Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
File:                     I0Rtp6cLznc-wrwWVarjDDwYQSw.cer (raw, json)
Hash identifier:          di61Ui8AD4Hh+MLjINPnzOvaaJuc62EucriaLCYbuGI=
Subject key identifier:   23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC492E012FEAB617405DFA17482AEA4BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.11.232.0/22
                          IP: 45.91.188.0/22
                          IP: 45.142.52.0/22
                          IP: 45.147.60.0/22
                          IP: 45.153.236.0/22
                          IP: 77.83.44.0/22
                          IP: 77.83.68.0/22
                          IP: 80.76.36.0/22
                          IP: 84.252.84.0/22
                          IP: 95.214.100.0/22
                          IP: 171.22.188.0/22
                          IP: 185.15.176.0/22
                          IP: 185.164.64.0/22
                          IP: 193.36.124.0/22
                          IP: 194.110.88.0/22
                          IP: 212.81.40.0/22
                          IP: 2a0f:4cc0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:e0:12:fe:ab:61:74:05:df:a1:74:82:ae:a4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:43:2b:62:6f:4a:40:9c:79:c5:f6:83:0d:
                    0a:31:38:a5:72:33:4f:d6:16:26:2f:ee:2f:2a:6c:
                    21:d4:86:31:37:62:d6:30:69:6f:bb:14:79:50:0b:
                    ac:f8:26:f8:6e:ec:0d:27:78:47:6f:06:fc:3b:e0:
                    10:73:7a:5d:d5:d3:97:d9:77:49:75:21:fe:7d:76:
                    fb:6a:0b:b4:8f:6d:3e:37:f1:96:98:b8:eb:06:06:
                    47:9b:65:b5:d6:ed:59:1d:c9:4d:fb:d5:18:1c:b8:
                    3f:cd:db:c3:28:ef:89:8b:38:f2:f4:af:85:7d:bb:
                    28:01:88:20:2f:da:95:26:8d:c7:3f:da:40:3b:29:
                    4a:d2:ca:03:84:3a:8e:80:42:9a:05:f7:c4:57:88:
                    98:12:3e:be:e5:da:d1:a7:1e:87:6e:29:72:19:e1:
                    d8:ed:95:9c:8b:d1:e5:18:54:12:9c:37:9a:d8:48:
                    cd:fe:61:46:15:7c:b4:ff:5b:d5:33:c3:12:eb:2f:
                    84:0d:83:19:6c:9d:70:89:83:0d:bb:59:e3:ce:d0:
                    9f:15:ae:6c:f4:71:0d:25:5f:55:44:4e:5e:7d:3b:
                    7d:9d:6d:b6:f6:e6:09:5b:8e:6e:8c:5e:e8:e7:b8:
                    ae:2b:a5:ad:5e:f8:b2:be:31:4c:3e:fa:91:ca:6f:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.232.0/22
                  45.91.188.0/22
                  45.142.52.0/22
                  45.147.60.0/22
                  45.153.236.0/22
                  77.83.44.0/22
                  77.83.68.0/22
                  80.76.36.0/22
                  84.252.84.0/22
                  95.214.100.0/22
                  171.22.188.0/22
                  185.15.176.0/22
                  185.164.64.0/22
                  193.36.124.0/22
                  194.110.88.0/22
                  212.81.40.0/22
                IPv6:
                  2a0f:4cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:17:98:b7:a7:41:37:25:04:42:80:0f:31:02:c3:8d:ab:
         5a:1d:9c:d8:d3:e8:75:51:d5:f8:46:b3:3c:95:8d:94:6c:bd:
         c4:fb:f0:ab:d2:6c:71:f8:ae:9f:cb:0b:a8:8c:69:7c:17:29:
         9b:c4:b6:e8:81:c0:f8:75:b1:81:23:35:80:f2:5d:d3:54:20:
         dd:e1:e7:a2:67:48:ae:22:48:8f:93:78:14:5c:96:31:c4:52:
         c2:66:d0:1c:8f:8c:e6:e7:28:c9:ca:82:96:5a:df:38:53:42:
         5f:c4:31:35:75:6d:f9:28:dc:37:a3:80:45:ed:81:25:09:7a:
         54:a0:17:f1:95:20:37:af:79:55:f8:6c:a5:b3:fb:0f:41:db:
         94:4f:e6:76:f7:b2:84:92:df:0f:8d:25:60:1f:65:25:98:84:
         2d:d3:81:2c:69:85:5b:4c:d6:e0:86:d0:ca:b5:46:6c:55:12:
         7f:c1:e5:b5:75:61:1b:a9:71:5c:53:3e:7a:4d:6a:3f:35:6e:
         f4:ad:31:8b:4b:3f:93:e7:0c:ec:e0:37:64:bb:15:4a:78:76:
         c2:fd:57:0e:4b:43:50:86:6a:54:d3:7c:23:c1:1e:67:85:cb:
         35:8b:ac:22:10:79:23:a6:ca:74:13:a6:94:af:f7:96:52:66:
         01:63:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 09:37:08 2024 by rpki-client on console-fra.rpki-client.org