Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.cer (raw, json)
Hash identifier:          4mFnmzSXnBsDWdfxXxG37ZuB4Nm4pwkDzBkhrVMJFGw=
Subject key identifier:   D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC50148682F13892362F0E381D2E9CCDD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 6866
                          AS: 41657
                          AS: 212875
                          IP: 31.153.0.0/16
                          IP: 37.149.0.0/16
                          IP: 46.198.0.0/17
                          IP: 46.199.0.0/16
                          IP: 62.228.0.0/16
                          IP: 81.4.128.0/18
                          IP: 83.168.0.0/18
                          IP: 87.228.128.0/17
                          IP: 93.109.0.0/16
                          IP: 128.0.107.0 -- 128.0.111.255
                          IP: 128.0.200.0 -- 128.0.255.255
                          IP: 176.92.200.0 -- 176.92.255.255
                          IP: 185.2.96.0/22
                          IP: 193.22.30.0/24
                          IP: 193.43.0.64/27
                          IP: 193.58.0.0 -- 193.58.0.47
                          IP: 193.58.0.64 -- 193.58.0.255
                          IP: 193.164.232.160/27
                          IP: 193.188.134.168 -- 193.188.134.199
                          IP: 193.192.12.128/25
                          IP: 193.201.147.160/27
                          IP: 193.201.148.0/26
                          IP: 193.201.149.192/26
                          IP: 193.201.150.64 -- 193.201.150.191
                          IP: 193.201.151.0/26
                          IP: 193.201.157.0/25
                          IP: 193.218.205.64 -- 193.218.205.223
                          IP: 193.218.207.80 -- 193.218.207.127
                          IP: 194.42.55.32 -- 194.42.55.159
                          IP: 194.117.52.0/25
                          IP: 194.153.156.64 -- 194.153.156.255
                          IP: 194.153.157.192/26
                          IP: 195.14.128.0/19
                          IP: 195.60.81.192 -- 195.60.82.63
                          IP: 195.60.83.64/27
                          IP: 195.60.83.160/27
                          IP: 195.60.84.0/25
                          IP: 195.60.87.128/25
                          IP: 195.60.93.0/26
                          IP: 195.60.93.192/26
                          IP: 195.60.95.0/25
                          IP: 212.31.96.0/19
                          IP: 213.7.0.0/16
                          IP: 213.149.160.0/19
                          IP: 2a00:1358::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:48:68:2f:13:89:23:62:f0:e3:81:d2:e9:cc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:8c:5d:f4:6c:7a:d0:c3:db:ee:e1:fd:a6:
                    33:27:49:0d:a8:97:0e:5f:21:4f:44:57:d3:49:8e:
                    85:93:a9:36:11:29:81:08:dc:90:d4:ac:7d:3b:5b:
                    ec:e9:e0:29:85:36:a1:00:1c:ea:eb:59:5d:d0:d4:
                    c0:07:95:f2:04:36:5a:a5:99:e5:07:9d:6b:40:a8:
                    3e:c2:3c:88:98:02:66:dd:e1:59:a9:ac:81:93:c9:
                    47:df:9a:45:93:b3:7a:6e:6d:51:1a:40:45:1b:33:
                    db:21:82:50:d1:05:bb:ea:bb:cb:4f:a4:70:85:6f:
                    4a:1d:e4:04:d0:9b:97:b7:48:9e:7a:6f:b4:85:8c:
                    d1:b6:52:26:d4:5d:d9:e0:0b:13:15:26:cb:89:29:
                    e4:0f:b6:32:17:e5:5e:63:98:c2:a3:a7:21:b6:5e:
                    42:4c:3d:04:3e:69:73:4d:ba:46:a5:72:70:92:d7:
                    a1:ed:a7:dc:b4:c2:f3:1a:da:bb:ed:3f:0c:29:5a:
                    b8:11:bb:3f:8b:1e:1c:cb:ff:af:73:b3:7e:1a:cc:
                    a8:16:06:98:50:a0:ee:db:0b:b3:b1:48:88:2d:e6:
                    8c:3e:38:a6:95:6f:a6:b9:13:5c:e6:ec:c6:27:3f:
                    e9:4f:42:f4:d5:d1:cb:31:1a:ff:06:03:0c:cf:f5:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.153.0.0/16
                  37.149.0.0/16
                  46.198.0.0/17
                  46.199.0.0/16
                  62.228.0.0/16
                  81.4.128.0/18
                  83.168.0.0/18
                  87.228.128.0/17
                  93.109.0.0/16
                  128.0.107.0-128.0.111.255
                  128.0.200.0-128.0.255.255
                  176.92.200.0-176.92.255.255
                  185.2.96.0/22
                  193.22.30.0/24
                  193.43.0.64/27
                  193.58.0.0-193.58.0.47
                  193.58.0.64-193.58.0.255
                  193.164.232.160/27
                  193.188.134.168-193.188.134.199
                  193.192.12.128/25
                  193.201.147.160/27
                  193.201.148.0/26
                  193.201.149.192/26
                  193.201.150.64-193.201.150.191
                  193.201.151.0/26
                  193.201.157.0/25
                  193.218.205.64-193.218.205.223
                  193.218.207.80-193.218.207.127
                  194.42.55.32-194.42.55.159
                  194.117.52.0/25
                  194.153.156.64-194.153.156.255
                  194.153.157.192/26
                  195.14.128.0/19
                  195.60.81.192-195.60.82.63
                  195.60.83.64/27
                  195.60.83.160/27
                  195.60.84.0/25
                  195.60.87.128/25
                  195.60.93.0/26
                  195.60.93.192/26
                  195.60.95.0/25
                  212.31.96.0/19
                  213.7.0.0/16
                  213.149.160.0/19
                IPv6:
                  2a00:1358::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6866
                  41657
                  212875

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:9d:13:33:71:14:a0:f8:e3:45:2e:d8:82:de:6f:8e:cd:
         ef:34:cb:ea:a6:dc:bf:71:da:41:0b:f1:26:85:42:ab:25:ee:
         26:93:7e:ef:49:43:a8:6e:6b:6c:e4:6b:0f:4a:43:02:4a:d7:
         c8:a6:9c:83:13:44:2a:eb:cf:80:ed:1f:30:a0:63:76:44:5d:
         b2:b1:16:5b:ac:cd:9a:41:67:1b:e1:a8:38:2a:0f:7e:bd:14:
         90:d4:80:5d:15:7b:d2:50:c6:d0:a0:26:da:ad:24:6c:31:a3:
         37:04:70:c8:a8:e2:48:32:dc:8c:20:14:c8:85:94:72:b8:35:
         3d:97:84:8a:62:f2:01:ca:91:5f:ea:7b:1f:69:f3:5a:b8:e9:
         2f:12:d8:9d:56:e9:f8:b7:96:96:1d:79:58:51:8d:33:6a:78:
         37:6e:3d:76:41:00:d5:2e:4a:e1:60:1c:77:29:92:ce:e8:65:
         13:cd:9d:32:5e:5a:c3:c0:14:bc:2d:d2:98:31:da:9a:de:69:
         eb:34:1a:f8:78:a1:8d:30:3b:e2:c1:ab:61:7a:20:41:4e:4f:
         45:0e:4a:d7:62:8b:a9:b5:be:1b:4a:00:0f:43:7e:61:d5:84:
         e1:2f:b5:da:b2:62:64:91:8e:97:8f:3a:94:03:66:60:dd:de:
         09:c1:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:58:30 2024 by rpki-client on console-ams.rpki-client.org