Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
File:                     B6alie6EioBSI4GRuYA153USJyU.cer (raw, json)
Hash identifier:          ZTcyWz4GZdrH3I54DP1+k0DK+vwcVCq6GRJrAVfRAKQ=
Subject key identifier:   07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC49367B190D6A40975937E8BF84E8ED3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:43 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210218
                          IP: 2.58.93.0 -- 2.58.94.255
                          IP: 2.58.136.0/22
                          IP: 2.59.248.0/22
                          IP: 31.13.194.0/24
                          IP: 31.13.249.0 -- 31.13.255.255
                          IP: 45.8.74.0/23
                          IP: 45.12.248.0/22
                          IP: 45.139.100.0/22
                          IP: 45.143.100.0/22
                          IP: 45.149.232.0/24
                          IP: 77.75.56.0/22
                          IP: 78.40.160.0/21
                          IP: 80.249.124.0/22
                          IP: 87.120.46.0/23
                          IP: 87.120.63.0/24
                          IP: 87.120.85.0 -- 87.120.86.255
                          IP: 87.120.96.0/23
                          IP: 87.120.111.0/24
                          IP: 87.120.177.0/24
                          IP: 87.120.218.0/24
                          IP: 87.120.224.0/24
                          IP: 87.120.226.0/24
                          IP: 87.120.232.0/22
                          IP: 87.121.19.0/24
                          IP: 87.121.36.0/23
                          IP: 87.121.59.0/24
                          IP: 87.121.66.0 -- 87.121.68.255
                          IP: 87.121.116.0/24
                          IP: 87.121.148.0/23
                          IP: 91.92.3.0/24
                          IP: 91.92.24.0/23
                          IP: 91.197.196.0/22
                          IP: 91.243.184.0/22
                          IP: 92.249.51.0/24
                          IP: 93.123.68.0/22
                          IP: 93.123.86.0/23
                          IP: 93.123.108.0/24
                          IP: 94.154.174.0/23
                          IP: 94.156.16.0/22
                          IP: 94.156.32.0/24
                          IP: 94.156.48.0/21
                          IP: 94.156.95.0/24
                          IP: 94.156.108.0/22
                          IP: 94.156.168.0/23
                          IP: 94.156.182.0 -- 94.156.184.255
                          IP: 94.156.187.0/24
                          IP: 94.156.192.0/23
                          IP: 94.156.234.0/23
                          IP: 94.156.240.0/22
                          IP: 94.156.246.0/23
                          IP: 94.240.56.0/22
                          IP: 95.214.124.0/22
                          IP: 109.206.238.0/24
                          IP: 141.98.0.0/24
                          IP: 164.40.184.0/24
                          IP: 164.40.186.0/23
                          IP: 171.22.29.0/24
                          IP: 176.125.253.0/24
                          IP: 178.175.184.0/21
                          IP: 185.171.148.0/22
                          IP: 185.219.125.0 -- 185.219.126.255
                          IP: 185.221.66.0/24
                          IP: 185.225.72.0/24
                          IP: 185.252.178.0/24
                          IP: 193.19.200.0/22
                          IP: 193.36.232.0/22
                          IP: 193.37.43.0/24
                          IP: 193.37.46.0/24
                          IP: 193.43.3.0 -- 193.43.3.179
                          IP: 193.46.172.0/22
                          IP: 193.56.16.0/22
                          IP: 193.56.248.0/22
                          IP: 193.58.184.0/22
                          IP: 193.207.0.0 -- 193.207.23.255
                          IP: 194.48.249.0/24
                          IP: 194.76.204.0/22
                          IP: 194.147.8.0/22
                          IP: 194.180.50.0/24
                          IP: 195.178.120.0/24
                          IP: 195.225.120.0/22
                          IP: 212.22.128.0/19
                          IP: 212.24.0.0/19
                          IP: 212.73.135.0/24
                          IP: 2a09:e6c0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:67:b1:90:d6:a4:09:75:93:7e:8b:f8:4e:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=07a6a589ee848a8052238191b98035e775122725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:82:a8:d2:1d:2e:a3:b1:a3:4f:aa:5d:2a:
                    e7:08:9b:2b:eb:9d:03:37:0f:ec:72:20:73:25:98:
                    1c:2b:79:8b:6f:f5:cb:ab:2e:0e:ae:0c:24:29:d6:
                    26:fa:23:23:89:7c:fb:5c:9b:ea:ec:a3:1a:d4:6f:
                    74:0b:cf:d2:0f:52:30:d8:e5:9e:79:c3:c4:47:85:
