Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
File:                     Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer (download)
Hash identifier:          442Ip0vIOyljTtjqUonSMDQmvNg8hNnSm9mcWux9mPc=
Subject key identifier:   63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018484CBFDE6788A8A3F9D81F4302BFFF4C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Jul 01 00:00:00 2023 GMT
Subordinate resources:
    1: AS: 34800
    2: AS: 44393
    3: AS: 47422
    4: AS: 50892
    5: AS: 56755
    6: AS: 56950
    7: AS: 58057
    8: AS: 59783
    9: AS: 60474
   10: AS: 204450
   11: IP: 31.42.183.0/24
   12: IP: 45.12.68.0/22
   13: IP: 45.131.184.0/22
   14: IP: 45.136.136.0/22
   15: IP: 45.148.116.0/22
   16: IP: 85.202.203.0/24
   17: IP: 94.177.122.0/24
   18: IP: 139.28.96.0/22
   19: IP: 185.1.135.0/24
   20: IP: 185.1.154.0/24
   21: IP: 185.1.216.0/24
   22: IP: 185.238.188.0/22
   23: IP: 193.58.239.0/24
   24: IP: 194.50.92.0/24
   25: IP: 194.50.94.0/24
   26: IP: 194.50.99.0/24
   27: IP: 194.50.111.0/24
   28: IP: 2001:7f8:d9::/48
   29: IP: 2001:7f8:e7::/48
   30: IP: 2001:7f8:119::/48
   31: IP: 2a09:4c0::/29
   32: IP: 2a0c:3b80::/29
   33: IP: 2a0e:97c0::/29
   34: IP: 2a0e:b100::/29
   35: IP: 2a0f:b9c0::/29
   36: IP: 2a0f:e400::/29
   37: IP: 2a10:2f00::/29
   38: IP: 2a10:cc40::/29
   39: IP: 2a10:ccc0::/29
   40: IP: 2a10:d380::/29
   41: IP: 2a12:87c0::/29
   42: IP: 2a13:1bc0::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:84:cb:fd:e6:78:8a:8a:3f:9d:81:f4:30:2b:ff:f4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 17 08:54:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:89:25:2a:60:70:13:16:2c:ea:c2:96:c7:
                    94:5e:55:2f:e3:15:63:cc:a0:ee:e2:83:ac:95:7d:
                    53:e2:b9:8e:06:04:57:f6:34:9b:a7:44:33:3c:80:
                    ad:da:8f:6a:fd:c2:9f:28:69:2c:fd:26:19:50:2e:
                    16:a0:5e:df:2d:d6:79:da:e6:7f:30:d9:b5:74:fd:
                    ff:46:37:3c:7c:d4:c8:f1:29:1e:b4:f5:7c:25:ed:
                    9a:74:ba:18:b3:39:ad:4d:55:8d:bd:46:24:13:71:
                    6e:2c:81:0d:0e:46:b1:9a:89:6d:a1:e6:41:98:a6:
                    20:e8:4f:33:ca:db:c7:77:d1:62:96:d1:38:83:70:
                    fe:27:d6:c8:0f:37:fd:a4:9b:ef:86:ca:f0:f6:bb:
                    45:fd:31:86:d7:02:df:2f:72:d5:8f:a4:af:de:19:
                    bd:7b:47:d7:81:98:9e:0e:55:ec:75:e9:13:b4:84:
                    fc:b1:dc:24:31:4d:62:23:36:17:49:86:fa:4d:79:
                    e6:a9:e7:16:80:e6:54:8f:f0:21:b5:36:78:96:06:
                    42:af:38:53:c4:03:a6:c4:17:43:26:43:39:c5:8a:
                    78:89:31:04:96:5e:6a:52:fe:33:1f:83:b4:cd:30:
                    87:d5:22:1b:4e:3c:21:12:ba:a8:1a:e0:ff:bf:c0:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.183.0/24
                  45.12.68.0/22
                  45.131.184.0/22
                  45.136.136.0/22
                  45.148.116.0/22
                  85.202.203.0/24
                  94.177.122.0/24
                  139.28.96.0/22
                  185.1.135.0/24
                  185.1.154.0/24
                  185.1.216.0/24
                  185.238.188.0/22
                  193.58.239.0/24
                  194.50.92.0/24
                  194.50.94.0/24
                  194.50.99.0/24
                  194.50.111.0/24
                IPv6:
                  2001:7f8:d9::/48
                  2001:7f8:e7::/48
