Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
File:                     ABOK9m601Vf6Szk5xsvZYakSNWA.cer (download)
Hash identifier:          /Z136KTCmEEdbz2dOsmoaE8VbsIjruCr0gCSweT218A=
Subject key identifier:   00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E653A14BDD44C2A9504F579AD0C32C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Jul 01 00:00:00 2024 GMT
Subordinate resources:
    1: IP: 45.155.156.0/22
    2: IP: 194.50.223.0 -- 194.50.224.255
    3: IP: 194.50.233.0/24
    4: IP: 194.50.243.0/24
    5: IP: 2a0f:c80::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:3a:14:bd:d4:4c:2a:95:04:f5:79:ad:0c:32:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:36:f8:49:1f:2b:ed:55:75:b1:84:34:ad:
                    80:13:3d:8c:c1:98:aa:f5:e4:f4:12:89:fe:bc:e5:
                    d8:94:5f:30:87:12:e0:f9:27:19:6d:58:0a:0d:0f:
                    75:59:f7:3e:80:5f:54:23:f2:6e:57:bb:64:38:de:
                    34:07:44:c3:5f:42:7b:e4:25:4f:4c:37:c6:9e:7d:
                    65:42:cf:90:e8:23:19:52:7d:75:3e:aa:6f:19:73:
                    30:fb:70:cc:9c:52:82:a5:62:7a:78:2a:53:58:02:
                    ea:74:ff:be:40:9f:52:a0:36:06:53:80:d0:80:78:
                    38:0e:bd:31:c6:f2:c6:86:9b:65:2e:c8:82:1f:9b:
                    ed:5f:0b:13:f0:15:18:07:79:3b:eb:76:68:3d:8d:
                    71:50:8f:f8:a0:10:fd:6e:b5:1e:e7:7f:05:6a:80:
                    36:9a:c1:9f:8a:0d:25:36:e2:ae:6c:69:a7:14:7c:
                    a6:02:c7:c5:3f:96:6f:f1:24:78:6c:d7:3e:4c:51:
                    28:ec:e4:b8:f4:7d:e0:d3:ce:85:8e:80:13:09:10:
                    eb:ed:a4:1e:f3:e6:8e:10:c5:72:c6:f8:50:d1:5f:
                    37:8c:af:e7:be:6a:26:c6:90:92:59:6b:1e:fe:3d:
                    7b:b8:34:02:49:54:ad:ba:4c:19:14:81:45:85:74:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.156.0/22
                  194.50.223.0-194.50.224.255
                  194.50.233.0/24
                  194.50.243.0/24
                IPv6:
                  2a0f:c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:9d:4b:1f:28:c2:f5:10:b2:f6:07:b7:cd:9e:8c:0e:0e:
         3d:fa:57:b0:55:55:a0:cc:11:b0:b4:87:71:cc:c8:90:8c:b5:
         44:b4:50:cb:38:76:1a:ed:86:6e:5a:e0:ab:72:9a:51:0a:72:
         38:40:e9:1a:f1:40:ab:7a:4a:40:a3:7a:7e:ef:0d:6c:11:20:
         48:82:7f:4d:ca:26:36:14:08:3f:bb:c7:eb:d7:9d:23:c8:c1:
         bc:a5:af:58:11:de:cf:86:66:8f:74:67:b5:b8:82:d2:31:42:
         96:66:96:67:37:8d:c5:5d:58:11:58:b8:24:0f:fc:43:6a:a0:
         a0:f5:90:7a:3a:cf:ee:1f:d0:a8:40:3a:7c:c9:61:23:f2:b3:
         60:7b:42:e7:ea:08:37:f6:ee:7a:bd:12:25:f5:cf:a4:16:95:
         67:05:34:00:59:3f:f1:85:c3:58:1d:ee:2b:e7:8d:2f:59:30:
         f3:db:c5:e7:6d:46:28:61:76:48:cd:ff:c5:b5:d9:e6:ff:8c:
         ec:87:21:77:35:3b:de:f8:37:90:92:39:0c:61:07:d6:51:f0:
         6e:0b:8b:86:9a:e3:d3:b6:46:72:33:5d:2e:cc:b9:a4:87:80:
         fa:3f:67:0d:c4:b3:fc:be:06:98:db:af:14:34:a2:59:dd:df:
         12:ab:f9:0c
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAYVuZToUvdRMKpUE9XmtDDLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDEzOGFmNjZlYjRkNTU3ZmE0YjM5MzljNmNiZDk2MWE5MTIzNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZE2+EkfK+1VdbGENK2AEz2MwZiq
9eT0Eon+vOXYlF8whxLg+ScZbVgKDQ91Wfc+gF9UI/JuV7tkON40B0TDX0J75CVP
TDfGnn1lQs+Q6CMZUn11PqpvGXMw+3DMnFKCpWJ6eCpTWALqdP++QJ9SoDYGU4DQ
gHg4Dr0xxvLGhptlLsiCH5vtXwsT8BUYB3k763ZoPY1xUI/4oBD9brUe538FaoA2
msGfig0lNuKubGmnFHymAsfFP5Zv8SR4bNc+TFEo7OS49H3g086FjoATCRDr7aQe
8+aOEMVyxvhQ0V83jK/nvmomxpCSWWse/j17uDQCSVStukwZFIFFhXTPNwIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFAATivZutNVX+ks5OcbL2WGpEjVgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzgzMjMz
Yy04OThlLTQ5MWQtOTU4Yy00ZmVhNjI0NDEzZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvODMyMzNj
LTg5OGUtNDkxZC05NThjLTRmZWE2MjQ0MTNlNC8xL0FCT0s5bTYwMVZmNlN6azV4
c3ZaWWFrU05XQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAmBAIAATAgAwQCLZucMAwDBADCMt8DBADCMuADBADCMukDBADC
MvMwDQQCAAIwBwMFAyoPDIAwDQYJKoZIhvcNAQELBQADggEBACG9nUsfKML1ELL2
B7fNnowODj36V7BVVaDMEbC0h3HMyJCMtUS0UMs4dhrthm5a4KtymlEKcjhA6Rrx
QKt6SkCjen7vDWwRIEiCf03KJjYUCD+7x+vXnSPIwbylr1gR3s+GZo90Z7W4gtIx
QpZmlmc3jcVdWBFYuCQP/ENqoKD1kHo6z+4f0KhAOnzJYSPys2B7QufqCDf27nq9
EiX1z6QWlWcFNABZP/GFw1gd7ivnjS9ZMPPbxedtRihhdkjN/8W12eb/jOyHIXc1
O974N5CSOQxhB9ZR8G4Li4aa49O2RnIzXS7MuaSHgPo/Zw3Es/y+BpjbrxQ0olnd
3xKr+Qw=
-----END CERTIFICATE-----
Generated at Wed Jan 4 10:15:26 2023 by rpki-client.