                    04:e5:f0:25:dc:55:29:a0:1b:b2:df:d3:d6:e7:89:
                    be:65:4a:48:5c:15:72:4a:95:f1:6c:6d:67:4c:cc:
                    ec:e3:f3:07:16:c1:25:f0:0b:3d:a1:1b:c6:b1:fa:
                    ca:73:83:a0:de:f5:de:8d:ab:1a:9c:30:c7:7d:af:
                    86:0a:0e:d8:23:fd:15:71:8d:a8:a4:1c:4d:01:94:
                    16:f1:65:36:9b:10:a5:23:a7:e5:eb:da:0a:cd:a1:
                    22:58:7a:9b:14:3e:8f:8c:35:35:f3:75:59:3f:2e:
                    b2:4a:0f:ac:43:2d:da:42:61:e6:7a:fc:e1:bb:18:
                    52:29:09:85:36:40:6f:53:cb:e9:bf:68:8b:75:f3:
                    d5:94:93:80:e1:81:4c:c7:fe:ff:a7:c3:73:cc:c8:
                    23:05:b4:f0:c9:db:ca:ef:7b:07:3b:42:aa:ec:22:
                    c3:9e:ce:b5:b2:52:42:64:a7:dd:ff:ee:d2:bb:ba:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.93.0-2.58.94.255
                  2.58.136.0/22
                  2.59.248.0/22
                  31.13.194.0/24
                  31.13.249.0-31.13.255.255
                  45.8.74.0/23
                  45.12.248.0/22
                  45.139.100.0/22
                  45.143.100.0/22
                  45.149.232.0/24
                  77.75.56.0/22
                  78.40.160.0/21
                  80.249.124.0/22
                  87.120.46.0/23
                  87.120.63.0/24
                  87.120.85.0-87.120.86.255
                  87.120.96.0/23
                  87.120.111.0/24
                  87.120.177.0/24
                  87.120.218.0/24
                  87.120.224.0/24
                  87.120.226.0/24
                  87.120.232.0/22
                  87.121.19.0/24
                  87.121.36.0/23
                  87.121.59.0/24
                  87.121.66.0-87.121.68.255
                  87.121.116.0/24
                  87.121.148.0/23
                  91.92.3.0/24
                  91.92.24.0/23
                  91.197.196.0/22
                  91.243.184.0/22
                  92.249.51.0/24
                  93.123.68.0/22
                  93.123.86.0/23
                  93.123.108.0/24
                  94.154.174.0/23
                  94.156.16.0/22
                  94.156.32.0/24
                  94.156.48.0/21
                  94.156.95.0/24
                  94.156.108.0/22
                  94.156.168.0/23
                  94.156.182.0-94.156.184.255
                  94.156.187.0/24
                  94.156.192.0/23
                  94.156.234.0/23
                  94.156.240.0/22
                  94.156.246.0/23
                  94.240.56.0/22
                  95.214.124.0/22
                  109.206.238.0/24
                  141.98.0.0/24
                  164.40.184.0/24
                  164.40.186.0/23
                  171.22.29.0/24
                  176.125.253.0/24
                  178.175.184.0/21
                  185.171.148.0/22
                  185.219.125.0-185.219.126.255
                  185.221.66.0/24
                  185.225.72.0/24
                  185.252.178.0/24
                  193.19.200.0/22
                  193.36.232.0/22
                  193.37.43.0/24
                  193.37.46.0/24
                  193.43.3.0-193.43.3.179
                  193.46.172.0/22
                  193.56.16.0/22
                  193.56.248.0/22
                  193.58.184.0/22
                  193.207.0.0-193.207.23.255
                  194.48.249.0/24
                  194.76.204.0/22
                  194.147.8.0/22
                  194.180.50.0/24
                  195.178.120.0/24
                  195.225.120.0/22
                  212.22.128.0/19
                  212.24.0.0/19
                  212.73.135.0/24
                IPv6:
                  2a09:e6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210218

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:ae:6c:b4:d7:2b:fe:7b:35:ee:0d:c8:54:d1:ec:66:e7:
         55:42:64:11:5e:9b:6e:77:31:56:b6:f2:9a:3c:03:38:8f:1a:
         e4:72:2f:46:c2:a6:51:4f:dc:e4:a7:c6:2f:f2:57:a1:a3:7c:
         4e:8b:27:82:73:93:dd:49:b7:bc:46:ed:e1:47:b0:bd:7b:9a:
         c9:c2:2f:16:d0:e4:2d:77:09:82:38:ed:d3:1c:f7:a7:19:2c:
         9c:cf:90:15:a2:14:bf:5f:ec:a6:c2:59:58:ae:cf:cc:79:4a:
         f9:a6:57:38:52:bd:2f:0d:e2:ad:90:fa:76:35:0e:d4:06:55:
         1b:b9:17:73:a7:54:93:f7:c9:36:74:f2:a3:cb:9c:a7:b7:04:
         e2:3d:c8:e1:2e:85:1c:eb:a0:96:da:2e:ed:dc:a9:76:7e:d0:
         41:4a:a1:c0:66:9f:c9:e2:96:ef:c0:a8:f9:59:89:e9:ec:8a:
         2e:fb:4b:1f:a1:da:bb:ff:5f:27:72:30:be:48:a8:bd:95:30:
         3f:04:93:8b:87:7e:64:ff:47:66:9a:94:2e:f4:3d:8e:38:57:
         8b:ca:d4:73:34:dd:be:c2:07:20:e3:3b:70:01:1d:3f:4d:f2:
         c7:29:34:ac:ce:32:63:03:10:ab:f0:e8:b5:7b:eb:87:83:8d:
         d6:76:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 20:35:52 2024 by rpki-client on console-fra.rpki-client.org