Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer
File:                     6WxjtJSw0IpVqqGAX2INuNrSVX8.cer (raw, json)
Hash identifier:          gDOBxOZ0nxOwzmNNdQQTWR4KOtYttWYPv1Oyh+kkuSE=
Subject key identifier:   E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E6452C6A3625FCBE58D932C3AAC6F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/6WxjtJSw0IpVqqGAX2INuNrSVX8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.227.184.0/24
                          IP: 2a12:6c80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Apr 2024 14:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:64:52:c6:a3:62:5f:cb:e5:8d:93:2c:3a:ac:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:3f:26:bf:63:62:c9:98:b3:23:3d:52:5a:
                    b9:f7:6c:36:c5:2f:8f:c5:83:c7:6a:09:ea:92:45:
                    cd:d1:70:95:30:ee:1c:87:1c:dc:2e:dd:d9:e2:e0:
                    ce:6e:4d:1c:a2:ed:c5:d6:79:8a:87:f3:a8:39:1f:
                    04:38:c4:8d:17:af:14:cf:d2:11:5e:fc:a6:5f:f5:
                    a1:f3:df:19:4d:9b:13:1a:d9:d0:13:13:82:cf:b9:
                    68:f1:24:24:4c:17:ca:3a:17:db:41:5d:78:2c:87:
                    7e:5f:57:cc:24:bf:49:94:a9:32:e6:cc:9d:60:29:
                    aa:77:14:01:f9:34:82:88:9a:d1:df:46:96:53:05:
                    df:a9:96:37:59:3c:9a:10:48:07:eb:14:dc:ee:b3:
                    3d:5b:c6:d2:32:04:66:20:c7:45:bf:d2:b2:75:8e:
                    1f:23:4d:1e:ed:72:b2:5a:e4:a4:3b:13:f4:46:6a:
                    1f:a0:76:f9:ba:ad:b3:56:56:19:43:a7:f3:3d:1e:
                    7d:e3:22:62:de:35:24:8e:b2:31:e3:63:56:72:7a:
                    b2:f0:e7:35:ee:f6:43:f3:70:17:cc:c9:b3:cb:ff:
                    9e:3e:30:88:88:f5:f6:96:2b:a8:2b:29:f1:fc:93:
                    b8:2c:0a:48:2b:4f:3e:dd:44:40:7e:b8:a6:ef:11:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/6WxjtJSw0IpVqqGAX2INuNrSVX8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.184.0/24
                IPv6:
                  2a12:6c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:07:f4:dd:f1:03:aa:ee:23:7a:a3:c9:b4:90:47:31:82:
         bf:2c:fb:c0:01:d5:bd:1d:0f:11:51:26:5b:68:cb:73:27:55:
         13:a7:cc:05:35:2d:6d:e8:2f:84:b3:36:23:e6:ee:49:63:30:
         58:1d:cb:cc:3c:91:66:83:4a:78:69:72:db:f6:b3:77:1a:a6:
         62:ed:c3:49:31:3b:98:00:b8:83:93:75:c8:d1:ad:72:08:2a:
         c1:7e:99:13:81:98:e7:c3:fd:5f:0d:cd:10:21:20:c8:9d:25:
         70:93:bc:f2:51:48:50:bb:04:e7:17:6c:0f:bd:ed:14:99:4d:
         c8:29:2b:41:40:3a:00:d5:de:90:bc:da:9b:c3:8a:fc:e7:44:
         9e:3d:4e:42:fa:6f:b7:26:84:e6:59:b3:c5:fe:54:10:ed:2c:
         2c:85:83:bc:97:e2:24:2e:85:82:42:93:c5:24:04:bc:8d:a0:
         34:c2:33:b2:e1:96:cc:9d:c9:29:90:b7:7f:7e:90:62:b2:73:
         37:11:6c:e4:15:b5:54:56:91:37:a4:3d:7c:d6:d7:27:84:3d:
         9b:85:87:23:b1:ea:a1:46:42:54:2c:96:fb:9a:3a:b3:72:c0:
         23:3d:09:14:5a:02:8f:11:6e:91:c1:e7:9a:da:ff:f5:12:5b:
         41:b7:51:76
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFbmRSxqNiX8vljZMsOqxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTZjNjNiNDk0YjBkMDhhNTVhYWExODA1ZjYyMGRiOGRhZDI1NTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneQ/Jr9jYsmYsyM9Ulq592w2xS+P
xYPHagnqkkXN0XCVMO4chxzcLt3Z4uDObk0cou3F1nmKh/OoOR8EOMSNF68Uz9IR
XvymX/Wh898ZTZsTGtnQExOCz7lo8SQkTBfKOhfbQV14LId+X1fMJL9JlKky5syd
YCmqdxQB+TSCiJrR30aWUwXfqZY3WTyaEEgH6xTc7rM9W8bSMgRmIMdFv9KydY4f
I00e7XKyWuSkOxP0RmofoHb5uq2zVlYZQ6fzPR594yJi3jUkjrIx42NWcnqy8Oc1
7vZD83AXzMmzy/+ePjCIiPX2liuoKynx/JO4LApIK08+3URAfrim7xFHOwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOlsY7SUsNCKVaqhgF9iDbja0lV/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzM0MmYz
OS1jZGIwLTRkNTAtOWM3Mi0zYTM4NjIxMThhMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMzQyZjM5
LWNkYjAtNGQ1MC05YzcyLTNhMzg2MjExOGEwZi8xLzZXeGp0SlN3MElwVnFxR0FY
MklOdU5yU1ZYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW+O4MA0EAgACMAcDBQMqEmyAMA0GCSqGSIb3
DQEBCwUAA4IBAQAdgAf03fEDqu4jeqPJtJBHMYK/LPvAAdW9HQ8RUSZbaMtzJ1UT
p8wFNS1t6C+EszYj5u5JYzBYHcvMPJFmg0p4aXLb9rN3GqZi7cNJMTuYALiDk3XI
0a1yCCrBfpkTgZjnw/1fDc0QISDInSVwk7zyUUhQuwTnF2wPve0UmU3IKStBQDoA
1d6QvNqbw4r850SePU5C+m+3JoTmWbPF/lQQ7SwshYO8l+IkLoWCQpPFJAS8jaA0
wjOy4ZbMnckpkLd/fpBisnM3EWzkFbVUVpE3pD181tcnhD2bhYcjseqhRkJULJb7
mjqzcsAjPQkUWgKPEW6Rweea2v/1EltBt1F2
-----END CERTIFICATE-----
Generated at Tue Apr 23 19:06:55 2024 by rpki-client on console-fra.rpki-client.org