Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
File:                     S82iMJZ8_y7eIXfy0zKvCst-ULw.cer (raw, json)
Hash identifier:          Z4e8wR7zQe43lYAXyaDAYGpr3mJI+Fqpsx4itYwEjxw=
Subject key identifier:   4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F392090B6A065BCA7554B9D3890E2A879
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 May 2024 11:46:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202293
                          IP: 88.151.118.0/24
                          IP: 91.229.148.0/22
                          IP: 195.245.96.0/22
                          IP: 2a04:5140::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:20:90:b6:a0:65:bc:a7:55:4b:9d:38:90:e2:a8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  2 11:46:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:c0:f6:9c:86:37:0f:c4:2b:3b:0c:b5:1b:
                    f6:d4:03:93:2a:25:3f:c0:e0:7f:cb:c4:af:9c:5f:
                    c0:ca:f5:fd:80:de:78:73:37:47:c6:f6:25:7f:42:
                    63:6b:d6:bd:15:99:92:23:2c:ba:d4:13:53:ba:f2:
                    82:4d:e9:ad:f5:8d:c8:af:90:57:45:6f:74:74:00:
                    af:11:a3:42:7b:9e:b3:29:0b:dd:f4:40:1b:89:25:
                    e9:7c:39:d4:1c:3d:18:dd:91:ea:4c:33:30:d2:17:
                    a0:7a:be:99:fe:7d:ce:79:1e:72:7f:fe:2b:9a:cf:
                    35:5b:94:a5:e5:76:3b:3c:25:29:84:b6:33:bc:b1:
                    65:cf:5c:3b:88:92:55:9f:20:88:cd:38:dc:dc:3e:
                    c9:f1:e8:4f:11:69:62:57:e4:24:bb:f8:a7:dd:be:
                    86:b3:ee:a3:44:17:c9:4a:37:08:3e:77:29:5c:03:
                    99:c7:47:bf:a9:31:69:59:80:c5:b7:78:24:35:5e:
                    e0:eb:96:ab:1b:f3:4d:1e:8a:6e:15:90:99:e5:1f:
                    fe:52:35:ed:af:f2:7d:d3:d2:9c:28:13:87:10:fd:
                    88:e4:00:7b:58:8a:5c:04:e5:43:88:4d:35:88:a2:
                    de:8e:7f:53:c1:3e:06:1b:f2:46:1b:d2:ab:64:ea:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.118.0/24
                  91.229.148.0/22
                  195.245.96.0/22
                IPv6:
                  2a04:5140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202293

    Signature Algorithm: sha256WithRSAEncryption
         56:be:a0:b7:e2:f7:07:5c:bf:2e:28:6e:e3:cc:dc:73:01:34:
         f9:af:15:58:1b:84:21:5e:29:42:ec:11:24:85:61:ab:58:39:
         17:72:4e:af:95:de:86:cd:9e:53:65:25:81:a2:a3:aa:fa:3d:
         9a:03:81:90:97:40:23:ae:a1:02:c2:99:c4:fd:ef:7a:37:5d:
         b0:9a:43:40:01:aa:73:17:49:18:bf:0a:3a:9d:3a:3e:d1:20:
         ca:ea:bc:d6:d6:f9:b1:d7:8f:b2:5c:33:95:d1:ed:c3:18:77:
         c1:92:04:90:9b:b9:8c:5f:68:87:2d:bf:58:89:ad:5e:4f:a3:
         84:aa:7b:82:9e:ac:2a:5a:a0:38:d7:b8:fc:44:7e:40:c2:df:
         e1:02:eb:2b:d0:10:db:51:03:6b:54:27:be:49:eb:92:1e:c7:
         e8:d7:ca:ea:ef:22:41:1c:76:4b:0a:74:3b:41:96:1e:0f:cf:
         3f:f8:4c:48:8d:25:ad:96:15:4a:bd:39:63:54:2b:b8:08:09:
         84:72:03:e3:b5:c0:5e:b6:c7:66:72:72:0b:2e:bc:be:7b:65:
         f0:30:75:71:7b:9d:68:b4:bd:9c:c5:6e:7e:a5:d8:bf:69:78:
         10:7c:74:85:09:96:07:97:0c:8b:1e:3e:a7:84:ac:30:3c:9a:
         aa:d6:ba:df
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAY85IJC2oGW8p1VLnTiQ4qh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTAyMTE0NjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmNkYTIzMDk2N2NmZjJlZGUyMTc3ZjJkMzMyYWYwYWNiN2U1MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDzA9pyGNw/EKzsMtRv21AOTKiU/
wOB/y8SvnF/AyvX9gN54czdHxvYlf0Jja9a9FZmSIyy61BNTuvKCTemt9Y3Ir5BX
RW90dACvEaNCe56zKQvd9EAbiSXpfDnUHD0Y3ZHqTDMw0heger6Z/n3OeR5yf/4r
ms81W5Sl5XY7PCUphLYzvLFlz1w7iJJVnyCIzTjc3D7J8ehPEWliV+Qku/in3b6G
s+6jRBfJSjcIPncpXAOZx0e/qTFpWYDFt3gkNV7g65arG/NNHopuFZCZ5R/+UjXt
r/J909KcKBOHEP2I5AB7WIpcBOVDiE01iKLejn9TwT4GG/JGG9KrZOrtowIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFEvNojCWfP8u3iF38tMyrwrLflC8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzRlNTU3
Mi1hODRhLTRjOWYtOWNiMS1mZTBhMWQwMGIyMDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNGU1NTcy
LWE4NGEtNGM5Zi05Y2IxLWZlMGExZDAwYjIwOS8xL1M4MmlNSlo4X3k3ZUlYZnkw
ekt2Q3N0LVVMdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQAWJd2AwQCW+WUAwQCw/VgMA0EAgACMAcDBQMq
BFFAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWNTANBgkqhkiG9w0BAQsFAAOC
AQEAVr6gt+L3B1y/Lihu48zccwE0+a8VWBuEIV4pQuwRJIVhq1g5F3JOr5Xehs2e
U2UlgaKjqvo9mgOBkJdAI66hAsKZxP3vejddsJpDQAGqcxdJGL8KOp06PtEgyuq8
1tb5sdePslwzldHtwxh3wZIEkJu5jF9ohy2/WImtXk+jhKp7gp6sKlqgONe4/ER+
QMLf4QLrK9AQ21EDa1Qnvknrkh7H6NfK6u8iQRx2Swp0O0GWHg/PP/hMSI0lrZYV
Sr05Y1QruAgJhHID47XAXrbHZnJyCy68vntl8DB1cXudaLS9nMVufqXYv2l4EHx0
hQmWB5cMix4+p4SsMDyaqta63w==
-----END CERTIFICATE-----
Generated at Fri May 3 13:44:15 2024 by rpki-client on console-ams.rpki-client.org