Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
File:                     Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer (raw, json)
Hash identifier:          HmDXheAyYhhXh6aeV7TvODftcMrSaYGE8a0j3DUj7lY=
Subject key identifier:   0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC424528DAD69395A0C5C34F49BC8A7C7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:23 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212832

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:52:8d:ad:69:39:5a:0c:5c:34:f4:9b:c8:a7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0e29a482de0d56746c3045269f99205204f95484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:8b:32:c2:42:56:32:ac:27:0a:b9:05:45:
                    46:f5:be:e6:43:86:2f:1e:41:71:8b:a7:9e:58:14:
                    8c:41:91:f6:1d:07:f6:ea:08:17:f3:16:66:ff:ce:
                    42:e0:ee:ab:39:b7:bd:d2:78:f6:9f:e7:c5:d4:2e:
                    ff:eb:0e:93:06:7b:48:05:f2:ae:dc:82:bc:22:2d:
                    37:4f:0f:d9:2c:b1:0a:b7:d0:f6:38:a0:84:34:aa:
                    d8:1a:19:dd:7e:45:f7:b6:19:14:6f:40:3c:b7:67:
                    3b:7d:90:8d:a3:f8:84:7a:c6:14:91:16:b8:7d:99:
                    ba:a8:8e:55:c6:37:d6:3a:ab:94:7a:ea:c8:2f:a9:
                    ae:57:da:82:68:ef:70:b1:0e:90:b5:b2:34:e6:58:
                    de:a5:c9:75:d1:53:cb:f3:ec:a8:bb:95:18:e2:c2:
                    31:93:18:c3:8a:12:b5:69:6c:56:fc:71:7b:5e:08:
                    16:a1:d3:2a:c2:d8:10:8f:e0:23:b7:fc:62:a8:04:
                    2a:0a:e8:af:64:f0:c2:eb:c0:3c:ab:19:4e:2f:5a:
                    2d:a9:6b:6a:94:c8:79:57:54:db:42:d2:c6:0c:0d:
                    bd:33:52:fd:e4:87:82:52:f0:af:99:43:a4:31:28:
                    02:c5:d6:2a:bd:7e:b8:5d:b5:a6:0f:da:22:c3:7d:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212832

    Signature Algorithm: sha256WithRSAEncryption
         ab:d0:ff:83:44:f7:6c:e0:83:9a:ed:18:ea:04:1a:99:6d:dd:
         0d:83:c1:ff:2b:6d:6b:be:d7:ba:78:03:db:86:f8:8c:29:ed:
         e1:07:38:ae:1e:61:7a:67:87:9a:61:fe:a4:a7:03:8b:1d:fd:
         71:0c:12:21:b8:b4:8e:1b:cc:9a:6a:d6:9e:f1:67:bc:1a:c6:
         78:92:5f:23:15:62:0d:21:8e:40:6f:13:a9:39:2d:54:8e:d0:
         a2:9f:56:26:31:e6:b0:6f:46:f6:c0:a8:53:50:bd:bb:bd:c0:
         fb:8e:31:b5:ff:a3:c3:04:7a:55:82:4f:97:3c:4d:9b:0a:9e:
         10:66:2b:c8:41:77:e8:6b:43:80:4e:90:ce:c2:57:b5:f8:c8:
         dc:a9:99:03:93:a6:d8:c9:5a:8a:3b:bb:4c:41:4a:58:02:de:
         13:89:75:f5:dc:67:fd:e6:0d:92:0a:90:aa:16:75:46:4e:7b:
         d0:13:ce:39:2c:82:5a:8f:19:67:72:c2:4c:62:27:d8:e9:90:
         dd:db:1e:4e:dc:73:d3:7b:7d:a5:15:66:fd:cd:dc:a4:08:89:
         cb:29:bb:bb:ab:ac:a9:0b:03:09:44:1d:18:b1:65:0d:08:71:
         4f:d1:7f:b6:eb:c0:74:35:cb:87:a0:2e:23:b3:1f:0a:03:45:
         d9:23:0e:16
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzEJFKNrWk5WgxcNPSbyKfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTI5YTQ4MmRlMGQ1Njc0NmMzMDQ1MjY5Zjk5MjA1MjA0Zjk1NDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbSLMsJCVjKsJwq5BUVG9b7mQ4Yv
HkFxi6eeWBSMQZH2HQf26ggX8xZm/85C4O6rObe90nj2n+fF1C7/6w6TBntIBfKu
3IK8Ii03Tw/ZLLEKt9D2OKCENKrYGhndfkX3thkUb0A8t2c7fZCNo/iEesYUkRa4
fZm6qI5VxjfWOquUeurIL6muV9qCaO9wsQ6QtbI05ljepcl10VPL8+you5UY4sIx
kxjDihK1aWxW/HF7XggWodMqwtgQj+Ajt/xiqAQqCuivZPDC68A8qxlOL1otqWtq
lMh5V1TbQtLGDA29M1L95IeCUvCvmUOkMSgCxdYqvX64XbWmD9oiw33pdwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFA4ppILeDVZ0bDBFJp+ZIFIE+VSEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzE0YTI3
My04Yjc1LTQ3NmMtYjllMy04YmJkOTM5NDBlZWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMTRhMjcz
LThiNzUtNDc2Yy1iOWUzLThiYmQ5Mzk0MGVlZi8xL0RpbWtndDROVm5Sc01FVW1u
NWtnVWdUNVZJUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/YDANBgkqhkiG9w0BAQsFAAOCAQEAq9D/g0T3bOCD
mu0Y6gQamW3dDYPB/ytta77XungD24b4jCnt4Qc4rh5hemeHmmH+pKcDix39cQwS
Ibi0jhvMmmrWnvFnvBrGeJJfIxViDSGOQG8TqTktVI7Qop9WJjHmsG9G9sCoU1C9
u73A+44xtf+jwwR6VYJPlzxNmwqeEGYryEF36GtDgE6QzsJXtfjI3KmZA5Om2Mla
iju7TEFKWALeE4l19dxn/eYNkgqQqhZ1Rk570BPOOSyCWo8ZZ3LCTGIn2OmQ3dse
Ttxz03t9pRVm/c3cpAiJyym7u6usqQsDCUQdGLFlDQhxT9F/tuvAdDXLh6AuI7Mf
CgNF2SMOFg==
-----END CERTIFICATE-----
Generated at Thu Mar 28 14:59:20 2024 by rpki-client on console-fra.rpki-client.org