Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
File:                     VQt8DIuuYQ9-UZwEhaR3O860jas.cer (raw, json)
Hash identifier:          +j20awIEicmJo9IW94wcntV7FAyHV31AWLyBTzUgRCI=
Subject key identifier:   55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC01123052358A1A10605C2DDB807B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:38 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34619
                          IP: 37.148.208.0/21
                          IP: 80.253.240.0/22
                          IP: 85.159.64.0/21
                          IP: 89.19.0.0/19
                          IP: 94.73.128.0/18
                          IP: 185.22.184.0/22
                          IP: 2a02:2020::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:01:12:30:52:35:8a:1a:10:60:5c:2d:db:80:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:bf:1c:d2:dd:d0:a3:59:ba:77:ae:0c:62:
                    93:af:9d:3a:99:d9:9a:b6:0f:f7:f1:cd:fb:4b:5f:
                    e7:77:ee:0f:4c:89:06:b8:4c:7d:e6:3b:2d:69:9a:
                    dc:e8:56:c2:52:1e:4c:ec:9f:75:46:94:00:ec:08:
                    da:09:07:72:bd:82:d4:29:5f:e8:39:2e:5b:38:e6:
                    3b:bc:da:2a:59:8e:d0:26:f1:38:f4:59:92:45:73:
                    5c:2d:0f:54:f1:05:ad:5a:ad:8c:d5:cf:bb:2d:a7:
                    dd:fd:4e:98:b4:4e:41:bf:7d:3e:62:8e:dd:96:fa:
                    e1:ea:ea:1f:52:3a:ed:8a:e5:60:a6:f5:c9:07:5b:
                    be:91:93:dc:08:df:d9:50:40:72:ed:27:8a:bf:0c:
                    bf:74:dc:ec:1f:a8:23:e6:07:2c:2f:97:ba:2d:a8:
                    f2:9f:40:61:b2:32:50:12:7d:8f:1d:ab:de:4f:f9:
                    9a:b0:73:4c:1b:3e:e2:fc:27:c5:5e:91:d5:b1:c1:
                    c6:d7:83:07:f1:6d:a3:08:29:ff:50:78:01:73:50:
                    3c:3c:28:94:72:ff:92:c7:f3:00:af:2d:ff:2a:22:
                    87:73:f3:b9:0f:4c:42:15:09:30:ff:89:b6:4d:1a:
                    55:a5:0f:82:3e:08:9d:0a:2e:87:83:f7:f0:87:7b:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.208.0/21
                  80.253.240.0/22
                  85.159.64.0/21
                  89.19.0.0/19
                  94.73.128.0/18
                  185.22.184.0/22
                IPv6:
                  2a02:2020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34619

    Signature Algorithm: sha256WithRSAEncryption
         40:bb:a7:cd:95:11:34:87:f9:e4:f9:c3:8f:18:a4:43:53:e6:
         fd:1c:b6:f7:6f:ba:74:fe:20:90:8f:19:43:ab:38:1b:28:e2:
         1e:8c:ab:e3:e5:5b:aa:d4:7e:3b:2b:5e:b8:39:dd:93:c5:c0:
         f9:f6:d6:81:10:6d:69:11:3f:52:42:30:93:b9:90:ca:9a:76:
         7a:d1:39:ab:7f:f1:da:fb:7e:8b:ca:07:fa:1f:a3:2d:5e:c9:
         15:96:16:a6:76:25:e6:da:ec:a8:59:0a:16:ed:4a:99:04:a8:
         ab:75:cf:d4:bf:cb:dd:a9:3e:31:3a:a3:f6:59:e2:dc:53:34:
         3f:3b:9e:a8:6c:21:9c:bf:c4:02:bf:cd:0d:92:da:7e:ce:63:
         b3:c5:82:6d:a8:a8:ed:32:22:c1:16:29:91:8c:2f:28:05:64:
         b5:a3:3f:54:1b:35:de:c6:dc:bf:58:c2:05:65:26:87:9d:07:
         5b:8f:ab:29:fd:64:7b:57:19:8a:c1:43:c1:34:79:b0:08:d1:
         b8:f0:a3:d6:42:cf:97:d0:0a:34:53:b6:c8:18:50:9f:a1:30:
         8c:ac:34:48:5e:8e:83:cd:1e:80:ac:fd:bd:23:24:a5:67:02:
         48:9f:f4:8e:6e:bc:69:a3:bb:34:a1:d4:7e:3c:11:22:81:03:
         fc:be:c5:95
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYzF3AESMFI1ihoQYFwt24B7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTBiN2MwYzhiYWU2MTBmN2U1MTljMDQ4NWE0NzczYmNlYjQ4ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTy/HNLd0KNZuneuDGKTr506mdma
tg/38c37S1/nd+4PTIkGuEx95jstaZrc6FbCUh5M7J91RpQA7AjaCQdyvYLUKV/o
OS5bOOY7vNoqWY7QJvE49FmSRXNcLQ9U8QWtWq2M1c+7Lafd/U6YtE5Bv30+Yo7d
lvrh6uofUjrtiuVgpvXJB1u+kZPcCN/ZUEBy7SeKvwy/dNzsH6gj5gcsL5e6Lajy
n0BhsjJQEn2PHaveT/masHNMGz7i/CfFXpHVscHG14MH8W2jCCn/UHgBc1A8PCiU
cv+Sx/MAry3/KiKHc/O5D0xCFQkw/4m2TRpVpQ+CPgidCi6Hg/fwh3tIjwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFFULfAyLrmEPflGcBIWkdzvOtI2rMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2FlZGIw
My1iMDRjLTQyMTItODEzYi1mZjI1YmE1OTkwMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvYWVkYjAz
LWIwNGMtNDIxMi04MTNiLWZmMjViYTU5OTAzMS8xL1ZRdDhESXV1WVE5LVVad0Vo
YVIzTzg2MGphcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQDJZTQAwQCUP3wAwQDVZ9AAwQFWRMAAwQGXkmA
AwQCuRa4MA0EAgACMAcDBQAqAiAgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCH
OzANBgkqhkiG9w0BAQsFAAOCAQEAQLunzZURNIf55PnDjxikQ1Pm/Ry292+6dP4g
kI8ZQ6s4GyjiHoyr4+VbqtR+OyteuDndk8XA+fbWgRBtaRE/UkIwk7mQypp2etE5
q3/x2vt+i8oH+h+jLV7JFZYWpnYl5trsqFkKFu1KmQSoq3XP1L/L3ak+MTqj9lni
3FM0PzueqGwhnL/EAr/NDZLafs5js8WCbaio7TIiwRYpkYwvKAVktaM/VBs13sbc
v1jCBWUmh50HW4+rKf1ke1cZisFDwTR5sAjRuPCj1kLPl9AKNFO2yBhQn6EwjKw0
SF6Og80egKz9vSMkpWcCSJ/0jm68aaO7NKHUfjwRIoED/L7FlQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:02:46 2024 by rpki-client on console-ams.rpki-client.org