Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.cer
File:                     _c1FFqJ7uDhIEQyzIIK8_KnzaJA.cer (download)
Hash identifier:          jzyXvc7FE2Y5tLRSN9JPqnXUo3dEa53s9x+1VLkwgjg=
Subject key identifier:   FD:CD:45:16:A2:7B:B8:38:48:11:0C:B3:20:82:BC:FC:A9:F3:68:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD7CF07C7BC97EB42AE535F64ED250
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 109.205.59.0/24
    2: IP: 2a0c:7e80::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:7c:f0:7c:7b:c9:7e:b4:2a:e5:35:f6:4e:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:33:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdcd4516a27bb83848110cb32082bcfca9f36890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:97:df:77:b7:2d:02:a9:6e:ad:fe:df:bb:
                    f6:51:ba:ae:c2:ad:56:26:6a:1a:53:8b:dc:b7:15:
                    94:2d:09:2d:e5:43:e9:05:d2:f6:5e:ab:2a:64:c5:
                    9b:33:25:1b:ad:dc:92:5e:f0:e2:45:5a:4d:72:b5:
                    92:d7:87:60:18:d6:7c:be:16:4e:74:77:7c:55:94:
                    3f:6d:c3:a4:54:30:0d:60:46:e2:f7:1f:49:52:93:
                    b6:22:6b:da:72:0f:f8:aa:31:cd:76:0c:98:4c:a2:
                    6a:b1:2c:0f:2c:c8:f9:4b:a9:17:2e:ca:88:37:ce:
                    7e:ae:fb:b1:47:42:9f:ae:dd:0b:5f:ea:e6:21:38:
                    e7:90:37:8e:d4:70:50:7e:b0:27:01:66:2f:ce:60:
                    fa:53:64:69:ee:99:95:9a:6b:64:1d:14:89:c9:df:
                    21:8e:ac:8b:ab:90:9e:9e:e7:11:27:a7:29:ff:f4:
                    13:4a:cb:99:f4:06:33:7c:89:04:de:33:0c:3a:cd:
                    71:dc:d2:24:ca:ce:28:b6:99:df:da:37:75:84:b1:
                    d9:09:97:ac:79:14:d2:b5:41:d2:38:24:35:aa:c0:
                    6c:49:d2:3f:8e:14:11:e2:56:d7:0d:1f:42:54:40:
                    d8:75:5e:0d:b6:50:3a:35:4b:59:38:b3:ed:4d:47:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:CD:45:16:A2:7B:B8:38:48:11:0C:B3:20:82:BC:FC:A9:F3:68:90
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.59.0/24
                IPv6:
                  2a0c:7e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         af:61:ca:d8:1e:f3:aa:e2:1b:15:8b:d8:43:f1:b8:69:99:f7:
         24:e4:40:2f:3b:cf:18:90:43:5d:1a:d0:df:4b:01:03:a3:b1:
         fb:9a:98:9e:59:30:b0:68:dc:67:7c:f4:2a:00:ca:1d:18:46:
         39:81:04:7d:21:b4:d2:02:65:ea:b8:26:d3:c2:91:0a:5b:d9:
         8d:9d:48:02:00:40:73:6c:4f:24:da:04:64:13:93:52:7d:89:
         1a:ce:e4:78:17:03:99:c5:7c:34:ba:ea:f9:92:4d:60:c6:0e:
         ce:f0:d7:77:94:44:d6:24:98:15:56:f8:41:0b:ce:71:5c:c3:
         de:32:65:6e:e9:7b:17:02:7b:d4:93:66:4d:cd:b7:db:a8:2f:
         c6:20:11:ca:12:cd:96:2c:7d:64:0c:93:33:25:29:e8:b8:3c:
         b6:69:32:ec:43:76:49:b9:15:bc:39:1c:2c:c1:a6:3f:5b:bb:
         28:a1:62:3f:d1:46:63:04:42:39:ec:fd:d3:51:d9:e0:42:3c:
         34:7f:f1:d4:33:d2:5d:aa:49:26:a1:14:41:b3:cf:70:c3:ed:
         05:83:d1:68:da:dc:35:9c:cf:ac:35:39:b2:12:b6:0f:c1:07:
         32:bb:e8:d4:58:43:b8:94:81:3c:0a:dd:47:77:50:31:7e:fc:
         cf:5f:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 5 13:17:49 2023 by rpki-client.