Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
File:                     Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer (raw, json)
Hash identifier:          fyqQx7FtUngwU0YwZGxyfjxj7hC3bY74FG4ra1bSrG4=
Subject key identifier:   63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019275A91F5A4ADC58559ECB467459AB85B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 09:01:10 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 34800
                          AS: 44393
                          AS: 47422
                          AS: 56755
                          AS: 56950
                          AS: 58057
                          AS: 60371
                          AS: 60474
                          IP: 45.12.68.0/22
                          IP: 45.12.252.0/24
                          IP: 45.131.184.0/22
                          IP: 45.136.136.0/22
                          IP: 45.148.116.0/22
                          IP: 77.81.50.0/23
                          IP: 85.202.203.0/24
                          IP: 93.88.200.0/21
                          IP: 94.177.122.0/24
                          IP: 109.61.104.0/21
                          IP: 139.28.96.0/22
                          IP: 146.19.102.0/24
                          IP: 146.19.139.0/24
                          IP: 185.0.31.0/24
                          IP: 185.1.135.0/24
                          IP: 185.1.154.0/24
                          IP: 185.1.216.0/24
                          IP: 185.232.117.0/24
                          IP: 185.238.188.0/22
                          IP: 185.248.132.0/24
                          IP: 193.33.94.0/23
                          IP: 193.58.239.0/24
                          IP: 193.163.85.0 -- 193.163.86.255
                          IP: 194.50.92.0/24
                          IP: 194.50.94.0/24
                          IP: 194.50.99.0/24
                          IP: 194.50.111.0/24
                          IP: 2001:7f8:d9::/48
                          IP: 2001:7f8:e7::/48
                          IP: 2001:7f8:119::/48
                          IP: 2001:7f8:14a::/48
                          IP: 2a01:e500::/29
                          IP: 2a04:ccc0::/29
                          IP: 2a06:de00::/29
                          IP: 2a09:4c0::/29
                          IP: 2a0c:3b80::/29
                          IP: 2a0e:97c0::/29
                          IP: 2a0e:b100::/29
                          IP: 2a0f:b9c0::/29
                          IP: 2a0f:e400::/29
                          IP: 2a10:2f00::/29
                          IP: 2a10:cc40::/29
                          IP: 2a10:ccc0::/29
                          IP: 2a10:d380::/29
                          IP: 2a12:87c0::/29
                          IP: 2a13:1bc0::/29
                          IP: 2a13:8380::/29
                          IP: 2a13:aa00::/29
                          IP: 2a14:3800::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 08:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:75:a9:1f:5a:4a:dc:58:55:9e:cb:46:74:59:ab:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 10 09:01:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:89:25:2a:60:70:13:16:2c:ea:c2:96:c7:
                    94:5e:55:2f:e3:15:63:cc:a0:ee:e2:83:ac:95:7d:
                    53:e2:b9:8e:06:04:57:f6:34:9b:a7:44:33:3c:80:
                    ad:da:8f:6a:fd:c2:9f:28:69:2c:fd:26:19:50:2e:
                    16:a0:5e:df:2d:d6:79:da:e6:7f:30:d9:b5:74:fd:
                    ff:46:37:3c:7c:d4:c8:f1:29:1e:b4:f5:7c:25:ed:
                    9a:74:ba:18:b3:39:ad:4d:55:8d:bd:46:24:13:71:
