Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.cer (raw, json)
Hash identifier:          j44MC6w1yMiXhOgx8SvyZFVI2H2euCINWpyDIFi1dtA=
Subject key identifier:   45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01931B83224776481DB4E6CC9BE06AC6BE01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 13:56:39 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 201746
                          IP: 178.236.125.0/24
                          IP: 185.49.168.0/22
                          IP: 185.70.139.0/24
                          IP: 193.5.150.0/24
                          IP: 217.61.224.0/22
                          IP: 2a01:9f20::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1b:83:22:47:76:48:1d:b4:e6:cc:9b:e0:6a:c6:be:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 11 13:56:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:82:e3:c5:9c:df:a5:2d:04:8a:95:6c:81:
                    c3:44:cc:4a:21:f9:86:b6:f3:5e:c3:73:0e:a4:6a:
                    44:3e:c5:ae:5c:f6:df:c2:f2:05:f8:2c:31:c7:37:
                    83:78:82:23:09:52:51:a2:d3:79:9c:5f:53:5a:74:
                    60:6b:4c:52:ff:d8:c6:35:a8:ab:6a:19:ff:a5:95:
                    2c:98:04:9f:a4:93:75:db:b7:e1:b8:1c:6b:9b:6b:
                    b2:2b:b9:02:95:c6:ac:a8:d5:4d:b0:f3:a3:30:18:
                    a2:bf:05:05:1d:a7:49:18:4e:b0:f2:07:89:3d:c0:
                    a0:e6:8b:e8:7a:14:3b:74:80:c1:eb:f4:1b:02:11:
                    1c:6b:aa:41:f3:2c:c9:80:73:c9:84:7c:8b:27:bb:
                    59:d1:71:a8:f9:db:bb:98:fd:92:25:4a:61:48:63:
                    c5:f2:ed:7f:01:7c:f4:02:ca:80:48:14:73:48:9c:
                    de:cf:64:97:5f:48:cf:55:8f:b6:99:1b:18:76:4d:
                    c5:de:d4:df:f7:9b:68:ed:da:77:b7:b2:91:e1:fc:
                    7b:65:94:06:cb:cd:cc:5b:d3:c5:07:bd:14:07:70:
                    07:b1:fb:68:84:27:e2:f7:dc:0f:5c:39:4d:29:90:
                    49:f8:5d:07:62:5f:f1:96:83:2b:6a:ba:32:52:b6:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.125.0/24
                  185.49.168.0/22
                  185.70.139.0/24
                  193.5.150.0/24
                  217.61.224.0/22
                IPv6:
                  2a01:9f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201746

    Signature Algorithm: sha256WithRSAEncryption
         17:35:2f:49:5d:32:1e:78:38:29:33:d3:1f:e1:f1:4c:eb:3f:
         fd:de:a2:c4:85:b3:11:35:34:af:f2:d1:ea:f3:cf:47:96:72:
         2e:62:3e:d0:82:4f:07:a1:fa:05:57:8e:f3:01:7a:9c:9b:0d:
         5d:73:6f:74:ba:71:58:6a:ec:34:fa:e0:ba:22:3c:85:2d:e3:
         0e:5e:5a:7d:9f:b2:b4:f8:fe:14:4d:5b:bf:cc:82:4d:36:26:
         66:2a:82:1f:a7:ac:e7:04:74:84:8c:f6:86:39:08:42:17:41:
         79:9f:52:67:fd:04:19:2d:87:97:e0:55:7f:fa:d3:37:31:ca:
         ca:40:a0:51:8b:f8:fc:14:f6:99:70:37:c2:f6:08:49:e4:5f:
         fe:f6:75:40:b0:4c:09:5d:db:8e:16:b0:14:91:ee:84:fd:fd:
         d6:05:a0:ed:ba:1e:ca:94:68:99:f2:fc:97:99:94:09:33:99:
         5f:d6:33:01:44:ed:5e:92:6d:00:46:6a:b8:84:39:c6:c3:4a:
         4e:ca:db:02:f8:3c:e5:2a:fb:c0:1a:cc:70:11:4d:f0:3f:64:
         f1:20:0c:23:49:89:43:8b:62:ee:42:87:25:25:a6:0d:1e:5c:
         af:bd:d8:c3:44:27:4b:7f:2a:bb:01:66:e1:c7:96:1b:2b:fc:
         b5:b7:c2:d2
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZMbgyJHdkgdtObMm+Bqxr4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTExMTM1NjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTQwZGFhNGMyNDVhNDcyNWYzODA0MTQwMmI2YmZmZGVkMTVlYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0OC48Wc36UtBIqVbIHDRMxKIfmG
tvNew3MOpGpEPsWuXPbfwvIF+CwxxzeDeIIjCVJRotN5nF9TWnRga0xS/9jGNair
ahn/pZUsmASfpJN127fhuBxrm2uyK7kClcasqNVNsPOjMBiivwUFHadJGE6w8geJ
PcCg5ovoehQ7dIDB6/QbAhEca6pB8yzJgHPJhHyLJ7tZ0XGo+du7mP2SJUphSGPF
8u1/AXz0AsqASBRzSJzez2SXX0jPVY+2mRsYdk3F3tTf95to7dp3t7KR4fx7ZZQG
y83MW9PFB70UB3AHsftohCfi99wPXDlNKZBJ+F0HYl/xloMraroyUrbwbwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFEVA2qTCRaRyXzgEFAK2v/3tFep4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2MwYmE2
Zi1kZjZmLTQxNDgtOGZjYS1kMjVhYWE4MDQxNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYzBiYTZm
LWRmNmYtNDE0OC04ZmNhLWQyNWFhYTgwNDE0NS8xL1JVRGFwTUpGcEhKZk9BUVVB
cmFfX2UwVjZuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQAsux9AwQCuTGoAwQAuUaLAwQAwQWWAwQC2T3g
MA0EAgACMAcDBQAqAZ8gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMUEjANBgkq
hkiG9w0BAQsFAAOCAQEAFzUvSV0yHng4KTPTH+HxTOs//d6ixIWzETU0r/LR6vPP
R5ZyLmI+0IJPB6H6BVeO8wF6nJsNXXNvdLpxWGrsNPrguiI8hS3jDl5afZ+ytPj+
FE1bv8yCTTYmZiqCH6es5wR0hIz2hjkIQhdBeZ9SZ/0EGS2Hl+BVf/rTNzHKykCg
UYv4/BT2mXA3wvYISeRf/vZ1QLBMCV3bjhawFJHuhP391gWg7boeypRomfL8l5mU
CTOZX9YzAUTtXpJtAEZquIQ5xsNKTsrbAvg85Sr7wBrMcBFN8D9k8SAMI0mJQ4ti
7kKHJSWmDR5cr73Yw0QnS38quwFm4ceWGyv8tbfC0g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:31:42 2024 by rpki-client on console-fra.rpki-client.org