Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
File:                     abZsbpoUxv13P6Md-YILM5aVLi4.cer (raw, json)
Hash identifier:          3vJhjpNLApxfi9Wnde1EeLhti6kC1duFPl5FTQyzYK4=
Subject key identifier:   69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190F909DED9B7D629E5B407DD89E0550CF9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 28 Jul 2024 11:11:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215839
                          IP: 213.134.27.0/24
                          IP: 2a14:2c80::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:f9:09:de:d9:b7:d6:29:e5:b4:07:dd:89:e0:55:0c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 28 11:11:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:e6:c5:44:6b:e8:1b:0c:81:3e:3f:8f:ce:
                    cf:ee:ad:14:2c:11:d8:72:62:4a:f3:83:50:e3:1b:
                    ce:73:ef:0d:e2:17:ce:91:21:18:14:4f:ee:38:49:
                    d9:8a:05:1b:12:21:4f:9f:04:a7:07:35:2d:78:a7:
                    36:6d:1a:f7:de:82:d1:f2:cb:8f:84:ee:d4:66:23:
                    7a:3f:0e:33:09:68:5d:ed:e3:34:f6:03:e6:1c:f5:
                    a6:0e:3e:d2:ce:97:5b:e8:87:53:c9:a6:ba:57:b4:
                    2d:59:6a:5f:6e:08:f4:32:54:50:18:6e:3b:72:5c:
                    60:a1:fb:e0:d9:c0:9f:a7:f2:30:6f:80:ab:6d:92:
                    4f:90:93:75:8f:a5:d3:23:39:9f:cd:de:d2:bb:b6:
                    d0:7b:10:d4:8a:93:2b:98:b6:eb:a3:46:82:63:56:
                    07:bf:5e:b2:93:3e:ac:13:b7:66:64:76:13:d3:26:
                    d7:ae:11:dd:5c:26:cc:d1:53:33:20:8e:6e:78:10:
                    4a:b7:09:fa:56:94:d6:24:ca:5e:db:02:d8:88:be:
                    75:15:2a:23:b7:5f:b7:7f:fa:52:72:56:51:f7:ca:
                    c9:34:9b:04:f3:8d:79:8b:71:63:5a:06:b5:b1:63:
                    63:8d:8c:61:72:ea:f8:90:91:3b:89:1b:8f:8f:f5:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.134.27.0/24
                IPv6:
                  2a14:2c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215839

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:4b:9a:c4:cc:be:a6:8a:c3:de:c3:df:70:94:45:6a:cd:
         e5:78:e8:43:5d:3c:c1:48:c2:ed:83:a4:84:76:9c:49:c7:21:
         00:73:30:00:50:fb:cf:27:de:31:75:9e:d6:ef:95:8c:a3:d6:
         3c:c8:35:ff:96:eb:aa:83:28:6d:bc:26:c3:e7:9b:c1:38:71:
         2e:1a:10:85:29:db:20:2e:fd:8e:c3:c2:a7:4f:20:aa:e4:d7:
         6c:ae:19:27:02:b8:8f:14:4b:6f:f4:8a:9b:a9:e4:30:6a:52:
         16:a3:0d:c3:8c:fb:52:e5:8c:0d:c9:f9:1d:ee:fd:08:90:30:
         52:ce:68:1a:92:0c:e5:7b:a1:b3:dd:8a:e4:fd:a5:a1:21:f0:
         1e:4e:36:46:da:3e:bc:d0:4b:95:98:39:bd:a7:21:a0:5c:1c:
         96:f7:c5:47:69:d9:f7:35:1c:87:57:8a:eb:32:8b:3c:a6:df:
         cb:d2:20:ef:e9:ad:1f:d0:d0:1f:f8:1a:63:22:47:79:b4:96:
         24:a2:35:52:bb:d5:98:37:63:92:2b:dc:ab:8a:33:dd:58:e5:
         09:aa:94:50:e0:30:43:00:74:eb:b5:3d:ad:a3:b3:3e:82:e0:
         20:4f:b1:c4:db:6e:06:a6:94:fe:01:5a:70:24:9f:a4:87:8f:
         d7:c7:18:86
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZD5Cd7Zt9Yp5bQH3YngVQz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzI4MTExMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWI2NmM2ZTlhMTRjNmZkNzczZmEzMWRmOTgyMGIzMzk2OTUyZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZfmxURr6BsMgT4/j87P7q0ULBHY
cmJK84NQ4xvOc+8N4hfOkSEYFE/uOEnZigUbEiFPnwSnBzUteKc2bRr33oLR8suP
hO7UZiN6Pw4zCWhd7eM09gPmHPWmDj7Szpdb6IdTyaa6V7QtWWpfbgj0MlRQGG47
clxgofvg2cCfp/Iwb4CrbZJPkJN1j6XTIzmfzd7Su7bQexDUipMrmLbro0aCY1YH
v16ykz6sE7dmZHYT0ybXrhHdXCbM0VMzII5ueBBKtwn6VpTWJMpe2wLYiL51FSoj
t1+3f/pSclZR98rJNJsE8415i3FjWga1sWNjjYxhcur4kJE7iRuPj/V5ZwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGm2bG6aFMb9dz+jHfmCCzOWlS4uMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzlkZTcw
ZC03NDI1LTRjMDctYTgwZi00MmRjODJjY2ExOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvOWRlNzBk
LTc0MjUtNGMwNy1hODBmLTQyZGM4MmNjYTE5Mi8xL2FiWnNicG9VeHYxM1A2TWQt
WUlMTTVhVkxpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1YYbMA0EAgACMAcDBQMqFCyAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNLHzANBgkqhkiG9w0BAQsFAAOCAQEAG0dLmsTMvqaK
w97D33CURWrN5XjoQ108wUjC7YOkhHacScchAHMwAFD7zyfeMXWe1u+VjKPWPMg1
/5brqoMobbwmw+ebwThxLhoQhSnbIC79jsPCp08gquTXbK4ZJwK4jxRLb/SKm6nk
MGpSFqMNw4z7UuWMDcn5He79CJAwUs5oGpIM5Xuhs92K5P2loSHwHk42Rto+vNBL
lZg5vachoFwclvfFR2nZ9zUch1eK6zKLPKbfy9Ig7+mtH9DQH/gaYyJHebSWJKI1
UrvVmDdjkivcq4oz3VjlCaqUUOAwQwB067U9raOzPoLgIE+xxNtuBqaU/gFacCSf
pIeP18cYhg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:35 2024 by rpki-client on console-fra.rpki-client.org