                    6e:2c:81:0d:0e:46:b1:9a:89:6d:a1:e6:41:98:a6:
                    20:e8:4f:33:ca:db:c7:77:d1:62:96:d1:38:83:70:
                    fe:27:d6:c8:0f:37:fd:a4:9b:ef:86:ca:f0:f6:bb:
                    45:fd:31:86:d7:02:df:2f:72:d5:8f:a4:af:de:19:
                    bd:7b:47:d7:81:98:9e:0e:55:ec:75:e9:13:b4:84:
                    fc:b1:dc:24:31:4d:62:23:36:17:49:86:fa:4d:79:
                    e6:a9:e7:16:80:e6:54:8f:f0:21:b5:36:78:96:06:
                    42:af:38:53:c4:03:a6:c4:17:43:26:43:39:c5:8a:
                    78:89:31:04:96:5e:6a:52:fe:33:1f:83:b4:cd:30:
                    87:d5:22:1b:4e:3c:21:12:ba:a8:1a:e0:ff:bf:c0:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.68.0/22
                  45.12.252.0/24
                  45.131.184.0/22
                  45.136.136.0/22
                  45.148.116.0/22
                  77.81.50.0/23
                  85.202.203.0/24
                  93.88.200.0/21
                  94.177.122.0/24
                  109.61.104.0/21
                  139.28.96.0/22
                  146.19.102.0/24
                  146.19.139.0/24
                  185.0.31.0/24
                  185.1.135.0/24
                  185.1.154.0/24
                  185.1.216.0/24
                  185.232.117.0/24
                  185.238.188.0/22
                  185.248.132.0/24
                  193.33.94.0/23
                  193.58.239.0/24
                  193.163.85.0-193.163.86.255
                  194.50.92.0/24
                  194.50.94.0/24
                  194.50.99.0/24
                  194.50.111.0/24
                IPv6:
                  2001:7f8:d9::/48
                  2001:7f8:e7::/48
                  2001:7f8:119::/48
                  2001:7f8:14a::/48
                  2a01:e500::/29
                  2a04:ccc0::/29
                  2a06:de00::/29
                  2a09:4c0::/29
                  2a0c:3b80::/29
                  2a0e:97c0::/29
                  2a0e:b100::/29
                  2a0f:b9c0::/29
                  2a0f:e400::/29
                  2a10:2f00::/29
                  2a10:cc40::/29
                  2a10:ccc0::/29
                  2a10:d380::/29
                  2a12:87c0::/29
                  2a13:1bc0::/29
                  2a13:8380::/29
                  2a13:aa00::/29
                  2a14:3800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34800
                  44393
                  47422
                  56755
                  56950
                  58057
                  60371
                  60474

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:c2:1e:b9:31:94:d3:8f:39:de:ee:6f:f0:c2:f1:31:80:
         70:16:0a:b8:3b:a9:74:49:38:28:77:0a:58:59:93:19:85:a6:
         f1:96:5f:1f:28:0a:b8:bb:76:73:bd:19:b5:8d:e6:dc:3e:e8:
         f6:d8:a4:08:4c:3d:c3:11:dd:47:67:64:f4:ae:39:39:e5:49:
         e2:47:9c:bc:cc:fc:c6:3d:ca:0d:f0:9c:3d:71:52:9f:b4:4a:
         53:2d:3b:70:80:f5:92:2a:58:c1:b8:47:da:80:7b:67:07:8a:
         57:04:0a:39:d9:d0:94:4e:bf:4f:b5:b8:70:2d:e8:b0:05:b0:
         76:52:98:59:35:6e:21:e1:17:1f:ea:26:ac:62:15:1f:ef:36:
         86:e6:2c:44:51:92:4a:2e:d8:63:aa:95:ee:48:53:39:93:b2:
         ac:a4:37:0b:e4:c4:04:ea:cf:c6:0d:49:74:da:d4:c0:05:04:
         c5:59:2c:75:8c:c2:32:e1:57:26:d2:b3:a0:1d:d1:d5:0d:27:
         89:af:18:71:7d:05:f0:c3:c5:13:0e:54:87:55:17:fe:8f:c1:
         7e:99:27:35:86:57:28:52:42:1b:ff:8a:9a:31:12:47:67:55:
         96:d4:12:6c:e4:0f:94:a1:6a:d5:c1:e1:a9:60:57:a0:74:93:
         a5:2f:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 12:34:45 2024 by rpki-client on console-fra.rpki-client.org