Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
File:                     DOhRtt1dNk7hngs4IBs-jfJiS8s.cer (download)
Hash identifier:          TTbbQrz9uDDzpQ/ckQcOEM5vskeWixz5i5wigL2ssJs=
Subject key identifier:   0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFAF770F00FAB28C4BF1348809D823B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 56339
    2: IP: 163.5.0.0/16
    3: IP: 185.253.54.0/24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:f7:70:f0:0f:ab:28:c4:bf:13:48:80:9d:82:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:62:b1:13:6e:5d:bf:a1:ae:1f:20:86:4d:
                    33:2d:c7:77:33:65:3f:cf:10:1d:c5:2c:10:1d:eb:
                    61:21:76:8b:37:4f:3c:81:3b:f2:4f:8a:c8:b0:82:
                    53:f1:0f:23:d4:a6:51:1a:92:a1:53:fb:eb:4d:1e:
                    16:80:97:d8:22:e5:80:b3:4e:9a:20:b9:2d:81:0d:
                    98:9a:18:30:66:d3:b2:66:bb:7b:f0:ee:6c:a0:3a:
                    d1:f2:aa:7e:b5:3a:39:42:a8:c0:45:d1:71:4b:08:
                    9b:f9:7a:fd:21:13:6c:ba:fa:ee:7f:1a:7d:5e:08:
                    5b:1d:49:d6:3a:98:90:46:2d:69:04:7b:24:ed:e9:
                    a7:13:1a:da:d5:e6:f5:dc:3b:19:09:17:3d:4f:0c:
                    f7:31:e0:44:94:04:e0:48:da:c5:da:0a:7c:cf:a5:
                    62:30:ea:60:90:40:1a:fd:7f:38:35:e7:ca:f6:fc:
                    0d:40:02:6d:70:d0:3d:9d:e8:34:ea:f3:da:d6:fa:
                    5a:42:6c:e8:d7:c2:d0:01:71:18:0b:18:03:1d:57:
                    f1:63:20:36:74:0f:50:57:ee:9c:c6:0a:17:b4:da:
                    c9:7f:bd:0f:e5:37:36:6f:5a:b0:9b:60:92:94:ba:
                    4b:c3:d2:f0:77:14:60:2e:4d:f2:52:62:e6:99:f8:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.0.0/16
                  185.253.54.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56339

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:65:f7:e9:81:3b:59:c1:b4:52:af:e6:29:5f:e6:4d:aa:
         45:c0:7b:37:6d:61:a4:6a:c6:79:13:6a:27:6d:68:fa:f4:30:
         76:0c:39:8f:8f:a3:cf:17:9d:8f:23:d9:e6:f2:e5:5b:68:55:
         1f:05:b3:1a:e9:00:05:19:83:8d:e7:66:7f:fb:ca:1a:f6:36:
         a7:67:b4:bd:db:1f:c6:73:39:81:d4:56:f2:42:c5:6d:ea:70:
         23:2b:ea:7d:4e:2a:bc:6f:a4:32:41:71:2c:a6:71:e1:6d:51:
         cc:94:6d:ad:38:9b:0f:f7:0f:8c:db:29:ea:b8:3c:14:9c:51:
         59:cd:c5:f3:78:33:c8:02:d4:e9:be:af:e5:03:8c:f8:aa:d1:
         33:50:05:bb:d2:09:f0:78:98:25:73:dd:55:93:89:8d:c9:15:
         64:be:70:1e:f2:71:e9:f5:33:87:25:f4:96:65:41:83:89:eb:
         c2:1f:30:ca:54:50:82:b5:d0:da:25:c5:79:32:13:18:5b:7f:
         e6:60:b1:bd:b8:9a:d2:55:b5:25:d6:f3:da:7f:e7:98:64:a2:
         c0:a2:35:0b:5a:d3:47:34:6e:59:42:2f:0c:00:9c:8a:15:1f:
         54:c7:6f:60:a4:eb:ee:b3:a6:76:75:ad:e6:bc:8a:ba:44:25:
         9c:3c:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 4 01:18:12 2023 by rpki-client.