Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer (raw, json)
Hash identifier:          F3KzMxlWAEhD3o0JM3FbHX7ABuOP016zpVn3a1WAv3k=
Subject key identifier:   F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D5EA79006C5AA9E891F76D900AB17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.235.104.0/22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:5e:a7:90:06:c5:aa:9e:89:1f:76:d9:00:ab:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:20:f7:0d:48:02:53:82:be:32:b9:e7:3d:
                    a3:69:25:c9:76:5c:d5:4b:81:d7:e5:47:17:fe:96:
                    74:fb:b6:70:a5:7f:4e:10:38:40:af:e3:3e:94:07:
                    95:64:02:e3:f8:38:d2:c5:1f:65:94:f3:7d:ec:3e:
                    bf:a9:ca:20:42:a2:0e:ce:5e:05:08:cf:48:e0:04:
                    f8:e3:9c:28:40:49:36:b2:c0:ab:1f:5d:2a:6a:1c:
                    cd:fb:d0:b0:f2:01:f4:ab:30:fe:04:ed:a2:79:bf:
                    2f:85:da:e4:a1:2d:bb:8c:f6:3d:45:51:18:ba:16:
                    15:c1:de:35:13:3e:9f:e1:9b:64:0d:16:8f:3e:5d:
                    30:1e:84:b4:f5:c7:f8:2a:91:26:f4:11:3f:e3:f2:
                    26:ae:b5:4d:0f:24:b2:97:ab:06:ec:35:2c:9f:e4:
                    4d:6b:e0:36:27:c1:44:6c:32:39:04:ea:86:aa:ee:
                    77:db:98:49:04:46:75:1f:ef:ec:f2:39:ed:3f:70:
                    d7:56:07:d1:bd:ee:ea:94:0c:6e:26:d9:23:8c:2e:
                    20:83:10:91:79:cb:92:8f:67:0e:44:50:6a:67:9b:
                    7c:31:de:d8:63:2c:c1:d2:84:05:93:7e:d3:ee:6a:
                    f4:07:9f:97:73:fa:d3:ef:49:3a:3c:ad:32:d2:1f:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:17:dc:1d:b9:4e:95:71:22:7c:15:d7:c4:60:8b:2d:38:cd:
         e2:33:ff:66:12:77:d1:b5:42:3d:a6:f3:12:fb:0d:f7:84:b2:
         22:04:61:26:2c:f4:ec:71:c8:fc:e6:36:4e:a0:21:2f:c4:cb:
         c9:c9:6e:01:78:4c:32:ea:ef:98:99:b7:86:8f:60:30:b3:3f:
         17:5e:75:10:6a:d8:1c:86:3e:f9:ab:c9:e8:2c:47:67:6d:f1:
         a6:d5:e1:13:17:1a:09:bc:ed:e5:2e:73:20:2e:e4:c5:2b:e2:
         36:c7:19:3b:1f:dd:2f:21:53:e2:b1:08:22:9f:7f:4a:06:85:
         9c:b4:d7:69:19:fc:3d:d0:c0:69:fe:de:b1:e1:54:31:3e:94:
         76:9f:64:b4:47:54:32:d6:a2:f3:fa:a1:8a:1b:e1:9c:c2:c5:
         67:83:35:0d:06:b8:07:28:fb:37:1a:46:6f:18:25:f1:7e:5d:
         09:76:b4:df:bf:f9:f8:07:23:48:02:14:4f:11:c3:00:a9:48:
         62:b3:fa:50:a4:11:4f:e5:a6:bf:70:16:b4:91:e5:e3:5f:73:
         7f:0c:b3:77:02:c2:05:c5:82:3e:65:28:bc:6d:76:58:ad:dd:
         16:ea:06:91:41:4e:56:5e:04:53:09:67:70:5f:23:21:ab:d6:
         b8:e3:7e:91
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzCbV6nkAbFqp6JH3bZAKsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk1MjdhMDZhMDM1Y2JjYWVjZjAwZGFjYTJmZDg4Mzk5Y2Y5ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSgg9w1IAlOCvjK55z2jaSXJdlzV
S4HX5UcX/pZ0+7ZwpX9OEDhAr+M+lAeVZALj+DjSxR9llPN97D6/qcogQqIOzl4F
CM9I4AT445woQEk2ssCrH10qahzN+9Cw8gH0qzD+BO2ieb8vhdrkoS27jPY9RVEY
uhYVwd41Ez6f4ZtkDRaPPl0wHoS09cf4KpEm9BE/4/ImrrVNDySyl6sG7DUsn+RN
a+A2J8FEbDI5BOqGqu5325hJBEZ1H+/s8jntP3DXVgfRve7qlAxuJtkjjC4ggxCR
ecuSj2cORFBqZ5t8Md7YYyzB0oQFk37T7mr0B5+Xc/rT70k6PK0y0h9GcQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPaVJ6BqA1y8rs8A2sov2IOZz50SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2Q0NTUz
MS1kNmM4LTRkY2UtYjYwNi04NWM4NTUyMjdiMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZDQ1NTMx
LWQ2YzgtNGRjZS1iNjA2LTg1Yzg1NTIyN2IyMy8xLzlwVW5vR29EWEx5dXp3RGF5
aV9ZZzVuUG5SSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuetoMA0GCSqGSIb3DQEBCwUAA4IBAQAxF9wd
uU6VcSJ8FdfEYIstOM3iM/9mEnfRtUI9pvMS+w33hLIiBGEmLPTsccj85jZOoCEv
xMvJyW4BeEwy6u+YmbeGj2Awsz8XXnUQatgchj75q8noLEdnbfGm1eETFxoJvO3l
LnMgLuTFK+I2xxk7H90vIVPisQgin39KBoWctNdpGfw90MBp/t6x4VQxPpR2n2S0
R1Qy1qLz+qGKG+GcwsVngzUNBrgHKPs3GkZvGCXxfl0JdrTfv/n4ByNIAhRPEcMA
qUhis/pQpBFP5aa/cBa0keXjX3N/DLN3AsIFxYI+ZSi8bXZYrd0W6gaRQU5WXgRT
CWdwXyMhq9a4436R
-----END CERTIFICATE-----
Generated at Thu Mar 28 17:52:35 2024 by rpki-client on console-fra.rpki-client.org