnA8symcbUcde
IIXe5NSgJCvesWYXwUdIoGUAVtO1kEv8hQkddqhF2F+yHYarJxwtrBetHy+guIG7
dtpRV/9SE83gE3C4g5JfT0ooa5BM2mkibxqxmgGXBIvWlyiaLT72JNHSmJc82NH9
RcGnO5+nry5Q2xZJV4cCcCStw6rKXWta9Voe616YZKgYp5+brjnHH0AT749znU4d
tK4RwvlCRDwrT5NUA0QDjvQpTsHRnqSCOTlCsGj7qUXlUBhS4VuUPYl4e9cEfne8
VUVIPDy87P9U1VFOdfg0I+nSEA6AJVSZ9m7g3yDYnE2ACr7Jnbur
-----END CERTIFICATE-----
Generated at Thu Mar 28 20:47:00 2024 by rpki-client on console-fra.rpki-client.org