Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
File:                     CVi1S_7piWxK2n3Bizt_lxnaBGs.cer (raw, json)
Hash identifier:          8dZRXRdjAGlTGXrDz25g3i0IGetzjwzJfu9y8PfEIdU=
Subject key identifier:   09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC649E714DFF8FE7B0112E9546685B6DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:29:41 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.0.237.0/24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:e7:14:df:f8:fe:7b:01:12:e9:54:66:85:b6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:29:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:32:e5:02:2d:3f:f4:d4:a3:2f:cc:8d:97:
                    60:5d:d2:69:3d:8a:41:b2:30:c6:0b:07:5a:77:18:
                    7a:61:6a:76:65:82:e9:47:8d:d4:6f:7c:18:40:33:
                    9b:9b:a1:c9:29:6d:96:f6:c6:dc:21:fd:73:63:b4:
                    2d:67:ee:7e:2e:b0:e1:01:21:c1:da:4a:d4:f7:e6:
                    2e:95:cf:bb:e0:9b:25:c1:e6:cf:f5:72:c1:af:5a:
                    70:36:f4:f2:08:e5:83:52:53:af:20:23:b9:50:2a:
                    8b:34:c6:f1:30:09:9b:7d:9a:79:69:3c:a2:ef:ce:
                    51:22:b3:48:a4:cd:b4:6b:b1:b9:d9:09:c4:1e:55:
                    cb:1f:a6:0d:ce:be:49:97:bf:49:bb:8c:a4:5e:fe:
                    1f:fd:e3:be:93:50:87:e8:30:80:be:eb:29:d1:84:
                    81:62:a3:06:77:59:36:4a:96:61:3f:38:c8:25:d2:
                    c2:7b:d9:ea:8a:4f:5a:75:a0:37:bd:64:3d:4e:af:
                    5e:cb:c4:94:38:88:17:0d:47:82:fa:44:d7:99:81:
                    a0:ef:73:a5:ff:2a:c2:c5:49:70:19:b7:40:18:39:
                    10:0a:52:dd:97:44:54:ab:d1:f0:fe:87:85:d9:7d:
                    55:31:75:18:c6:5c:94:53:fb:ac:f8:a5:7c:fc:4e:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:0d:ac:6e:09:ac:17:8a:00:1c:54:42:3b:3e:69:28:02:
         a6:19:fa:15:d9:a1:b7:07:8d:5d:f1:a2:71:17:cd:c0:f2:87:
         29:99:25:1e:e4:7a:03:12:23:c4:2f:17:91:95:70:20:84:3c:
         c8:82:cd:c7:33:ba:55:e2:8c:87:ca:4e:e3:cd:26:b1:76:44:
         43:9e:a8:3f:c1:24:2d:56:5c:c8:40:b0:c0:aa:b4:2e:65:42:
         91:18:db:c1:44:82:44:a9:56:20:0c:26:4d:4c:7c:7c:d3:98:
         cd:9c:09:db:da:6d:8d:31:ce:47:33:5c:b6:9b:9d:64:29:d1:
         1a:40:50:28:fb:ff:45:82:90:46:df:b0:24:e0:a5:2c:66:83:
         cd:c4:ec:fe:54:4b:22:cf:b9:0b:5c:59:5e:e5:1b:06:77:13:
         a1:0b:73:be:d9:e3:74:7c:38:94:27:13:d3:47:10:51:ec:e1:
         d1:73:9a:0d:bb:82:e5:de:51:62:4e:b9:e4:87:29:6c:e4:fd:
         ad:cb:3e:55:91:59:9d:87:7f:a6:1e:9b:2e:5a:56:12:05:3f:
         cf:7c:bb:38:cc:75:b1:13:80:dd:61:56:e8:d0:60:4e:07:60:
         46:ab:ba:79:c9:b2:cf:6c:c0:b8:fb:d9:f6:6b:e1:51:cc:de:
         4f:55:4d:1c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSecU3/j+ewES6VRmhbbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTU4YjU0YmZlZTk4OTZjNGFkYTdkYzE4YjNiN2Y5NzE5ZGEwNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsusy5QItP/TUoy/MjZdgXdJpPYpB
sjDGCwdadxh6YWp2ZYLpR43Ub3wYQDObm6HJKW2W9sbcIf1zY7QtZ+5+LrDhASHB
2krU9+Yulc+74JslwebP9XLBr1pwNvTyCOWDUlOvICO5UCqLNMbxMAmbfZp5aTyi
785RIrNIpM20a7G52QnEHlXLH6YNzr5Jl79Ju4ykXv4f/eO+k1CH6DCAvusp0YSB
YqMGd1k2SpZhPzjIJdLCe9nqik9adaA3vWQ9Tq9ey8SUOIgXDUeC+kTXmYGg73Ol
/yrCxUlwGbdAGDkQClLdl0RUq9Hw/oeF2X1VMXUYxlyUU/us+KV8/E4XxwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAlYtUv+6YlsStp9wYs7f5cZ2gRrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2E2MGY4
Ni04Yjk0LTQxMGEtYmZkMS1mZjRjNzE4MzAyNGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvYTYwZjg2
LThiOTQtNDEwYS1iZmQxLWZmNGM3MTgzMDI0Zi8xL0NWaTFTXzdwaVd4SzJuM0Jp
enRfbHhuYUJHcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwQDtMA0GCSqGSIb3DQEBCwUAA4IBAQAKIQ2s
bgmsF4oAHFRCOz5pKAKmGfoV2aG3B41d8aJxF83A8ocpmSUe5HoDEiPELxeRlXAg
hDzIgs3HM7pV4oyHyk7jzSaxdkRDnqg/wSQtVlzIQLDAqrQuZUKRGNvBRIJEqVYg
DCZNTHx805jNnAnb2m2NMc5HM1y2m51kKdEaQFAo+/9FgpBG37Ak4KUsZoPNxOz+
VEsiz7kLXFle5RsGdxOhC3O+2eN0fDiUJxPTRxBR7OHRc5oNu4Ll3lFiTrnkhyls
5P2tyz5VkVmdh3+mHpsuWlYSBT/PfLs4zHWxE4DdYVbo0GBOB2BGq7p5ybLPbMC4
+9n2a+FRzN5PVU0c
-----END CERTIFICATE-----
Generated at Fri Mar 29 11:58:50 2024 by rpki-client on console-ams.rpki-client.org