Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
File:                     CQKHJW4l-jQNOvungOrGDVVq3sA.cer (raw, json)
Hash identifier:          QzHPJYnRcUmsAqyhe3bNGe/s3Oe1Z4XVVWrdws9YWyY=
Subject key identifier:   09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CFA438040FB592AD524EF3FC7939A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 77.247.193.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:fa:43:80:40:fb:59:2a:d5:24:ef:3f:c7:93:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=090287256e25fa340d3afba780eac60d556adec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:85:98:b5:21:8b:03:39:ff:eb:c6:91:b9:
                    7e:07:71:53:90:40:8f:5f:c9:0c:54:de:74:aa:54:
                    d6:34:b1:cb:59:c9:9d:5b:c3:a0:23:0e:6e:be:e0:
                    c3:68:28:40:25:ca:c8:8f:60:fe:2c:85:d4:cf:58:
                    be:47:38:8c:83:15:29:52:cd:1d:8e:94:b1:21:c4:
                    ae:ca:d8:10:be:38:0e:6a:66:32:98:0e:d2:8e:cb:
                    ec:6b:32:ce:dc:09:48:5a:a2:5f:53:82:f8:9d:1d:
                    c7:84:bd:44:ef:df:98:fb:58:9d:e0:6f:0f:a8:9f:
                    e9:cf:30:9d:fe:9f:06:08:8c:a8:44:8f:49:c9:00:
                    75:70:47:f2:03:55:fc:6c:3a:4f:9f:32:6b:40:b4:
                    c2:8f:6a:9a:d0:30:fe:53:17:f2:b2:1e:a1:a9:da:
                    d6:9b:ba:4f:41:48:0d:a6:11:19:61:a3:3c:82:ec:
                    f4:26:3a:7b:dd:09:4c:73:96:22:a1:70:77:fe:11:
                    1f:48:25:d7:12:dd:07:ed:c7:36:fd:65:5a:6e:7c:
                    b8:c9:e0:80:d4:50:1b:51:ac:5c:de:38:78:f5:7a:
                    ce:58:a2:54:bd:ba:e7:ad:94:16:dc:bd:c7:d6:4c:
                    b4:56:44:5d:b8:47:ec:86:eb:25:7c:26:bc:f1:55:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:36:2e:ee:b5:f4:a9:b7:de:09:b4:8a:cb:88:e6:44:be:
         f8:29:94:a3:e6:a3:34:31:d7:16:5a:db:ff:f8:fe:34:cf:ca:
         71:e5:2a:c7:d2:d2:70:8c:2d:d8:d2:c7:d8:77:1d:e2:20:79:
         e0:c3:72:72:b6:67:52:8b:6a:6a:74:df:4b:6f:0d:33:04:ea:
         77:71:d9:29:cb:6b:a7:60:b7:39:46:69:ef:cb:e3:4a:ba:93:
         1f:8b:bf:3d:b1:ec:58:d1:7d:72:f4:a1:e5:1f:ba:8f:d1:5e:
         b7:9b:65:b3:2a:cb:d1:c2:e8:3d:90:d7:b6:cc:e0:80:2c:c9:
         3b:3f:af:dc:dc:d8:48:fe:cc:c0:66:75:96:27:5e:00:eb:89:
         b7:71:00:84:3c:f8:59:ae:a3:c8:96:f9:a4:69:8e:de:63:7f:
         86:6a:fe:86:81:c8:47:3c:9c:83:2c:1b:2d:eb:dc:0b:32:7a:
         8d:b4:5f:b8:09:00:85:c3:37:c5:e7:9e:37:d5:eb:be:c6:e8:
         d5:a7:2f:75:7e:ec:a6:e2:9f:97:fa:4a:20:48:36:13:55:de:
         53:d5:5d:b2:61:08:6c:f2:a4:0b:7d:c5:6c:eb:00:02:bf:87:
         08:a3:e9:14:55:cd:e1:e0:c4:8b:f0:66:ed:52:6f:0d:95:bc:
         02:fa:d5:c4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzCbPpDgED7WSrVJO8/x5OaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTAyODcyNTZlMjVmYTM0MGQzYWZiYTc4MGVhYzYwZDU1NmFkZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApweFmLUhiwM5/+vGkbl+B3FTkECP
X8kMVN50qlTWNLHLWcmdW8OgIw5uvuDDaChAJcrIj2D+LIXUz1i+RziMgxUpUs0d
jpSxIcSuytgQvjgOamYymA7SjsvsazLO3AlIWqJfU4L4nR3HhL1E79+Y+1id4G8P
qJ/pzzCd/p8GCIyoRI9JyQB1cEfyA1X8bDpPnzJrQLTCj2qa0DD+Uxfysh6hqdrW
m7pPQUgNphEZYaM8guz0Jjp73QlMc5YioXB3/hEfSCXXEt0H7cc2/WVabny4yeCA
1FAbUaxc3jh49XrOWKJUvbrnrZQW3L3H1ky0VkRduEfshuslfCa88VWk7QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAkChyVuJfo0DTr7p4Dqxg1Vat7AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzViMGZm
NS04NGMzLTQ5YmItOWZhYi03N2IyMWMwNGJjN2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNWIwZmY1
LTg0YzMtNDliYi05ZmFiLTc3YjIxYzA0YmM3ZC8xL0NRS0hKVzRsLWpRTk92dW5n
T3JHRFZWcTNzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQATffBMA0GCSqGSIb3DQEBCwUAA4IBAQB6RDYu
7rX0qbfeCbSKy4jmRL74KZSj5qM0MdcWWtv/+P40z8px5SrH0tJwjC3Y0sfYdx3i
IHngw3JytmdSi2pqdN9Lbw0zBOp3cdkpy2unYLc5Rmnvy+NKupMfi789sexY0X1y
9KHlH7qP0V63m2WzKsvRwug9kNe2zOCALMk7P6/c3NhI/szAZnWWJ14A64m3cQCE
PPhZrqPIlvmkaY7eY3+Gav6GgchHPJyDLBst69wLMnqNtF+4CQCFwzfF55431eu+
xujVpy91fuym4p+X+kogSDYTVd5T1V2yYQhs8qQLfcVs6wACv4cIo+kUVc3h4MSL
8GbtUm8NlbwC+tXE
-----END CERTIFICATE-----
Generated at Fri Mar 29 09:44:18 2024 by rpki-client on console-fra.rpki-client.org