Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.cer (raw, json)
Hash identifier:          yvYQlUWhDdkX0XC9+VpjzAU6LucohEoFoD2V71JSe9c=
Subject key identifier:   45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC50021D46972216FCD2D02BD924779C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 201746
                          IP: 178.236.125.0/24
                          IP: 185.49.168.0/22
                          IP: 217.61.224.0/22
                          IP: 2a01:9f20::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:21:d4:69:72:21:6f:cd:2d:02:bd:92:47:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:82:e3:c5:9c:df:a5:2d:04:8a:95:6c:81:
                    c3:44:cc:4a:21:f9:86:b6:f3:5e:c3:73:0e:a4:6a:
                    44:3e:c5:ae:5c:f6:df:c2:f2:05:f8:2c:31:c7:37:
                    83:78:82:23:09:52:51:a2:d3:79:9c:5f:53:5a:74:
                    60:6b:4c:52:ff:d8:c6:35:a8:ab:6a:19:ff:a5:95:
                    2c:98:04:9f:a4:93:75:db:b7:e1:b8:1c:6b:9b:6b:
                    b2:2b:b9:02:95:c6:ac:a8:d5:4d:b0:f3:a3:30:18:
                    a2:bf:05:05:1d:a7:49:18:4e:b0:f2:07:89:3d:c0:
                    a0:e6:8b:e8:7a:14:3b:74:80:c1:eb:f4:1b:02:11:
                    1c:6b:aa:41:f3:2c:c9:80:73:c9:84:7c:8b:27:bb:
                    59:d1:71:a8:f9:db:bb:98:fd:92:25:4a:61:48:63:
                    c5:f2:ed:7f:01:7c:f4:02:ca:80:48:14:73:48:9c:
                    de:cf:64:97:5f:48:cf:55:8f:b6:99:1b:18:76:4d:
                    c5:de:d4:df:f7:9b:68:ed:da:77:b7:b2:91:e1:fc:
                    7b:65:94:06:cb:cd:cc:5b:d3:c5:07:bd:14:07:70:
                    07:b1:fb:68:84:27:e2:f7:dc:0f:5c:39:4d:29:90:
                    49:f8:5d:07:62:5f:f1:96:83:2b:6a:ba:32:52:b6:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.125.0/24
                  185.49.168.0/22
                  217.61.224.0/22
                IPv6:
                  2a01:9f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201746

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:21:1c:a2:66:96:46:a1:86:18:1d:c3:9d:62:da:20:f4:
         a6:cf:d1:de:07:61:c7:da:12:dc:67:be:36:49:d9:31:1c:31:
         aa:52:f1:39:c9:18:d2:dc:c2:98:92:66:15:4a:4e:ec:e8:e1:
         12:76:55:fd:ed:7f:2a:02:cd:54:85:9b:9c:08:cc:3f:29:38:
         82:1b:a4:65:64:70:ad:f3:fc:d7:5f:3e:e1:4f:6e:38:2e:ad:
         c3:6d:bb:8f:2f:8e:d7:09:4b:20:af:ef:18:51:45:c1:1c:d2:
         9c:c4:d5:91:35:32:38:38:70:a7:dc:45:46:10:ba:f1:cf:31:
         b7:a8:20:63:6b:3f:cc:64:06:ac:6d:ff:1e:c6:6e:e2:ae:67:
         37:4a:45:02:ef:57:c6:f4:d9:cb:f3:ea:69:be:8f:21:9f:11:
         eb:f4:67:ab:cb:81:8b:67:7c:16:ea:19:34:27:77:39:4e:26:
         c6:c1:99:6e:b4:e5:b0:e7:18:ab:0c:d3:e6:1e:21:06:7c:77:
         66:84:fa:86:8f:11:5e:6e:62:c0:2e:09:5e:ef:a9:f8:a4:9d:
         80:7e:61:b6:dc:85:52:5b:60:6d:fb:08:bb:64:a8:e1:b3:c3:
         07:05:a3:a6:08:ed:d7:43:8b:97:aa:fc:c6:6a:50:9d:ec:ea:
         de:db:eb:f4
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYzFACHUaXIhb80tAr2SR3nDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTQwZGFhNGMyNDVhNDcyNWYzODA0MTQwMmI2YmZmZGVkMTVlYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0OC48Wc36UtBIqVbIHDRMxKIfmG
tvNew3MOpGpEPsWuXPbfwvIF+CwxxzeDeIIjCVJRotN5nF9TWnRga0xS/9jGNair
ahn/pZUsmASfpJN127fhuBxrm2uyK7kClcasqNVNsPOjMBiivwUFHadJGE6w8geJ
PcCg5ovoehQ7dIDB6/QbAhEca6pB8yzJgHPJhHyLJ7tZ0XGo+du7mP2SJUphSGPF
8u1/AXz0AsqASBRzSJzez2SXX0jPVY+2mRsYdk3F3tTf95to7dp3t7KR4fx7ZZQG
y83MW9PFB70UB3AHsftohCfi99wPXDlNKZBJ+F0HYl/xloMraroyUrbwbwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFEVA2qTCRaRyXzgEFAK2v/3tFep4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2MwYmE2
Zi1kZjZmLTQxNDgtOGZjYS1kMjVhYWE4MDQxNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYzBiYTZm
LWRmNmYtNDE0OC04ZmNhLWQyNWFhYTgwNDE0NS8xL1JVRGFwTUpGcEhKZk9BUVVB
cmFfX2UwVjZuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQAsux9AwQCuTGoAwQC2T3gMA0EAgACMAcDBQAq
AZ8gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMUEjANBgkqhkiG9w0BAQsFAAOC
AQEAaSshHKJmlkahhhgdw51i2iD0ps/R3gdhx9oS3Ge+NknZMRwxqlLxOckY0tzC
mJJmFUpO7OjhEnZV/e1/KgLNVIWbnAjMPyk4ghukZWRwrfP8118+4U9uOC6tw227
jy+O1wlLIK/vGFFFwRzSnMTVkTUyODhwp9xFRhC68c8xt6ggY2s/zGQGrG3/HsZu
4q5nN0pFAu9XxvTZy/Pqab6PIZ8R6/Rnq8uBi2d8FuoZNCd3OU4mxsGZbrTlsOcY
qwzT5h4hBnx3ZoT6ho8RXm5iwC4JXu+p+KSdgH5httyFUltgbfsIu2So4bPDBwWj
pgjt10OLl6r8xmpQnezq3tvr9A==
-----END CERTIFICATE-----
Generated at Fri May 3 02:58:58 2024 by rpki-client on console-fra.rpki-client.org