Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.cer (download)
Hash identifier:          MwjQgOoFdaOOQJQ4GUOx7tVfjCigeFaSkdJSgMkNa1k=
Subject key identifier:   3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBE647BF297A07D48D312C43228210
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 42821
    2: AS: 213049
    3: IP: 77.90.128.0/18
    4: IP: 185.230.12.0/22
    5: IP: 213.209.128.0/19
    6: IP: 2a04:29c0::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:e6:47:bf:29:7a:07:d4:8d:31:2c:43:22:82:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:68:3f:4e:3e:ec:ef:25:5b:97:e3:e3:2b:
                    c7:b7:d2:06:71:c7:fe:0f:16:ce:80:6f:82:1a:04:
                    a6:ec:b2:36:30:bc:aa:30:f0:cf:bc:90:aa:ae:33:
                    c6:07:76:c8:cc:2e:9e:e3:23:69:5b:ee:40:68:0b:
                    7a:d4:75:99:bb:29:35:1a:2c:c4:e8:ba:f8:d2:f6:
                    9a:61:2f:5c:f7:e6:0d:e1:1e:1f:47:1e:a3:e6:2f:
                    bc:ac:b9:1e:7c:fa:c9:da:cb:9e:ab:9e:1a:fc:e6:
                    35:91:07:44:40:9b:e4:81:05:c5:af:62:bc:f3:44:
                    54:37:e5:19:f0:49:ed:d8:a3:fe:a3:99:aa:10:9a:
                    5a:07:61:b8:84:6d:3e:00:73:bc:fe:07:ee:12:49:
                    61:74:51:17:86:95:d2:9a:46:42:48:55:da:1d:b8:
                    3a:43:ae:d7:a1:bc:1c:ad:61:37:6a:a2:6e:8b:d2:
                    e5:f4:ba:21:74:78:b4:1e:25:2c:a4:97:5a:24:f9:
                    89:61:89:a5:b8:d3:18:47:07:03:ce:27:14:12:4f:
                    12:a9:94:d5:1a:bd:ed:86:07:1d:5a:67:96:ff:7f:
                    0a:1f:15:e1:e7:df:05:85:0f:1f:8a:c2:ae:d6:a5:
                    00:a8:14:58:c6:5f:80:6b:3e:3c:20:aa:18:0f:ee:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.128.0/18
                  185.230.12.0/22
                  213.209.128.0/19
                IPv6:
                  2a04:29c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42821
                  213049

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:34:9d:5d:e9:d0:66:1c:3e:21:14:e4:20:50:77:d0:42:
         b6:b0:6b:46:d5:eb:fa:61:c8:cd:8e:c5:aa:85:f9:46:da:2a:
         b5:fe:c8:ba:41:e0:ca:d1:df:f0:3d:75:e7:6b:17:4f:a3:10:
         e5:43:76:08:f8:80:5c:16:a6:14:a2:d5:e6:02:f3:a0:ae:23:
         04:8f:a6:a0:74:85:3f:08:32:17:db:fc:bd:f8:90:eb:cc:43:
         bd:08:af:d0:e1:e9:d7:4a:c4:1c:bf:2c:cb:d0:4c:e2:4e:bc:
         0a:60:c7:af:16:b1:f2:06:f0:bc:f2:9d:c3:6f:b2:ba:9f:72:
         82:ba:ca:15:59:95:28:6c:1f:6a:ab:5d:e9:89:74:88:7a:0c:
         ea:bd:75:a3:66:09:d2:1c:cc:f5:b2:13:fa:65:fb:02:c2:63:
         3f:b2:ab:40:8d:45:a1:c3:b0:9e:91:1d:25:fb:71:a8:60:b8:
         39:0f:40:18:ad:b0:ba:9c:c1:09:af:90:ad:42:a0:37:25:99:
         9c:49:a5:fc:bb:10:df:a1:bd:d2:7a:09:f0:f0:8f:63:b7:3b:
         c5:06:26:ee:a0:0d:4c:c5:d9:80:fe:8d:07:42:37:45:54:8e:
         19:90:8b:d7:6a:b1:f4:ef:c2:e0:45:4f:ad:38:da:ed:b9:c3:
         7e:31:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 4 03:16:23 2023 by rpki-client.