Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CIYS1NNtYrCWhtnriqsFJ9S790E.cer
File:                     CIYS1NNtYrCWhtnriqsFJ9S790E.cer (download)
Hash identifier:          Pp5/Og548YO7IaY9GOh/LppbtMiXJK73zTQen6KFgiA=
Subject key identifier:   08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAE17FA55C5C9F51BA4C0C94FC6DA0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/CIYS1NNtYrCWhtnriqsFJ9S790E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 185.213.194.0/24
    2: IP: 2a11:3000::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:e1:7f:a5:5c:5c:9f:51:ba:4c:0c:94:fc:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=088612d4d36d62b09686d9eb8aab0527d4bbf741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:f1:8e:6b:d2:e6:e5:29:64:13:ee:87:a5:
                    3b:e7:64:b4:e4:8e:5d:12:9c:4b:b3:4e:fc:9f:b1:
                    7d:a3:2f:89:9e:2c:03:c9:02:0b:46:1c:e9:ec:dc:
                    61:3f:81:a6:ce:74:ca:21:db:4a:f5:ba:b4:ee:9c:
                    62:f1:c9:af:d3:5a:46:f8:56:51:35:2a:f0:35:96:
                    b7:5d:cf:91:2c:65:e4:cf:9e:08:fb:e3:ef:9a:2d:
                    f6:6b:6d:d3:99:25:d2:e5:4d:47:d8:17:8a:02:97:
                    25:21:f0:be:e8:4b:1e:47:24:dd:3b:de:bb:0d:49:
                    7f:b7:1f:98:49:4e:8f:ab:1b:d0:51:88:2a:8f:51:
                    44:d3:5b:82:b1:a6:27:70:39:d1:95:39:60:ed:bd:
                    05:e0:a1:97:c4:61:38:5f:84:36:93:94:d5:86:0f:
                    d9:17:ed:c3:6e:af:d2:3d:a8:be:c2:db:c3:bf:ec:
                    6e:3b:a2:a9:f7:f5:bc:b3:6b:52:4d:23:5b:1a:2c:
                    c9:30:a0:6c:da:0c:99:13:61:07:7d:94:5e:4c:71:
                    82:21:de:ec:56:b1:f2:5f:3e:7b:ee:0e:bc:9e:f8:
                    27:bf:b3:0e:90:af:ff:53:f2:9e:b2:12:a3:b0:61:
                    4b:3c:f9:fa:59:6d:ea:16:a0:ad:d0:6b:6a:5f:ab:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/CIYS1NNtYrCWhtnriqsFJ9S790E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.194.0/24
                IPv6:
                  2a11:3000::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:9b:97:4a:59:8c:bd:d6:a2:b8:5e:6d:34:17:7e:64:26:
         f5:7c:35:57:4e:e3:34:da:74:54:31:22:74:79:09:79:c6:89:
         0d:a4:46:ff:b4:60:3d:a6:c2:9d:7a:52:18:eb:76:24:f3:3d:
         e1:28:35:99:af:b4:62:f1:1a:ce:e1:7c:17:5d:26:f7:85:dc:
         73:b8:fe:c7:ce:12:d1:79:ae:19:51:e8:2a:27:40:45:31:1e:
         1c:e0:c8:b2:32:5c:0a:c9:f2:00:06:95:8d:a2:6e:a5:b9:9c:
         57:14:05:c3:d7:a5:1e:1a:9b:40:b3:f1:09:a3:37:36:38:46:
         d6:18:55:35:01:ea:f3:4e:6d:fc:38:42:9a:f0:8c:0a:ed:3a:
         ea:c3:3e:1d:f1:9d:e7:fd:77:ac:aa:a6:35:8c:3a:2c:9b:64:
         19:04:b0:11:d8:a9:fe:04:c6:94:98:07:d7:18:76:25:2a:b9:
         46:f8:19:ff:19:11:3d:18:91:7a:aa:24:76:d5:d7:e1:c5:00:
         74:23:00:ab:b4:ea:22:d5:13:f6:da:ba:13:09:60:90:f2:75:
         c7:9f:61:2c:a0:87:3b:de:d7:48:4c:b8:7b:22:40:1b:c9:76:
         4a:ed:8e:6c:94:39:41:28:6e:e0:98:55:30:7c:df:08:9e:65:
         dd:29:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 2 12:32:13 2023 by rpki-client.