Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.cer (raw, json)
Hash identifier:          On8Qwvyx407xv4CvIw5d5Ml2TmIzNz91pvl9WsaPkBI=
Subject key identifier:   D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC795511E5A419AF30D3BDE00D30FF5C9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:31:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60654
                          IP: 195.5.189.0/24
                          IP: 2a10:e940::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:51:1e:5a:41:9a:f3:0d:3b:de:00:d3:0f:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:31:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:1b:61:63:67:79:12:41:71:2a:0d:22:ba:
                    08:23:8a:e1:7c:36:3a:c8:8f:a7:64:c3:d9:0f:8e:
                    50:fb:98:64:f2:39:95:29:9a:b6:8a:56:bd:1d:9d:
                    e3:00:6c:5c:fb:f8:6e:32:24:b3:7c:c2:d2:cf:22:
                    5b:45:b3:4e:05:6a:37:d7:07:9c:da:9b:ee:6f:ce:
                    7e:20:2f:76:d2:3f:91:d3:a9:87:65:d7:46:2e:87:
                    ca:3e:83:71:da:78:3b:a5:c3:b5:8e:64:12:e7:a9:
                    6f:5d:d6:52:8c:22:14:25:bf:c1:1e:af:3c:e5:4e:
                    84:db:f5:e3:4e:b5:dc:6a:9c:7c:76:4f:a8:9f:ad:
                    60:2d:e2:d1:33:0b:1d:4b:af:b6:71:e9:f8:f6:6b:
                    94:72:7e:82:bc:7c:e7:08:66:9a:ee:13:d8:75:bc:
                    db:65:ed:3a:b8:b0:bb:15:31:42:95:b8:65:2c:77:
                    54:8f:9c:8f:4c:f8:fb:80:b3:f4:09:d3:93:0e:d0:
                    3b:25:13:39:02:af:26:65:cb:22:b6:cf:aa:56:85:
                    33:58:58:8d:02:e4:c3:30:3e:05:9f:78:58:f2:51:
                    47:07:d0:9b:e1:8e:6f:01:01:53:d6:1a:a7:76:37:
                    4a:3a:20:4f:6a:df:c6:73:40:33:e6:89:fa:99:6f:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.189.0/24
                IPv6:
                  2a10:e940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60654

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:c5:e4:fa:e3:d0:6f:a1:3c:02:1c:ce:0e:ef:48:7b:71:
         f5:62:e5:40:16:da:20:7a:82:41:ee:49:ce:42:a6:1a:c9:56:
         41:47:4f:7b:2b:f6:73:13:59:bc:4f:60:2f:6d:aa:62:20:fe:
         e9:7a:b4:91:22:f9:8d:ea:6c:2d:0d:36:06:60:7c:c3:89:44:
         f6:27:36:5a:08:fd:f8:6d:fd:bc:a2:e6:03:70:6e:e7:9e:06:
         17:ef:d1:a5:68:60:7c:c5:54:f5:b1:11:79:50:0d:d2:80:47:
         0f:f1:96:01:1c:0b:4e:fa:f7:9c:81:c8:6d:78:9a:4d:e8:f4:
         3e:ed:ff:28:ba:22:f6:2a:2d:fc:d3:76:92:69:12:fd:62:7d:
         7a:1b:a1:6b:e9:b8:17:ec:a6:d8:32:21:75:35:2d:b9:2a:35:
         80:f6:5e:65:1d:36:98:1b:1e:e7:75:53:50:cd:e5:93:96:3d:
         ae:3c:f3:f4:45:81:0c:ad:ec:57:99:d5:6b:1e:4c:f3:9a:5e:
         bd:da:4c:48:ff:72:86:5c:f1:5f:a5:87:ec:02:2e:7c:2a:3c:
         3b:7a:f2:39:53:fa:7e:a5:2f:ac:1d:9c:9a:5f:a9:aa:8f:66:
         67:2a:89:5a:bd:0d:2e:bc:53:be:64:92:7c:db:69:e0:5f:42:
         2e:d2:7c:3f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzHlVEeWkGa8w073gDTD/XJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWRiZjMxZmQ5Mzc5Y2FiNWM1MGFmZDM5MmEyZWU5MDU3MTg4MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMbYWNneRJBcSoNIroII4rhfDY6
yI+nZMPZD45Q+5hk8jmVKZq2ila9HZ3jAGxc+/huMiSzfMLSzyJbRbNOBWo31wec
2pvub85+IC920j+R06mHZddGLofKPoNx2ng7pcO1jmQS56lvXdZSjCIUJb/BHq88
5U6E2/XjTrXcapx8dk+on61gLeLRMwsdS6+2cen49muUcn6CvHznCGaa7hPYdbzb
Ze06uLC7FTFClbhlLHdUj5yPTPj7gLP0CdOTDtA7JRM5Aq8mZcsits+qVoUzWFiN
AuTDMD4Fn3hY8lFHB9Cb4Y5vAQFT1hqndjdKOiBPat/Gc0Az5on6mW8IcQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNHb8x/ZN5yrXFCv05Ki7pBXGINfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzVkODMy
Ny1mMDFkLTRmN2EtYjk1NS04ZTBiM2Y1ODk3YjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvNWQ4MzI3
LWYwMWQtNGY3YS1iOTU1LThlMGIzZjU4OTdiOS8xLzBkdnpIOWszbkt0Y1VLX1Rr
cUx1a0ZjWWcxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwwW9MA0EAgACMAcDBQMqEOlAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDs7jANBgkqhkiG9w0BAQsFAAOCAQEAN27F5Prj0G+h
PAIczg7vSHtx9WLlQBbaIHqCQe5JzkKmGslWQUdPeyv2cxNZvE9gL22qYiD+6Xq0
kSL5jepsLQ02BmB8w4lE9ic2Wgj9+G39vKLmA3Bu554GF+/RpWhgfMVU9bEReVAN
0oBHD/GWARwLTvr3nIHIbXiaTej0Pu3/KLoi9iot/NN2kmkS/WJ9ehuha+m4F+ym
2DIhdTUtuSo1gPZeZR02mBse53VTUM3lk5Y9rjzz9EWBDK3sV5nVax5M85pevdpM
SP9yhlzxX6WH7AIufCo8O3ryOVP6fqUvrB2cml+pqo9mZyqJWr0NLrxTvmSSfNtp
4F9CLtJ8Pw==
-----END CERTIFICATE-----
Generated at Fri Mar 29 09:00:41 2024 by rpki-client on console-fra.rpki-client.org