Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.cer (download)
Hash identifier:          p5tS+H/WHK1LeQ+kIIeAiFSmgRT8GLFXi0OE4ac7U7s=
Subject key identifier:   23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A6F1268D46
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Jul 01 00:00:00 2023 GMT
Subordinate resources:
    1: AS: 29576
    2: IP: 93.157.24.0/21
    3: IP: 194.146.132.0/22

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717010406726 (0xa6f1268d46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:54:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:e8:2b:b3:d3:e2:74:34:6f:bf:20:71:ea:
                    74:6d:bd:16:9d:7b:82:41:8d:a1:15:2f:cf:ae:af:
                    49:8a:9e:ea:58:3b:fd:34:68:a3:e5:fa:a6:cc:e3:
                    97:e1:f2:5b:b3:7b:b6:cf:49:11:07:c7:17:c9:21:
                    87:15:e1:8f:84:69:7b:91:4d:13:3c:f7:64:85:30:
                    d6:45:ef:e3:9d:d0:d2:f1:13:6d:e4:26:d1:83:18:
                    a2:72:ea:d6:6a:d9:28:9e:0f:c3:83:5e:da:13:7e:
                    73:26:3f:81:82:2b:2b:38:3e:e9:79:fe:a4:f3:f8:
                    b6:d2:e6:69:87:8a:6a:80:b8:7a:49:f4:d5:39:a5:
                    c3:94:5e:21:46:0d:1c:db:d0:d4:ba:90:e5:4c:e7:
                    ff:09:bb:f7:a8:cf:d9:d7:c7:4b:e9:86:d9:07:37:
                    9a:09:83:21:86:9b:3d:12:7b:b9:05:37:4e:5f:08:
                    60:5f:2c:c5:11:70:0e:22:af:33:56:20:87:38:fc:
                    28:43:bb:08:d7:ab:2c:9f:89:79:78:54:a2:fd:a9:
                    9e:6d:c4:a0:c5:73:12:f8:3b:bf:d0:c8:7c:b9:da:
                    26:88:20:b1:df:f5:2f:6d:4e:2f:57:2b:83:aa:af:
                    03:0b:f3:c5:b3:7b:99:7e:fb:7d:9d:0f:c0:d2:67:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.24.0/21
                  194.146.132.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29576

    Signature Algorithm: sha256WithRSAEncryption
         94:76:3a:3f:a4:6d:e4:d8:16:64:9e:cf:76:61:60:e4:b4:f1:
         2c:87:5f:43:67:54:42:4a:41:5d:0b:12:f7:ce:13:96:27:0f:
         48:14:4a:99:ed:7a:17:eb:b2:71:5c:1d:81:57:4d:27:8e:2b:
         f9:7b:a7:fa:1c:43:4e:f4:ee:bb:2a:6d:86:73:77:04:cf:09:
         d7:9f:3d:84:30:b0:7a:37:87:7a:3c:50:28:c1:0e:c1:e3:6e:
         17:dc:b7:a4:d4:5d:eb:85:59:17:46:95:67:69:ed:20:01:82:
         ce:b0:31:30:34:91:b9:96:11:ba:97:6c:4d:85:05:17:42:7a:
         ff:2b:0b:98:6a:22:60:70:f9:50:99:46:92:57:c1:9d:0f:ff:
         5f:a3:40:6f:b9:73:92:88:e9:c0:30:f5:50:63:e4:7c:37:8e:
         6c:bd:81:a4:22:4b:00:14:d0:15:26:e2:60:53:24:94:60:d8:
         2e:85:e3:05:64:eb:94:a8:9f:fb:ac:e8:2e:f8:86:0c:3a:b9:
         84:bf:61:41:b3:47:2d:2c:e6:81:56:94:8e:fd:22:e7:23:69:
         ad:7d:08:b2:d3:9a:6f:a7:b1:06:51:de:77:a1:a9:b0:8e:58:
         9b:00:d5:f1:9f:ae:b0:3a:39:6c:00:c3:de:44:fc:ed:e3:26:
         40:b8:f7:0f
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIGAKbxJo1GMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTI1NDI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyM2JhMWVjNGYw
MzVhNzJkZmEzOWU5MzBhZDhlYzU0MzY4ZWI3YWY0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAquPoK7PT4nQ0b78gcep0bb0WnXuCQY2hFS/Prq9Jip7q
WDv9NGij5fqmzOOX4fJbs3u2z0kRB8cXySGHFeGPhGl7kU0TPPdkhTDWRe/jndDS
8RNt5CbRgxiicurWatkong/Dg17aE35zJj+BgisrOD7pef6k8/i20uZph4pqgLh6
SfTVOaXDlF4hRg0c29DUupDlTOf/Cbv3qM/Z18dL6YbZBzeaCYMhhps9Enu5BTdO
XwhgXyzFEXAOIq8zViCHOPwoQ7sI16ssn4l5eFSi/amebcSgxXMS+Du/0Mh8udom
iCCx3/UvbU4vVyuDqq8DC/PFs3uZfvt9nQ/A0mfd6wIDAQABo4ICpTCCAqEwHQYD
VR0OBBYEFCO6HsTwNact+jnpMK2OxUNo63r0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzYwZWQyZC0xNmQ1LTRkMGMt
YTk0Ny1iZGU2NDQ4Yjc4NmMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvNjBlZDJkLTE2ZDUtNGQwYy1h
OTQ3LWJkZTY0NDhiNzg2Yy8xL0k3b2V4UEExcHkzNk9la3dyWTdGUTJqcmV2US5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDXZ0YAwQCwpKEMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnOIMA0G
CSqGSIb3DQEBCwUAA4IBAQCUdjo/pG3k2BZkns92YWDktPEsh19DZ1RCSkFdCxL3
zhOWJw9IFEqZ7XoX67JxXB2BV00njiv5e6f6HENO9O67Km2Gc3cEzwnXnz2EMLB6
N4d6PFAowQ7B424X3Lek1F3rhVkXRpVnae0gAYLOsDEwNJG5lhG6l2xNhQUXQnr/
KwuYaiJgcPlQmUaSV8GdD/9fo0BvuXOSiOnAMPVQY+R8N45svYGkIksAFNAVJuJg
UySUYNguheMFZOuUqJ/7rOgu+IYMOrmEv2FBs0ctLOaBVpSO/SLnI2mtfQiy05pv
p7EGUd53oamwjlibANXxn66wOjlsAMPeRPzt4yZAuPcP
-----END CERTIFICATE-----
Generated at Thu Dec 8 05:35:01 2022 by rpki-client.