Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
File:                     E-zxC4h_CFiH3osttkkX7i5CRUU.cer (download)
Hash identifier:          QtOSQNX4gGb6803p702nmoyRuYyMjMEnmG+uieIxiJM=
Subject key identifier:   13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B96AE2FDB02A6C622565547A497AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Jul 01 00:00:00 2024 GMT
Subordinate resources:
    1: IP: 45.65.116.0/22
    2: IP: 45.88.8.0/22
    3: IP: 45.95.64.0/22
    4: IP: 45.148.140.0/22
    5: IP: 77.83.104.0/22
    6: IP: 194.150.204.0/23
    7: IP: 194.150.210.0/23

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:96:ae:2f:db:02:a6:c6:22:56:55:47:a4:97:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:c4:de:8b:bb:9c:68:50:1f:fc:76:01:4b:
                    1a:08:81:03:24:f9:8a:93:bd:dc:49:22:ce:1b:e1:
                    98:3d:cf:08:f4:98:64:43:4a:d6:0d:1a:44:f5:c2:
                    64:89:13:c4:85:d8:15:f8:19:08:c3:1c:1a:97:6e:
                    70:5c:cf:bc:ec:f8:5c:bf:8d:43:f1:e1:66:2d:ce:
                    a5:65:39:60:89:0d:14:7c:06:9c:93:25:54:d8:8e:
                    b4:2d:0e:14:49:3a:a2:56:a9:f4:ff:71:90:65:52:
                    b8:67:6b:97:a1:48:98:d8:77:fd:ea:31:5f:b2:3c:
                    f5:61:cf:33:ac:01:0c:a2:81:d0:95:97:03:77:8e:
                    08:28:38:dd:4e:e3:ba:53:1d:f9:6f:6e:bb:96:a1:
                    fe:e9:6d:de:ab:59:5d:53:56:25:ee:b7:84:ed:ce:
                    b1:0e:48:08:d8:df:a8:d3:fc:bf:e7:b5:67:e9:a4:
                    62:ad:83:16:44:d7:7e:05:56:ba:c9:e8:ad:9a:4a:
                    15:56:e2:9f:81:47:84:2a:22:0f:0b:ca:0d:cc:b9:
                    25:1f:5f:3b:9f:ce:2b:b4:70:1f:23:d7:55:a2:25:
                    52:cd:2b:14:ce:54:b5:12:01:ff:c3:a8:f0:ac:b9:
                    c6:02:f5:cb:61:80:fd:b2:ee:f3:26:9f:c8:94:33:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.116.0/22
                  45.88.8.0/22
                  45.95.64.0/22
                  45.148.140.0/22
                  77.83.104.0/22
                  194.150.204.0/23
                  194.150.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:d6:d8:bb:68:e4:a3:89:61:4a:8c:30:aa:a0:90:b2:c2:0d:
         9b:e7:01:d7:d4:5f:32:40:1d:9c:b8:c9:40:95:a5:b3:42:80:
         18:88:1e:0f:45:59:52:61:ba:b1:ad:a8:5c:fa:33:60:c6:ed:
         fc:10:d6:c1:ed:f0:f8:3b:13:6f:70:f8:b2:2e:63:fa:13:f1:
         70:f7:08:56:47:bc:19:c5:ba:2e:a4:18:f7:1b:31:0e:a8:c7:
         84:3d:da:83:9d:10:4d:a2:90:75:76:ff:b0:3b:3c:42:bd:d5:
         d2:72:d6:36:86:57:63:55:46:6c:85:d6:3e:80:e6:a7:c8:f0:
         ac:77:e7:de:5f:3c:3d:6d:e5:c0:2a:15:4d:73:a4:ec:3c:0a:
         ea:51:b3:fa:ab:e5:83:cb:01:79:8f:27:66:4d:0c:a7:c0:9c:
         41:6d:51:1f:65:66:1d:87:8c:21:5f:3f:41:fa:0c:22:d5:ae:
         11:a6:f1:40:2f:36:4b:8d:96:98:4f:69:d1:c5:c5:65:7a:12:
         3b:7c:a3:b2:90:15:a0:46:14:17:91:55:75:0c:d3:0f:77:d1:
         e1:3f:4b:27:68:86:7f:f5:00:9c:80:f0:38:b3:5a:6e:be:9a:
         76:ae:bf:89:7d:c3:92:8f:36:2b:60:0e:8d:90:56:c4:b8:94:
         5e:b3:34:e8
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAYVwi5auL9sCpsYiVlVHpJevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2VjZjEwYjg4N2YwODU4ODdkZThiMmRiNjQ5MTdlZTJlNDI0NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiPE3ou7nGhQH/x2AUsaCIEDJPmK
k73cSSLOG+GYPc8I9JhkQ0rWDRpE9cJkiRPEhdgV+BkIwxwal25wXM+87Phcv41D
8eFmLc6lZTlgiQ0UfAackyVU2I60LQ4USTqiVqn0/3GQZVK4Z2uXoUiY2Hf96jFf
sjz1Yc8zrAEMooHQlZcDd44IKDjdTuO6Ux35b267lqH+6W3eq1ldU1Yl7reE7c6x
DkgI2N+o0/y/57Vn6aRirYMWRNd+BVa6yeitmkoVVuKfgUeEKiIPC8oNzLklH187
n84rtHAfI9dVoiVSzSsUzlS1EgH/w6jwrLnGAvXLYYD9su7zJp/IlDN9nwIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFBPs8QuIfwhYh96LLbZJF+4uQkVFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2M0NWE5
Yi01MDk2LTRlNzUtOTM4OS1iZDliNDJmNDhkZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvYzQ1YTli
LTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8xL0UtenhDNGhfQ0ZpSDNvc3R0
a2tYN2k1Q1JVVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAwBAIAATAqAwQCLUF0AwQCLVgIAwQCLV9AAwQCLZSMAwQCTVNo
AwQBwpbMAwQBwpbSMA0GCSqGSIb3DQEBCwUAA4IBAQA81ti7aOSjiWFKjDCqoJCy
wg2b5wHX1F8yQB2cuMlAlaWzQoAYiB4PRVlSYbqxrahc+jNgxu38ENbB7fD4OxNv
cPiyLmP6E/Fw9whWR7wZxboupBj3GzEOqMeEPdqDnRBNopB1dv+wOzxCvdXSctY2
hldjVUZshdY+gOanyPCsd+feXzw9beXAKhVNc6TsPArqUbP6q+WDywF5jydmTQyn
wJxBbVEfZWYdh4whXz9B+gwi1a4RpvFALzZLjZaYT2nRxcVlehI7fKOykBWgRhQX
kVV1DNMPd9HhP0snaIZ/9QCcgPA4s1puvpp2rr+JfcOSjzYrYA6NkFbEuJReszTo
-----END CERTIFICATE-----
Generated at Wed Jan 4 10:16:55 2023 by rpki-client.