Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer (raw, json)
Hash identifier:          zC4JybUut4X+4Ink2rp4Z0y6/cFUrmN1kyU2Ic+82KU=
Subject key identifier:   53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B725AB20D7B0DCB7A5B8BA379AC111
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:30:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 205842
                          AS: 207096
                          IP: 185.166.40.0/22
                          IP: 185.176.204.0/22
                          IP: 185.202.72.0/22
                          IP: 185.239.188.0/22
                          IP: 2a0a:7600::/29
                          IP: 2a0a:d2c0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:25:ab:20:d7:b0:dc:b7:a5:b8:ba:37:9a:c1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:30:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:06:62:c5:7a:77:cf:1d:63:0f:06:82:86:
                    53:3d:dd:46:3c:61:f3:8b:8e:4d:86:16:f1:07:73:
                    d3:91:aa:53:f2:2e:61:4b:4f:61:23:3f:7a:fe:4b:
                    af:3c:54:43:f2:c3:e8:47:7c:8b:2e:99:c3:de:e9:
                    cb:4a:10:b4:6e:dd:43:6b:00:c5:3e:0d:bb:63:72:
                    e8:a5:6b:de:0a:38:a5:23:a1:e1:78:c9:bc:82:5b:
                    7d:d7:63:52:d4:1f:7e:f0:b6:11:bb:e1:89:43:32:
                    b7:5b:37:cc:e1:50:80:bd:82:5a:72:65:c5:d1:80:
                    8c:d3:a0:34:44:2b:72:7a:39:fe:d8:f6:36:23:3b:
                    7a:df:4f:e6:cf:87:35:d7:b2:17:ed:bb:82:35:f6:
                    8a:6e:4e:88:55:ea:73:0a:07:6a:40:73:bc:5a:62:
                    66:75:89:c3:6a:ff:f7:03:50:2a:9c:78:42:59:31:
                    9a:ac:d1:d7:7b:c9:95:0a:be:de:ff:7e:33:20:55:
                    a6:37:35:e6:a4:a2:18:ac:e7:3b:73:9d:5f:91:6d:
                    b4:4d:0b:a2:8f:77:60:3b:51:e1:9e:13:5a:96:0e:
                    36:73:96:3b:fb:b9:45:d7:be:4c:c4:56:c2:dd:2e:
                    36:fe:fb:3f:c4:89:b4:d4:49:75:7c:a9:cd:25:a1:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.40.0/22
                  185.176.204.0/22
                  185.202.72.0/22
                  185.239.188.0/22
                IPv6:
                  2a0a:7600::/29
                  2a0a:d2c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205842
                  207096

    Signature Algorithm: sha256WithRSAEncryption
         55:0c:84:9b:db:8f:69:6f:bb:0d:c6:f7:80:ab:81:43:ed:4b:
         af:a1:31:6f:3d:12:00:48:ce:b3:71:c3:3b:34:c2:8a:42:06:
         01:89:8b:8e:69:b8:1a:e2:2a:fc:c4:a1:e4:6a:fe:f3:1b:27:
         1a:96:63:56:fc:67:60:7b:34:1b:3a:2e:c3:25:7b:4f:4d:26:
         43:64:e3:16:fa:81:56:f0:d1:0a:0f:89:37:0d:2f:5a:1c:3f:
         a1:ef:a5:20:20:17:ed:9b:00:ce:aa:91:57:3c:61:cf:fe:f7:
         37:5f:99:f5:c0:a2:09:95:e2:a2:9b:3b:71:3f:db:b3:aa:07:
         73:70:b4:f6:49:72:ae:58:bc:ba:7c:7c:41:f7:27:01:c0:ce:
         a8:13:d7:c0:e5:64:4c:86:da:e2:73:2d:58:4f:b8:9f:45:9e:
         06:a0:a6:18:c5:7c:59:06:c5:40:65:76:9b:41:6e:ab:ee:4c:
         f7:cb:78:df:49:6a:8a:e5:35:80:41:ae:0d:35:71:72:c6:81:
         61:78:d4:15:92:36:55:1c:e3:b4:19:ef:f3:b6:8a:28:2b:ab:
         22:f8:88:02:4d:90:05:52:a1:29:bf:f5:20:c8:a9:2d:98:fe:
         a8:5a:fb:aa:5c:a0:06:45:e0:35:ec:87:77:b8:f1:af:47:95:
         9c:4b:4d:f3
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYzDtyWrINew3LeluLo3msERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2QwMzU5ZjlmOGIyMDgxNWNlNGQ5ODhlMTA5YmY4MjMwNmU0Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlooGYsV6d88dYw8GgoZTPd1GPGHz
i45NhhbxB3PTkapT8i5hS09hIz96/kuvPFRD8sPoR3yLLpnD3unLShC0bt1DawDF
Pg27Y3LopWveCjilI6HheMm8glt912NS1B9+8LYRu+GJQzK3WzfM4VCAvYJacmXF
0YCM06A0RCtyejn+2PY2Izt630/mz4c117IX7buCNfaKbk6IVepzCgdqQHO8WmJm
dYnDav/3A1AqnHhCWTGarNHXe8mVCr7e/34zIFWmNzXmpKIYrOc7c51fkW20TQui
j3dgO1HhnhNalg42c5Y7+7lF175MxFbC3S42/vs/xIm01El1fKnNJaFPBwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzQ5MzU3
MS0yMTBlLTRkMWEtODgxOS1hNmM0OWNlOTA3NTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDkzNTcx
LTIxMGUtNGQxYS04ODE5LWE2YzQ5Y2U5MDc1Ni8xL1U5QTFuNS1MSUlGYzVObUk0
UW1fZ2pCdVRIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF
BwEHAQH/BDgwNjAeBAIAATAYAwQCuaYoAwQCubDMAwQCucpIAwQCue+8MBQEAgAC
MA4DBQMqCnYAAwUDKgrSwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDJBICAwMo
+DANBgkqhkiG9w0BAQsFAAOCAQEAVQyEm9uPaW+7Dcb3gKuBQ+1Lr6Exbz0SAEjO
s3HDOzTCikIGAYmLjmm4GuIq/MSh5Gr+8xsnGpZjVvxnYHs0GzouwyV7T00mQ2Tj
FvqBVvDRCg+JNw0vWhw/oe+lICAX7ZsAzqqRVzxhz/73N1+Z9cCiCZXiops7cT/b
s6oHc3C09klyrli8unx8QfcnAcDOqBPXwOVkTIba4nMtWE+4n0WeBqCmGMV8WQbF
QGV2m0Fuq+5M98t430lqiuU1gEGuDTVxcsaBYXjUFZI2VRzjtBnv87aKKCurIviI
Ak2QBVKhKb/1IMipLZj+qFr7qlygBkXgNeyHd7jxr0eVnEtN8w==
-----END CERTIFICATE-----
Generated at Fri May 3 03:01:31 2024 by rpki-client on console-fra.rpki-client.org