Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
File:                     1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer (raw, json)
Hash identifier:          LQjZV8aoNoUcUCTkF93LaiIpShmJVAs4XB+8yry7Z2s=
Subject key identifier:   FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7265A7218C7363B0C99D531BE10021F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:30:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202421
                          IP: 185.204.176.0/22
                          IP: 2a0a:fac0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:5a:72:18:c7:36:3b:0c:99:d5:31:be:10:02:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:30:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:5e:49:d3:cb:4d:d8:9b:17:6e:93:67:1c:
                    f5:f2:05:d5:40:02:56:fb:72:92:68:d8:a7:e6:fd:
                    3c:83:15:e7:4d:6c:a7:5d:5b:2b:54:f5:21:01:de:
                    c9:aa:e8:42:c3:3a:2e:70:14:28:ec:5a:76:34:ba:
                    89:2b:2d:e6:c6:10:ea:ca:32:ba:b9:6d:1d:2a:ef:
                    c5:38:e4:d6:8c:50:54:55:9c:84:47:81:08:ba:5d:
                    a9:e0:13:55:22:ff:dc:35:e4:6d:47:1e:9d:2a:62:
                    46:27:4e:55:d3:ed:1f:3b:6e:9a:d2:d3:63:c2:96:
                    05:94:5b:82:5a:a3:89:d9:9c:f1:54:5b:e8:04:b1:
                    ab:db:cf:a5:34:33:6d:71:09:c0:e0:e1:8c:04:00:
                    0d:f1:76:bf:cb:6a:55:1d:00:82:14:09:75:a7:92:
                    67:14:7f:7a:01:5a:9f:16:68:e1:a8:ab:9c:a0:bf:
                    49:9d:74:ab:ac:dd:3d:c5:b8:b1:1f:4d:36:af:2c:
                    ca:ed:e1:22:2c:cc:62:e9:9c:fa:38:8c:a6:24:2a:
                    2b:e6:fe:14:36:92:be:8d:4c:a7:65:88:4c:71:2e:
                    15:b5:6e:76:45:d2:60:69:2e:b0:35:f2:6e:93:08:
                    ce:1a:28:98:4e:ec:1b:5e:7f:33:e7:24:58:5d:77:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.176.0/22
                IPv6:
                  2a0a:fac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202421

    Signature Algorithm: sha256WithRSAEncryption
         95:25:96:90:ae:66:02:49:c4:0c:fe:4c:a1:28:97:be:4d:db:
         24:60:35:72:45:38:7f:c7:1e:b3:79:61:62:fb:c8:16:23:08:
         70:f8:d9:4d:2a:fb:11:9c:a0:4f:b8:ff:9f:c3:64:b9:81:6a:
         11:c3:85:36:64:6d:1d:c4:0a:03:d8:5a:6c:6b:e1:b4:7f:ca:
         3e:43:8d:35:99:dc:90:3e:05:06:46:86:37:38:c1:31:ca:e8:
         2e:6a:24:c8:d5:57:db:d0:b5:50:76:86:00:1d:d7:95:ff:b2:
         c4:5c:df:38:6c:18:bd:6c:80:f7:6f:a7:e2:27:d6:a2:04:c7:
         c9:54:fe:08:23:3a:29:b8:1e:1f:af:76:4c:e1:bc:27:f2:bd:
         ad:b7:b8:3d:ae:c8:ef:d1:64:df:97:42:94:9b:36:05:ba:87:
         d4:a7:58:af:64:27:f4:83:07:a0:20:bb:8c:38:75:05:74:95:
         35:31:81:3f:0c:43:d2:94:9f:47:fd:8b:e2:59:0f:37:a2:0d:
         3f:30:37:c8:16:a5:a9:5f:97:89:20:eb:c1:c7:ba:45:79:0b:
         e6:35:ae:99:b7:f3:f3:3f:d5:98:86:11:77:6b:5b:46:89:94:
         74:98:34:fb:ba:00:94:43:40:93:4c:40:92:63:2c:77:d7:4a:
         ec:9c:46:5f
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYzHJlpyGMc2OwyZ1TG+EAIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjk1ZTY1OTRkYzM3MDUzY2U5OGJkNTg4OTA2MzU5MWIzNWUyZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUteSdPLTdibF26TZxz18gXVQAJW
+3KSaNin5v08gxXnTWynXVsrVPUhAd7JquhCwzoucBQo7Fp2NLqJKy3mxhDqyjK6
uW0dKu/FOOTWjFBUVZyER4EIul2p4BNVIv/cNeRtRx6dKmJGJ05V0+0fO26a0tNj
wpYFlFuCWqOJ2ZzxVFvoBLGr28+lNDNtcQnA4OGMBAAN8Xa/y2pVHQCCFAl1p5Jn
FH96AVqfFmjhqKucoL9JnXSrrN09xbixH002ryzK7eEiLMxi6Zz6OIymJCor5v4U
NpK+jUynZYhMcS4VtW52RdJgaS6wNfJukwjOGiiYTuwbXn8z5yRYXXc5/wIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFPuV5llNw3BTzpi9WIkGNZGzXi2AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzc4MTc4
Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2MzYvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhm
LTIxOTktNDhlMC05MDFkLWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZ
aVFZMWtiTmVMWUEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEArnMsDANBAIAAjAHAwUDKgr6wDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDFrUwDQYJKoZIhvcNAQELBQADggEBAJUllpCuZgJJ
xAz+TKEol75N2yRgNXJFOH/HHrN5YWL7yBYjCHD42U0q+xGcoE+4/5/DZLmBahHD
hTZkbR3ECgPYWmxr4bR/yj5DjTWZ3JA+BQZGhjc4wTHK6C5qJMjVV9vQtVB2hgAd
15X/ssRc3zhsGL1sgPdvp+In1qIEx8lU/ggjOim4Hh+vdkzhvCfyva23uD2uyO/R
ZN+XQpSbNgW6h9SnWK9kJ/SDB6Agu4w4dQV0lTUxgT8MQ9KUn0f9i+JZDzeiDT8w
N8gWpalfl4kg68HHukV5C+Y1rpm38/M/1ZiGEXdrW0aJlHSYNPu6AJRDQJNMQJJj
LHfXSuycRl8=
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:54:42 2024 by rpki-client on console-fra.rpki-client.org