                  2001:7f8:119::/48
                  2a09:4c0::/29
                  2a0c:3b80::/29
                  2a0e:97c0::/29
                  2a0e:b100::/29
                  2a0f:b9c0::/29
                  2a0f:e400::/29
                  2a10:2f00::/29
                  2a10:cc40::/29
                  2a10:ccc0::/29
                  2a10:d380::/29
                  2a12:87c0::/29
                  2a13:1bc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34800
                  44393
                  47422
                  50892
                  56755
                  56950
                  58057
                  59783
                  60474
                  204450

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:0b:22:f7:84:2c:01:e1:4a:0d:70:49:ea:40:47:b6:85:
         a1:26:ec:d4:f3:01:58:6f:28:50:ed:27:a3:b5:89:0e:b3:e4:
         be:15:f8:eb:50:0a:b7:4c:b4:25:88:e2:18:1c:e4:f2:42:ec:
         8c:ed:62:07:a2:fd:52:38:fc:76:64:c8:44:a4:82:a4:7b:ae:
         5a:b1:b8:66:22:9d:2d:92:0d:00:73:f8:e1:69:d4:2f:f4:d3:
         e0:ce:9f:8a:0f:a6:4c:2e:8b:d5:8d:bf:0f:80:9e:ba:d1:f5:
         35:41:a8:89:76:69:31:eb:58:6c:56:6e:ed:59:fc:83:55:07:
         f1:70:53:0d:cb:e3:01:fb:78:36:57:4d:9c:20:05:39:2a:68:
         15:77:27:19:7a:86:ea:4e:4d:b7:90:ef:0e:61:bd:a7:31:0f:
         d5:be:62:45:2b:09:27:0e:61:21:f4:85:b5:58:43:f1:ec:12:
         16:2e:38:68:2b:77:c5:f2:64:b1:52:83:ce:67:8f:4b:22:11:
         30:93:20:11:9c:ce:bc:40:a7:72:26:af:13:bc:30:7d:87:63:
         64:43:54:62:92:34:88:a6:7e:13:0a:a0:91:63:79:f5:09:75:
         6a:85:dc:be:2e:da:b8:9a:0b:41:5a:2b:ac:b0:84:d7:21:2d:
         30:7a:90:73
-----BEGIN CERTIFICATE-----
MIIGmzCCBYOgAwIBAgISAYSEy/3meIqKP52B9DAr//TIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMTE3MDg1NDMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcqJJSpgcBMWLOrClseUXlUv4xVj
zKDu4oOslX1T4rmOBgRX9jSbp0QzPICt2o9q/cKfKGks/SYZUC4WoF7fLdZ52uZ/
MNm1dP3/Rjc8fNTI8SketPV8Je2adLoYszmtTVWNvUYkE3FuLIENDkaxmoltoeZB
mKYg6E8zytvHd9FiltE4g3D+J9bIDzf9pJvvhsrw9rtF/TGG1wLfL3LVj6Sv3hm9
e0fXgZieDlXsdekTtIT8sdwkMU1iIzYXSYb6TXnmqecWgOZUj/AhtTZ4lgZCrzhT
xAOmxBdDJkM5xYp4iTEEll5qUv4zH4O0zTCH1SIbTjwhErqoGuD/v8AThQIDAQAB
o4IDpzCCA6MwHQYDVR0OBBYEFGPpFnF6sRzM8R7x+1wS7kGVD62bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzQ5NTdh
NC1jZTU5LTQzMTUtOTk3Ni1kYzVlYzc0OGY2YTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNDk1N2E0
LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16eEh2SDdY
Qkx1UVpVUHJacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH4BggrBgEF
BQcBBwEB/wSB6DCB5TBsBAIAATBmAwQAHyq3AwQCLQxEAwQCLYO4AwQCLYiIAwQC
LZR0AwQAVcrLAwQAXrF6AwQCixxgAwQAuQGHAwQAuQGaAwQAuQHYAwQCue68AwQA
wTrvAwQAwjJcAwQAwjJeAwQAwjJjAwQAwjJvMHUEAgACMG8DBwAgAQf4ANkDBwAg
AQf4AOcDBwAgAQf4ARkDBQMqCQTAAwUDKgw7gAMFAyoOl8ADBQMqDrEAAwUDKg+5
wAMFAyoP5AADBQMqEC8AAwUDKhDMQAMFAyoQzMADBQMqENOAAwUDKhKHwAMFAyoT
G8AwRwYIKwYBBQUHAQgBAf8EODA2oDQwMgIDAIfwAgMArWkCAwC5PgIDAMbMAgMA
3bMCAwDedgIDAOLJAgMA6YcCAwDsOgIDAx6iMA0GCSqGSIb3DQEBCwUAA4IBAQAm
uwsi94QsAeFKDXBJ6kBHtoWhJuzU8wFYbyhQ7SejtYkOs+S+FfjrUAq3TLQliOIY
HOTyQuyM7WIHov1SOPx2ZMhEpIKke65asbhmIp0tkg0Ac/jhadQv9NPgzp+KD6ZM
LovVjb8PgJ660fU1QaiJdmkx61hsVm7tWfyDVQfxcFMNy+MB+3g2V02cIAU5KmgV
dycZeobqTk23kO8OYb2nMQ/VvmJFKwknDmEh9IW1WEPx7BIWLjhoK3fF8mSxUoPO
Z49LIhEwkyARnM68QKdyJq8TvDB9h2NkQ1RikjSIpn4TCqCRY3n1CXVqhdy+Ltq4
mgtBWiussITXIS0wepBz
-----END CERTIFICATE-----
Generated at Thu Dec 8 06:53:07 2022 by rpki-client.