Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
File:                     Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer (download)
Hash identifier:          OfpdaUjFpSdvQdk80YBjuux4qfekSbEF7yd/6NaNGe8=
Subject key identifier:   1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AEFDE8255C2AA10405009858217078B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/8
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 200282
    2: IP: 2.58.80.0/22
    3: IP: 5.181.32.0/22
    4: IP: 5.183.32.0/22
    5: IP: 5.252.140.0/22
    6: IP: 45.66.136.0/22
    7: IP: 45.80.152.0/22
    8: IP: 45.88.196.0/22
    9: IP: 45.89.204.0/22
   10: IP: 45.90.228.0/22
   11: IP: 45.93.124.0/22
   12: IP: 45.128.160.0/22
   13: IP: 45.132.240.0/22
   14: IP: 45.141.220.0/22
   15: IP: 45.143.80.0/22
   16: IP: 45.147.72.0/22
   17: IP: 45.155.44.0/22
   18: IP: 46.17.172.0/22
   19: IP: 80.65.208.0/22
   20: IP: 81.22.36.0/22
   21: IP: 83.136.216.0/22
   22: IP: 83.171.248.0/22
   23: IP: 84.21.168.0/22
   24: IP: 85.208.156.0/22
   25: IP: 88.218.164.0/22
   26: IP: 91.196.68.0/22
   27: IP: 92.118.52.0/22
   28: IP: 93.177.96.0/22
   29: IP: 94.101.112.0/22
   30: IP: 95.214.216.0/22
   31: IP: 109.236.60.0/22
   32: IP: 141.98.152.0/22
   33: IP: 152.89.88.0/22
   34: IP: 176.113.76.0/22
   35: IP: 178.212.32.0/22
   36: IP: 185.193.16.0/22
   37: IP: 192.145.36.0/22
   38: IP: 193.46.240.0/22
   39: IP: 193.148.72.0/22
   40: IP: 193.149.24.0/22
   41: IP: 194.5.152.0/22
   42: IP: 194.15.108.0/22
   43: IP: 194.53.108.0/22
   44: IP: 194.61.28.0/22
   45: IP: 194.110.143.0/24
   46: IP: 194.110.193.0/24
   47: IP: 194.110.200.0/24
   48: IP: 194.110.210.0/24
   49: IP: 194.180.176.0/22
   50: IP: 195.7.4.0/22
   51: IP: 213.190.4.0/22
   52: IP: 2a05:4300::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:ef:de:82:55:c2:aa:10:40:50:09:85:82:17:07:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:26:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:ee:f3:26:76:98:38:67:23:aa:80:72:59:
                    a2:9f:a5:14:f5:f6:09:66:8c:e5:af:74:8f:6e:2c:
                    a4:da:fb:b4:a9:21:8b:a1:21:cb:0c:65:d4:31:c2:
                    5f:8c:d5:8d:fe:03:e3:af:7d:0c:0c:fc:dd:2f:cd:
                    5f:ea:f6:42:f2:93:a8:18:dd:9b:38:9c:21:ef:cb:
                    3f:04:b7:e7:75:eb:d1:d1:af:36:05:4c:2a:ee:87:
                    e1:50:29:dd:2a:02:a5:ce:63:74:e4:bb:14:e5:f3:
                    be:4b:b3:e0:82:8b:11:11:4d:3c:79:d1:a2:8d:e8:
                    2c:8e:5f:0b:fd:09:23:3f:3f:a4:f9:96:7a:6c:58:
                    14:70:22:ef:82:b4:3d:17:f3:76:7c:5f:b9:5c:3a:
                    5f:32:6d:be:b9:69:8f:cc:b8:0a:d2:96:9e:23:4a:
                    62:d0:30:e1:fa:26:d2:aa:c9:b8:df:e0:e5:b1:93:
                    be:39:b7:ec:74:2e:77:d1:77:fc:eb:de:98:3e:98:
                    62:7e:52:03:7b:eb:69:8d:e3:de:26:fe:44:dc:77:
                    20:97:c3:72:e9:a9:77:ab:be:7f:b0:c4:75:3e:3b:
                    de:72:76:a2:98:ed:b5:80:60:21:1e:35:39:c3:ca:
                    30:0b:b4:bf:75:2c:b2:0a:9b:6b:6b:83:8e:89:d6:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.80.0/22
                  5.181.32.0/22
                  5.183.32.0/22
                  5.252.140.0/22
                  45.66.136.0/22
                  45.80.152.0/22
                  45.88.196.0/22
                  45.89.204.0/22
                  45.90.228.0/22
                  45.93.124.0/22
                  45.128.160.0/22
                  45.132.240.0/22
                  45.141.220.0/22
                  45.143.80.0/22
                  45.147.72.0/22
                  45.155.44.0/22
                  46.17.172.0/22
                  80.65.208.0/22
                  81.22.36.0/22
                  83.136.216.0/22
                  83.171.248.0/22
                  84.21.168.0/22
                  85.208.156.0/22
                  88.218.164.0/22
                  91.196.68.0/22
                  92.118.52.0/22
                  93.177.96.0/22
                  94.101.112.0/22
                  95.214.216.0/22
                  109.236.60.0/22
                  141.98.152.0/22
                  152.89.88.0/22
                  176.113.76.0/22
                  178.212.32.0/22
                  185.193.16.0/22
                  192.145.36.0/22
                  193.46.240.0/22
                  193.148.72.0/22
                  193.149.24.0/22
                  194.5.152.0/22
                  194.15.108.0/22
                  194.53.108.0/22
                  194.61.28.0/22
                  194.110.143.0/24
                  194.110.193.0/24
                  194.110.200.0/24
                  194.110.210.0/24
                  194.180.176.0/22
                  195.7.4.0/22
                  213.190.4.0/22
                IPv6:
                  2a05:4300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200282

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:b7:1f:13:a4:9d:e5:ee:5d:04:0f:9e:b0:45:f9:2e:68:
         7e:66:68:89:9c:ae:68:7b:fc:f9:2c:b2:ab:3d:ac:e1:83:b6:
         1b:97:e3:c2:78:05:34:39:ca:e7:28:cc:32:38:3c:ab:3b:b6:
         5d:c2:8a:fb:4b:87:44:40:88:96:a0:0f:cb:25:26:ca:81:d0:
         49:e9:e6:e9:e9:6e:9b:89:f0:2e:89:bc:2f:8d:e7:7b:89:41:
         44:e7:15:36:ec:c1:bc:f6:a0:65:cc:d9:31:9e:bf:db:5b:11:
         66:f5:f9:33:e8:17:57:0e:72:5a:73:d1:f4:e8:80:31:9f:db:
         a0:cb:28:6a:97:f5:ba:b4:5b:41:7e:15:ba:d0:fa:fb:60:f2:
         97:cc:c2:e2:8d:6b:d0:42:25:9f:c7:0d:9d:ed:a1:76:ce:22:
         43:27:da:ff:9d:d9:1c:28:f5:70:44:d6:40:59:51:55:53:eb:
         14:85:07:67:d1:0c:5e:2d:fb:19:d1:cb:c4:8b:3c:2b:ce:79:
         0d:7d:27:6e:98:fa:99:96:6f:02:d4:4d:77:0f:39:6c:e1:ce:
         b4:4a:17:b3:90:c0:2f:e7:33:fd:eb:da:92:6c:a2:d2:28:c0:
         e6:98:43:92:45:9f:5a:84:f3:98:86:26:a8:c7:55:16:9c:6d:
         73:be:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 30 10:40:05 2023 by rpki-client.