Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.cer (raw, json)
Hash identifier:          7t+1WgpohzwC7H2+IkW/uBfP119RHTo12e5b2GsWA6A=
Subject key identifier:   F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B87DCDEE25EC0BB324398736E128B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:30:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 6858
                          AS: 24739
                          AS: 31191
                          AS: 35000
                          AS: 43267
                          AS: 49165
                          IP: 37.46.52.0 -- 37.46.63.255
                          IP: 37.143.16.0/20
                          IP: 46.228.0.0/20
                          IP: 46.252.240.0/20
                          IP: 62.181.33.0/24
                          IP: 62.181.40.0/22
                          IP: 62.181.45.0/24
                          IP: 62.181.52.0/24
                          IP: 77.232.50.0 -- 77.232.63.255
                          IP: 78.111.80.0/22
                          IP: 78.111.92.0/22
                          IP: 78.140.192.0 -- 78.140.239.255
                          IP: 78.140.248.0/22
                          IP: 79.99.104.0/21
                          IP: 81.23.96.0/19
                          IP: 81.24.112.0/20
                          IP: 82.112.184.0/21
                          IP: 84.47.137.0/24
                          IP: 84.47.188.0/24
                          IP: 84.242.4.0/24
                          IP: 85.235.192.0/19
                          IP: 87.249.32.0/24
                          IP: 87.249.34.0/23
                          IP: 87.249.39.0 -- 87.249.40.255
                          IP: 87.249.42.0/24
                          IP: 87.249.45.0 -- 87.249.48.255
                          IP: 87.249.51.0 -- 87.249.52.255
                          IP: 89.104.96.0/24
                          IP: 89.104.98.0/23
                          IP: 89.104.103.0 -- 89.104.106.255
                          IP: 89.104.108.0/23
                          IP: 89.104.120.0/24
                          IP: 89.104.124.0/24
                          IP: 89.223.5.0/24
                          IP: 89.223.8.0/24
                          IP: 89.223.10.0/24
                          IP: 91.196.72.0/22
                          IP: 92.255.2.0/24
                          IP: 92.255.5.0/24
                          IP: 92.255.7.0 -- 92.255.8.255
                          IP: 92.255.10.0/24
                          IP: 92.255.12.0/24
                          IP: 92.255.14.0/24
                          IP: 92.255.17.0/24
                          IP: 92.255.24.0/24
                          IP: 92.255.26.0 -- 92.255.28.255
                          IP: 92.255.31.0/24
                          IP: 93.174.240.0/21
                          IP: 94.140.192.0/19
                          IP: 176.32.176.0/20
                          IP: 178.238.16.0/20
                          IP: 185.7.144.0/22
                          IP: 185.58.248.0/22
                          IP: 185.124.188.0/22
                          IP: 185.247.80.0/22
                          IP: 188.227.0.0/19
                          IP: 188.227.36.0 -- 188.227.55.255
                          IP: 188.227.60.0 -- 188.227.83.255
                          IP: 188.227.88.0 -- 188.227.105.255
                          IP: 188.227.108.0 -- 188.227.127.255
                          IP: 195.182.128.0/19
                          IP: 212.59.112.0/22
                          IP: 212.59.127.0/24
                          IP: 212.116.96.0/19
                          IP: 213.135.68.0/24
                          IP: 213.135.75.0 -- 213.135.76.255
                          IP: 213.135.78.0/24
                          IP: 213.135.93.0/24
                          IP: 213.208.185.0/24
                          IP: 217.197.224.0/20
                          IP: 2a00:1020::/32
                          IP: 2a01:a280::/30
                          IP: 2a06:aa80:: -- 2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:7d:cd:ee:25:ec:0b:b3:24:39:87:36:e1:28:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:30:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:68:bf:77:73:f6:db:54:2a:38:cb:d1:f3:
                    ed:12:99:fb:72:13:53:41:e8:0c:28:29:7e:3f:d0:
                    8b:61:7c:b5:d5:d2:ed:43:01:ba:5a:5e:3c:0d:6a:
                    57:50:fc:75:53:9d:1d:10:c4:d5:51:44:53:39:e8:
                    83:d7:5b:e6:79:00:57:55:74:b8:16:bd:28:49:60:
                    5e:a1:47:37:a7:08:22:d2:fb:d1:e1:c4:ba:0d:de:
