Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPOJHHUo4cntCLLL49w2B6-zekw.cer
File:                     NPOJHHUo4cntCLLL49w2B6-zekw.cer (download)
Hash identifier:          SdBK8XwbL90jT/E6+fKs15P2++40m7u/0vhXO8uDtHA=
Subject key identifier:   34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B63454C8C9E6F50E4F6597B579530DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/NPOJHHUo4cntCLLL49w2B6-zekw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 185.218.186.0/24
    2: IP: 2a11:a480::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:45:4c:8c:9e:6f:50:e4:f6:59:7b:57:95:30:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34f3891c7528e1c9ed08b2cbe3dc3607afb37a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:36:7c:56:b2:65:b1:3a:44:cf:01:4a:a9:
                    71:bb:5a:bb:ce:b3:98:5c:7d:2e:1e:ec:2c:0c:36:
                    03:85:e3:7b:1b:f5:ba:43:48:52:1a:b4:71:8b:81:
                    fb:a1:4f:a0:e2:42:2f:0c:81:c5:7a:f3:a6:ae:c3:
                    21:28:40:35:bb:3a:d7:16:f5:8b:c9:74:98:47:7b:
                    1e:db:9d:7e:09:ca:93:1a:0e:e7:5d:5d:c1:fb:c3:
                    0b:bf:c0:b1:f1:0c:47:44:fc:ae:8c:f2:50:b5:43:
                    c5:10:d4:de:9d:b1:43:64:cd:98:f9:5c:a4:8b:17:
                    e5:09:58:ea:9a:26:3c:ec:04:52:40:53:93:dc:a2:
                    fe:92:4c:87:e9:71:74:b6:bb:8e:90:59:5f:33:02:
                    77:89:be:96:c6:d2:dc:48:60:db:01:b6:8e:71:92:
                    8c:b0:a3:f3:1b:a7:48:60:e1:18:2e:aa:2a:5c:4c:
                    1a:83:ac:3c:27:25:8b:e5:57:8b:9e:4e:c5:ee:55:
                    57:29:d6:1c:12:59:ab:54:05:bd:b7:5b:e2:4e:ef:
                    33:b8:0d:fb:2b:94:4f:fc:47:75:08:24:89:c4:c3:
                    c5:79:8f:0f:4c:0c:3a:af:9c:ae:66:df:73:0e:5e:
                    71:2d:56:99:63:81:4d:57:66:cf:67:87:15:ba:32:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/NPOJHHUo4cntCLLL49w2B6-zekw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.186.0/24
                IPv6:
                  2a11:a480::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:77:d2:b0:64:5d:b0:35:f9:21:41:5b:90:5c:41:9a:b4:8b:
         8d:a0:af:86:d5:32:f9:c8:8b:a1:1b:ce:f4:64:da:aa:9e:36:
         ae:de:3d:8a:7d:23:c4:a9:51:89:86:6a:99:15:f7:53:8d:5f:
         b0:d8:87:b2:1b:34:f8:1e:7a:38:38:de:65:d7:b4:8c:ec:02:
         c9:7a:15:ad:a4:b0:0f:8d:3e:5b:8c:ad:bd:ed:61:d7:9d:34:
         8e:db:6a:e6:bb:f7:d6:4a:24:bd:1c:16:fc:77:c1:16:7b:cd:
         05:2e:50:8e:eb:0d:d0:3b:d2:3d:df:a0:65:aa:a6:12:cb:da:
         d8:0d:f9:db:d2:06:4a:f6:f7:0c:58:5e:ee:ad:d5:30:ec:da:
         55:26:7c:49:cd:9a:7d:06:d7:69:81:50:8c:de:69:d6:8e:3b:
         84:cd:d0:04:00:f1:09:3a:58:40:92:73:16:95:d4:7e:c1:33:
         4f:af:3c:ac:81:00:fc:db:1f:e3:c3:9a:88:23:6e:f1:72:cd:
         09:a6:0d:36:b7:e4:05:f1:5d:a0:07:9e:63:6f:f2:7b:23:5b:
         69:a7:4d:db:44:8d:be:38:59:f7:7c:25:2e:f1:b4:b2:cd:3f:
         81:f3:68:fb:2e:ea:3f:1c:e5:f5:65:45:1d:c6:d9:08:b9:71:
         13:12:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 6 18:00:23 2023 by rpki-client.