Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
File:                     BeuMu6ryWnG_L8q24RBX6_kfAeM.cer (raw, json)
Hash identifier:          J+v9JmPXZ8DNltSuk1ppNPcjcf9Rcw5aYzp9cJ2TMo8=
Subject key identifier:   05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64AFFB3DF3FC9178260E1C776993B15
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:30:53 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 9201
                          IP: 193.241.0.0/16
                          IP: 2001:67c:2c70::/48
                          IP: 2001:67c:2c74::/48
                          IP: 2001:67c:2c78::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:ff:b3:df:3f:c9:17:82:60:e1:c7:76:99:3b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:30:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:3a:bd:eb:bf:a9:6b:a9:21:82:5b:96:26:
                    25:06:f2:b0:40:ee:87:82:ce:97:fd:1b:81:7e:bb:
                    7e:3b:4f:46:d7:74:09:52:38:0f:e0:b6:17:65:26:
                    4c:d4:2e:0d:10:ad:76:0f:e3:95:96:c0:b9:95:2c:
                    e6:df:8e:62:1c:7b:ae:be:73:f5:3e:a6:4b:81:bc:
                    bc:96:a6:d5:d6:63:e0:76:4b:a3:50:37:db:f4:0a:
                    ff:45:58:cb:2f:3b:7f:00:4f:fa:3b:18:32:43:c8:
                    bf:c6:ec:80:42:f3:a2:e1:34:98:7c:7b:ca:11:81:
                    55:b7:7f:b1:e4:d3:a6:1a:d5:fc:39:5d:b6:f4:98:
                    56:29:32:c9:2d:62:32:88:56:56:91:47:2a:4a:9f:
                    b4:27:c1:42:fc:02:b8:34:4c:76:17:dd:7f:0d:fe:
                    aa:be:59:60:fd:0a:57:f2:b5:00:1c:ad:72:a6:1f:
                    97:2a:d9:01:fd:1f:ba:54:e8:e0:d7:9e:9b:67:ed:
                    18:5e:74:0a:0a:43:42:31:35:c1:69:ce:68:b1:5e:
                    36:7a:eb:bc:51:54:3d:3a:74:1d:a5:01:50:44:0a:
                    c1:88:42:f2:ed:34:cb:6e:6a:5d:e7:57:a9:8f:c7:
                    22:ad:64:a5:3d:9e:60:6c:c1:63:9c:07:80:20:89:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.241.0.0/16
                IPv6:
                  2001:67c:2c70::/48
                  2001:67c:2c74::/48
                  2001:67c:2c78::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9201

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:ed:75:9d:a2:33:4a:25:a2:48:31:6d:8e:cd:d1:01:92:
         42:4e:96:05:35:2a:20:03:bb:ce:68:12:da:a9:89:23:c8:0a:
         74:db:70:b9:f4:c9:fc:b2:12:a5:32:72:09:7f:67:75:8b:bd:
         0f:41:ab:f7:8b:86:22:f1:71:1a:bf:9d:e5:c1:6f:0d:24:a0:
         52:12:af:de:c9:53:48:ef:52:7b:7e:c8:54:ca:a3:62:b0:07:
         b6:be:2a:85:a4:09:b1:72:e9:2f:bf:1a:e6:06:86:7b:10:e4:
         31:3b:c3:51:03:52:30:19:02:2b:ab:90:8e:b4:9a:fa:71:a7:
         1b:98:a9:6c:e4:f0:f8:e3:8d:29:ee:67:6f:d6:11:b6:3e:71:
         73:00:7f:60:6b:1f:23:3a:98:df:b7:73:4b:e7:cb:6a:00:8f:
         4a:f9:a2:0f:6d:e6:3f:98:d9:d2:cc:b1:50:ca:60:31:ac:28:
         b7:09:cb:6a:7e:6a:73:26:00:57:73:82:aa:cc:dd:86:35:1c:
         0e:bc:1d:be:f5:08:8e:67:92:48:17:53:00:2d:e7:dc:d6:b7:
         cd:04:29:87:96:28:00:25:dc:86:8d:5f:5b:19:47:54:44:fd:
         9e:47:00:99:19:91:8b:97:ab:1e:5b:c2:08:26:7c:bf:e2:7e:
         40:e8:4d:45
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAYzGSv+z3z/JF4Jg4cd2mTsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWViOGNiYmFhZjI1YTcxYmYyZmNhYjZlMTEwNTdlYmY5MWYwMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Y6veu/qWupIYJbliYlBvKwQO6H
gs6X/RuBfrt+O09G13QJUjgP4LYXZSZM1C4NEK12D+OVlsC5lSzm345iHHuuvnP1
PqZLgby8lqbV1mPgdkujUDfb9Ar/RVjLLzt/AE/6OxgyQ8i/xuyAQvOi4TSYfHvK
EYFVt3+x5NOmGtX8OV229JhWKTLJLWIyiFZWkUcqSp+0J8FC/AK4NEx2F91/Df6q
vllg/QpX8rUAHK1yph+XKtkB/R+6VOjg156bZ+0YXnQKCkNCMTXBac5osV42euu8
UVQ9OnQdpQFQRArBiELy7TTLbmpd51epj8cirWSlPZ5gbMFjnAeAIIlChQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFAXrjLuq8lpxvy/KtuEQV+v5HwHjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2RjYzg2
YS01ZjUxLTRkMTItOTYzZC1mMjdjNjI4YjgzNTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZGNjODZh
LTVmNTEtNGQxMi05NjNkLWYyN2M2MjhiODM1My8xL0JldU11NnJ5V25HX0w4cTI0
UkJYNl9rZkFlTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF
BwEHAQH/BDIwMDALBAIAATAFAwMAwfEwIQQCAAIwGwMHACABBnwscAMHACABBnws
dAMHACABBnwseDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIj8TANBgkqhkiG9w0B
AQsFAAOCAQEAArntdZ2iM0olokgxbY7N0QGSQk6WBTUqIAO7zmgS2qmJI8gKdNtw
ufTJ/LISpTJyCX9ndYu9D0Gr94uGIvFxGr+d5cFvDSSgUhKv3slTSO9Se37IVMqj
YrAHtr4qhaQJsXLpL78a5gaGexDkMTvDUQNSMBkCK6uQjrSa+nGnG5ipbOTw+OON
Ke5nb9YRtj5xcwB/YGsfIzqY37dzS+fLagCPSvmiD23mP5jZ0syxUMpgMawotwnL
an5qcyYAV3OCqszdhjUcDrwdvvUIjmeSSBdTAC3n3Na3zQQph5YoACXcho1fWxlH
VET9nkcAmRmRi5erHlvCCCZ8v+J+QOhNRQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:27:27 2024 by rpki-client on console-fra.rpki-client.org