Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
File:                     TE6QpGzZL4_8sZJLk7cdG60xMBI.cer (raw, json)
Hash identifier:          /ZHGfJH3zDZRP04fzwuMfOfonWQuQQnx0e5BA1xjamc=
Subject key identifier:   4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D0C8CDA65F14A677BBD257EA1870F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 43717
                          AS: 51085
                          IP: 91.198.122.0/24
                          IP: 91.216.140.0/24
                          IP: 178.248.192.0/21
                          IP: 2a00:1ff0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:0c:8c:da:65:f1:4a:67:7b:bd:25:7e:a1:87:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:68:b8:0e:55:34:33:de:e9:f4:bc:1c:f6:
                    c6:02:d3:32:06:41:0e:27:b9:a9:e8:53:3f:0a:de:
                    ea:42:8f:02:31:1a:c5:2a:54:30:8b:82:03:8b:81:
                    4e:ca:84:6f:47:97:1f:1f:9b:a6:7b:c2:ec:d6:38:
                    73:d1:24:7f:d4:25:db:cd:55:55:f7:3e:7a:59:90:
                    fa:d7:10:ae:42:07:54:92:7e:cf:e3:5a:6b:43:6f:
                    97:c6:b9:ee:ee:44:c4:7f:32:e7:9a:af:71:66:05:
                    a0:02:c6:48:39:b2:89:bd:38:1f:0a:24:33:e4:f6:
                    63:f0:1b:05:f8:6e:3c:e2:59:68:ca:cf:0a:e9:cb:
                    8e:4d:13:ae:39:1d:e8:e1:b1:53:0d:7d:c8:4f:e6:
                    cf:d7:64:77:9e:dc:6d:56:c2:e6:89:ea:40:e1:87:
                    85:96:cb:7a:ec:c7:59:b7:91:31:2e:67:79:3c:f0:
                    7a:c5:3e:51:7c:0e:38:90:14:d2:2b:11:04:d2:ed:
                    3f:83:75:f1:9e:a5:35:0c:25:9f:02:e9:57:12:05:
                    e6:96:47:d6:e4:c7:bc:fb:61:7c:29:2b:60:a2:b8:
                    fa:2b:82:89:6e:44:fa:69:89:32:29:30:af:5a:c6:
                    0e:0e:4d:76:9b:b0:5d:65:f8:f2:b1:4e:ab:1d:11:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.122.0/24
                  91.216.140.0/24
                  178.248.192.0/21
                IPv6:
                  2a00:1ff0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43717
                  51085

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:67:bd:95:d6:06:69:a5:d0:4f:ac:c3:32:96:bd:51:c2:
         1a:bb:29:1f:c3:38:a5:5c:be:e3:98:7e:6b:5c:bd:f5:a3:a2:
         9e:26:96:19:26:24:25:52:1d:4e:e5:3f:87:c6:49:b9:a2:58:
         35:12:a3:2d:ae:dc:ba:b3:f9:14:32:a9:a2:89:b3:4b:c5:6f:
         aa:1e:92:bf:78:af:48:f2:d7:b3:a7:35:6e:88:63:1e:88:e2:
         76:a6:13:87:ef:90:14:50:08:00:e5:85:d1:4e:09:a5:93:2a:
         f1:07:f8:13:90:ff:40:e7:81:c1:66:62:63:8f:81:5d:df:a4:
         c0:7d:c0:ea:b5:7c:f7:6c:d4:2e:7f:bc:0e:66:ba:56:07:c9:
         10:21:86:6c:d7:a0:e7:08:fd:30:62:63:dc:c5:9e:71:ac:2b:
         db:e9:59:be:ae:4d:1f:fc:d0:48:1a:ed:df:a2:22:a8:54:87:
         30:63:d5:61:a1:fd:5c:84:cb:d8:ea:a7:a0:b6:14:01:66:60:
         3e:3c:20:67:65:30:80:23:91:64:7d:85:c0:83:81:69:38:a6:
         7a:29:b4:f7:86:c2:51:9d:cd:5d:94:68:61:61:ed:47:2e:21:
         1a:bb:c8:c3:f9:b7:01:d1:56:95:14:41:4a:d1:88:4d:a6:3e:
         0e:fb:26:8c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAYzCbQyM2mXxSmd7vSV+oYcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzRlOTBhNDZjZDkyZjhmZmNiMTkyNGI5M2I3MWQxYmFkMzEzMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ddouA5VNDPe6fS8HPbGAtMyBkEO
J7mp6FM/Ct7qQo8CMRrFKlQwi4IDi4FOyoRvR5cfH5ume8Ls1jhz0SR/1CXbzVVV
9z56WZD61xCuQgdUkn7P41prQ2+Xxrnu7kTEfzLnmq9xZgWgAsZIObKJvTgfCiQz
5PZj8BsF+G484lloys8K6cuOTROuOR3o4bFTDX3IT+bP12R3ntxtVsLmiepA4YeF
lst67MdZt5ExLmd5PPB6xT5RfA44kBTSKxEE0u0/g3XxnqU1DCWfAulXEgXmlkfW
5Me8+2F8KStgorj6K4KJbkT6aYkyKTCvWsYODk12m7BdZfjysU6rHRFpJwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFExOkKRs2S+P/LGSS5O3HRutMTASMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2MyN2Vl
Yy03MTQxLTQ1NzUtOWE2Zi1jNDU3MjhjNTZmM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvYzI3ZWVj
LTcxNDEtNDU3NS05YTZmLWM0NTcyOGM1NmYzYi8xL1RFNlFwR3paTDRfOHNaSkxr
N2NkRzYweE1CSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQAW8Z6AwQAW9iMAwQDsvjAMA0EAgACMAcDBQAq
AB/wMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCqxQIDAMeNMA0GCSqGSIb3DQEB
CwUAA4IBAQBHpWe9ldYGaaXQT6zDMpa9UcIauykfwzilXL7jmH5rXL31o6KeJpYZ
JiQlUh1O5T+Hxkm5olg1EqMtrty6s/kUMqmiibNLxW+qHpK/eK9I8tezpzVuiGMe
iOJ2phOH75AUUAgA5YXRTgmlkyrxB/gTkP9A54HBZmJjj4Fd36TAfcDqtXz3bNQu
f7wOZrpWB8kQIYZs16DnCP0wYmPcxZ5xrCvb6Vm+rk0f/NBIGu3foiKoVIcwY9Vh
of1chMvY6qegthQBZmA+PCBnZTCAI5FkfYXAg4FpOKZ6KbT3hsJRnc1dlGhhYe1H
LiEau8jD+bcB0VaVFEFK0YhNpj4O+yaM
-----END CERTIFICATE-----
Generated at Fri May 3 13:18:31 2024 by rpki-client on console-fra.rpki-client.org