Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer (raw, json)
Hash identifier:          fIHPFGotvr7CfWOZrWyWV0xIZQmbWDMazDyiEmTSnfc=
Subject key identifier:   DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4DEF5883315CACC24C62583346007
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211297
                          IP: 5.105.0.0/16
                          IP: 5.180.176.0/24
                          IP: 85.255.176.0/21
                          IP: 91.200.212.0/22
                          IP: 193.46.210.0/24
                          IP: 217.67.64.0/20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:de:f5:88:33:15:ca:cc:24:c6:25:83:34:60:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:f8:64:7d:e7:4c:8d:95:8d:f6:6e:3e:a1:
                    a8:d6:2a:4a:d4:e0:6d:64:a7:3e:cf:ea:6f:e0:89:
                    1f:a6:dc:00:db:47:74:1c:0d:f1:89:4c:5a:1b:ce:
                    72:4a:1f:4e:d3:50:78:15:4f:13:e0:dd:85:18:9b:
                    38:4e:68:68:25:f2:7c:ee:0b:61:93:23:3f:39:94:
                    dd:c5:a0:7e:f6:5f:bd:73:aa:74:d8:41:6c:4a:24:
                    ad:6b:4d:9b:10:5d:72:43:c8:e5:69:25:77:d0:dd:
                    96:d8:b6:15:85:c7:a8:c2:10:8c:13:9d:f4:5d:0f:
                    cd:a4:6d:3f:02:dc:13:51:3e:47:f8:ed:0e:66:b3:
                    34:e1:53:3e:3b:50:b6:7b:97:b3:8d:c2:e7:44:4a:
                    12:9c:3e:80:1a:22:8c:07:9b:9f:b1:6b:98:8a:87:
                    4b:6d:86:fe:20:e3:c5:44:b4:a4:3b:f2:3e:4d:48:
                    4e:13:d6:76:35:f8:20:05:32:34:3e:89:43:00:5f:
                    2a:40:45:2a:67:a2:af:13:04:3f:27:8a:64:ed:de:
                    08:f2:f1:9a:64:8e:a3:3a:7c:0f:40:5a:be:01:29:
                    6f:41:08:32:6e:25:7c:8c:d2:2c:c5:90:22:9b:5e:
                    4d:c2:04:51:ed:e3:c8:d3:6e:2a:d8:22:42:75:a6:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.0.0/16
                  5.180.176.0/24
                  85.255.176.0/21
                  91.200.212.0/22
                  193.46.210.0/24
                  217.67.64.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211297

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:ad:99:b0:98:ce:20:4f:b4:69:de:f5:7e:31:26:76:7a:
         20:d7:60:f4:c6:b8:93:e1:30:54:ff:5b:3f:d5:94:ca:b6:f6:
         1d:37:47:17:40:67:09:2e:f7:40:1a:ee:b5:b3:0b:f8:16:bb:
         60:83:42:35:16:30:82:c3:0c:e5:16:b4:21:ee:aa:15:49:c3:
         48:6d:33:18:b8:09:e6:c6:59:45:b9:75:59:1d:58:66:cd:81:
         19:b8:40:a7:01:02:ac:35:5a:e5:af:45:d3:70:55:46:a2:f7:
         99:b6:c0:91:a9:e8:2a:1e:f5:0c:d7:2b:5e:1f:68:42:95:26:
         96:22:cd:21:68:90:c9:a2:42:61:cf:e3:7e:f3:52:97:f4:cd:
         00:96:21:80:51:59:18:a4:cf:ab:ca:1d:d7:65:a0:88:00:c2:
         12:27:4f:60:d0:83:4c:6c:7a:5d:24:80:36:c1:dc:49:2d:40:
         1f:69:f9:f3:4e:38:7b:bb:69:28:bf:32:34:79:3a:97:ea:c1:
         e2:62:4b:c1:bf:40:e2:af:9e:ba:fd:d2:60:e3:02:98:18:37:
         7d:bb:0f:2a:f8:2e:62:c2:76:f1:47:08:45:dc:65:f8:fa:4b:
         25:f7:1f:ca:07:e8:71:88:2f:17:e0:4f:af:81:2c:39:1c:59:
         9b:d4:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 13:43:15 2023 by rpki-client on console-ams.rpki-client.org