Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
File:                     V3eYDohsKfAGDDoHO25oGopwV0s.cer (raw, json)
Hash identifier:          7kIZzd4TGW7XALyY+qNSyGyL8WiVpQM7Slyu9LACF2A=
Subject key identifier:   57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190B67E59C62C2956FB248D443DF8DF7044
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 13:04:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215589
                          AS: 216311
                          IP: 2001:67c:f04::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b6:7e:59:c6:2c:29:56:fb:24:8d:44:3d:f8:df:70:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 15 13:04:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5777980e886c29f0060c3a073b6e681a8a70574b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:da:ff:4b:08:bc:db:68:64:65:dc:bd:72:
                    7d:1e:ce:e0:30:c9:0e:cc:ac:ae:03:c4:d4:84:59:
                    8d:32:70:4a:20:b2:8b:5a:ce:39:70:d1:fa:12:7b:
                    8d:e8:89:49:39:0c:8b:45:31:a3:eb:f0:72:fb:56:
                    d6:34:27:72:7d:39:84:17:e1:64:aa:b5:e4:47:88:
                    6c:bf:95:fd:a0:1f:dd:6c:3c:82:81:7e:f7:91:1b:
                    1d:e4:79:43:f2:a6:03:a7:35:d0:5b:ab:bb:70:7d:
                    c3:10:10:6a:ea:7e:c6:a3:e4:7a:fe:3b:ba:e4:b1:
                    a8:75:71:27:ed:d3:9a:07:21:49:28:06:7a:4a:f7:
                    af:e7:ad:bb:c0:1f:2a:2b:34:2a:5c:f2:22:3c:7b:
                    66:13:23:88:cc:a9:9b:0b:ac:3c:19:44:ab:01:b2:
                    09:49:9c:97:58:98:a6:96:e2:20:40:fd:ea:d0:44:
                    d6:5f:d2:36:04:00:aa:22:8d:7e:9a:5c:61:8f:65:
                    a2:e2:bf:e6:66:fd:eb:26:c2:58:84:0a:58:92:77:
                    f0:f7:c7:91:a2:55:67:9d:f1:8f:c8:40:80:34:9c:
                    e7:70:cd:24:a0:d7:b4:37:2e:9a:4f:81:05:22:fe:
                    fa:2e:6f:9c:8e:ee:a6:21:7d:fe:a7:53:3f:5d:09:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f04::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215589
                  216311

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:3b:80:d4:6c:0e:c1:9f:3b:53:25:77:76:51:fb:a3:dd:
         09:0c:fb:0e:51:97:06:ca:2f:b7:26:1a:5a:2c:28:2f:6d:cb:
         2f:1f:56:ac:ff:9b:ef:62:a5:09:91:b4:f6:b1:2b:84:36:83:
         0d:c2:92:20:0c:61:8c:c2:1d:11:7e:9b:65:f5:e0:db:a7:5a:
         8c:3d:b2:55:31:93:04:0d:a3:c7:b1:4d:99:2f:a3:bb:f1:12:
         82:24:64:a8:8c:67:23:6c:49:70:64:b2:b0:78:31:50:79:ee:
         f1:b6:1a:12:11:e5:4c:b5:c4:19:bb:b2:df:3b:df:fa:b5:80:
         8c:e9:95:99:47:bf:68:94:ff:98:9a:d3:92:f4:a3:f4:d9:ee:
         9c:1c:90:2a:72:9c:d6:14:50:cd:f4:d5:ce:e5:24:c1:43:46:
         da:12:07:30:11:55:48:7f:58:3d:b7:d1:83:fe:fc:0c:97:ac:
         8c:94:e0:6f:0f:1b:e5:3b:94:b3:b2:cf:8b:63:18:78:d3:96:
         f8:b7:8f:b6:4f:28:1e:f3:b9:7f:ff:41:e1:7b:07:0e:f7:8e:
         b3:ec:24:f8:68:89:26:c6:f7:71:9d:41:6b:4d:e1:c0:ba:60:
         8b:60:9c:8d:9f:df:0e:7e:5b:5f:18:94:3b:6b:ba:76:b2:be:
         ec:d8:3a:66
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAZC2flnGLClW+ySNRD3433BEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzE1MTMwNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzc3OTgwZTg4NmMyOWYwMDYwYzNhMDczYjZlNjgxYThhNzA1NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S7a/0sIvNtoZGXcvXJ9Hs7gMMkO
zKyuA8TUhFmNMnBKILKLWs45cNH6EnuN6IlJOQyLRTGj6/By+1bWNCdyfTmEF+Fk
qrXkR4hsv5X9oB/dbDyCgX73kRsd5HlD8qYDpzXQW6u7cH3DEBBq6n7Go+R6/ju6
5LGodXEn7dOaByFJKAZ6Svev5627wB8qKzQqXPIiPHtmEyOIzKmbC6w8GUSrAbIJ
SZyXWJimluIgQP3q0ETWX9I2BACqIo1+mlxhj2Wi4r/mZv3rJsJYhApYknfw98eR
olVnnfGPyECANJzncM0koNe0Ny6aT4EFIv76Lm+cju6mIX3+p1M/XQmH7wIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFFd3mA6IbCnwBgw6BztuaBqKcFdLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0
MDFjLTdmNDEtNGE2Yi05NDM0LWNjODBkY2EwOTNlNi8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGM3
MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5M2U2LzEvNTc3Nzk4MEU4ODZD
MjlGMDA2MEMzQTA3M0I2RTY4MUE4QTcwNTc0Qi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACABBnwPBDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDSiUCAwNM9zANBgkqhkiG
9w0BAQsFAAOCAQEAgHo7gNRsDsGfO1Mld3ZR+6PdCQz7DlGXBsovtyYaWiwoL23L
Lx9WrP+b72KlCZG09rErhDaDDcKSIAxhjMIdEX6bZfXg26dajD2yVTGTBA2jx7FN
mS+ju/ESgiRkqIxnI2xJcGSysHgxUHnu8bYaEhHlTLXEGbuy3zvf+rWAjOmVmUe/
aJT/mJrTkvSj9NnunByQKnKc1hRQzfTVzuUkwUNG2hIHMBFVSH9YPbfRg/78DJes
jJTgbw8b5TuUs7LPi2MYeNOW+LePtk8oHvO5f/9B4XsHDveOs+wk+GiJJsb3cZ1B
a03hwLpgi2CcjZ/fDn5bXxiUO2u6drK+7Ng6Zg==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:02:58 2024 by rpki-client on console-fra.rpki-client.org