                    41:23:0d:ff:fc:db:ed:21:d5:72:71:c6:9d:a0:fa:
                    db:4c:eb:a6:65:c9:a5:13:8b:de:f4:d5:fc:90:1c:
                    67:96:62:0a:d0:68:88:71:a8:8f:48:c7:bc:5c:ab:
                    5c:e6:96:e8:17:ef:d3:67:58:59:33:ed:9f:72:72:
                    a6:46:e6:d0:05:67:b3:c1:f6:e2:64:f7:a5:47:0e:
                    73:12:12:7f:95:54:f6:c3:0f:40:71:2d:44:2e:71:
                    f6:83:78:98:f1:ff:da:34:9f:38:ad:69:b6:40:2a:
                    e8:5c:8f:89:96:af:4a:99:8e:fc:3b:fa:56:d1:93:
                    22:d4:7f:b1:a1:aa:a4:8b:92:b9:20:80:12:dd:b7:
                    b9:4a:c5:2b:c3:10:8b:79:2d:52:74:97:c9:a5:fa:
                    55:81:19:50:86:99:63:92:b2:55:4d:8c:c6:6b:d7:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.52.0-37.46.63.255
                  37.143.16.0/20
                  46.228.0.0/20
                  46.252.240.0/20
                  62.181.33.0/24
                  62.181.40.0/22
                  62.181.45.0/24
                  62.181.52.0/24
                  77.232.50.0-77.232.63.255
                  78.111.80.0/22
                  78.111.92.0/22
                  78.140.192.0-78.140.239.255
                  78.140.248.0/22
                  79.99.104.0/21
                  81.23.96.0/19
                  81.24.112.0/20
                  82.112.184.0/21
                  84.47.137.0/24
                  84.47.188.0/24
                  84.242.4.0/24
                  85.235.192.0/19
                  87.249.32.0/24
                  87.249.34.0/23
                  87.249.39.0-87.249.40.255
                  87.249.42.0/24
                  87.249.45.0-87.249.48.255
                  87.249.51.0-87.249.52.255
                  89.104.96.0/24
                  89.104.98.0/23
                  89.104.103.0-89.104.106.255
                  89.104.108.0/23
                  89.104.120.0/24
                  89.104.124.0/24
                  89.223.5.0/24
                  89.223.8.0/24
                  89.223.10.0/24
                  91.196.72.0/22
                  92.255.2.0/24
                  92.255.5.0/24
                  92.255.7.0-92.255.8.255
                  92.255.10.0/24
                  92.255.12.0/24
                  92.255.14.0/24
                  92.255.17.0/24
                  92.255.24.0/24
                  92.255.26.0-92.255.28.255
                  92.255.31.0/24
                  93.174.240.0/21
                  94.140.192.0/19
                  176.32.176.0/20
                  178.238.16.0/20
                  185.7.144.0/22
                  185.58.248.0/22
                  185.124.188.0/22
                  185.247.80.0/22
                  188.227.0.0/19
                  188.227.36.0-188.227.55.255
                  188.227.60.0-188.227.83.255
                  188.227.88.0-188.227.105.255
                  188.227.108.0-188.227.127.255
                  195.182.128.0/19
                  212.59.112.0/22
                  212.59.127.0/24
                  212.116.96.0/19
                  213.135.68.0/24
                  213.135.75.0-213.135.76.255
                  213.135.78.0/24
                  213.135.93.0/24
                  213.208.185.0/24
                  217.197.224.0/20
                IPv6:
                  2a00:1020::/32
                  2a01:a280::/30
                  2a06:aa80::-2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6858
                  24739
                  31191
                  35000
                  43267
                  49165

    Signature Algorithm: sha256WithRSAEncryption
         56:60:1f:a7:16:42:5e:72:f5:a0:3a:bc:0b:13:81:17:1b:1c:
         9e:76:62:0b:09:c9:36:98:7b:9a:ce:08:1e:09:39:a1:9b:ed:
         25:3a:6e:fb:65:73:43:9a:3b:0e:15:f2:17:a1:c1:4b:3d:61:
         ea:d2:86:b0:54:a4:bc:d5:4a:1f:7f:06:25:b7:42:bd:44:5b:
         6d:73:9c:9a:e8:9e:f9:94:e0:f3:4a:d2:88:99:f8:29:07:bc:
         e9:75:8b:82:f6:37:19:10:f3:bf:ed:20:e6:4a:1f:81:bd:52:
         cb:53:af:13:31:66:d4:38:11:9c:eb:fa:ff:d2:5f:49:11:3c:
         cb:51:9c:9d:d7:4a:0b:56:ce:fa:34:ba:b8:0a:db:6b:e9:2c:
         95:b5:d6:15:9a:2e:48:c1:ab:1e:f4:68:00:cf:9c:6f:94:e0:
         80:ff:7a:ba:11:86:a5:a6:f6:b3:a9:67:f9:42:0b:41:13:6e:
         74:64:9f:88:2c:33:fe:f4:71:9e:37:a2:11:00:42:fc:4b:2b:
         7a:ba:1f:34:6e:9f:a7:7b:74:a2:fe:fa:4b:cc:17:9e:5c:76:
         38:0b:3a:74:1b:78:36:81:6c:a5:68:12:8c:97:43:ff:3f:7d:
         e6:94:1f:b4:c0:b4:cd:e1:45:b7:0d:44:a7:5e:7d:a9:2e:81:
         95:66:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:30:32 2024 by rpki-client on console-ams.rpki-client.org