Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
File:                     cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer (download)
Hash identifier:          tK5PM1CNXclGcIohTCb6+nngx3wX1DAh8Qltd+0ci68=
Subject key identifier:   71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65DECC785B0E4866C57A97B3E11266
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 91.229.114.0/24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:de:cc:78:5b:0e:48:66:c5:7a:97:b3:e1:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:e9:c3:05:1f:ab:13:d8:6f:9f:a6:6e:31:
                    cf:d1:fa:13:39:b0:33:24:70:6f:21:e6:d2:f3:d8:
                    9f:86:9b:32:82:a7:95:ef:b0:f9:2b:0d:43:99:1e:
                    4d:49:49:15:8e:8b:e1:41:43:b7:8a:b4:b9:07:11:
                    85:2c:41:83:fd:9d:d4:9b:90:cc:01:00:b0:0b:ed:
                    3c:f7:b6:68:7e:d0:d0:27:11:da:47:e5:ee:18:0e:
                    ff:db:1c:f5:10:36:f9:5c:a7:0c:12:ca:51:74:e4:
                    33:7e:42:39:65:bc:5a:47:d8:0a:a8:f1:b6:16:df:
                    e7:85:78:f6:8e:41:67:b1:ca:ce:8d:a0:5c:fc:61:
                    80:de:80:e3:fa:53:e6:30:a1:50:e1:fb:64:43:20:
                    4f:64:68:fe:d0:3e:3e:fe:31:b9:de:43:01:14:45:
                    71:e7:d4:fa:f3:0f:6d:d0:3c:a5:84:bc:45:19:b5:
                    c6:ff:e6:94:cf:44:10:ac:0c:a3:b6:e1:64:4c:a2:
                    47:09:9c:0a:68:a1:4d:ed:18:09:48:f1:25:63:97:
                    c0:2b:fb:4c:a9:49:7b:87:e7:d7:93:30:2b:89:54:
                    6e:dc:58:93:86:de:7e:0c:6d:27:ad:8d:06:64:54:
                    60:bc:88:b6:51:8f:1c:6a:c4:2a:75:e6:61:f9:29:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:5b:b0:f2:a3:19:c3:70:0b:49:b4:90:66:36:52:d4:94:98:
         fd:e1:e9:c1:bc:01:3d:c2:09:5c:fd:91:62:c6:2a:4c:d2:ec:
         20:be:b6:b7:e3:f1:10:ec:e2:2d:e8:2a:a5:3d:40:ec:21:8a:
         d8:0a:77:ab:77:fb:d6:2e:32:e8:1f:44:de:03:ff:89:12:4f:
         6d:03:32:49:f2:7b:b8:c9:c2:07:7b:0c:b6:ab:5f:69:22:30:
         5c:40:fc:98:04:f1:b3:3e:3e:88:83:69:a2:e9:56:39:37:53:
         67:ea:2a:45:27:ca:14:4d:e1:51:c1:81:05:7d:36:66:4e:e7:
         cf:7d:f1:54:5b:a4:8c:21:44:d4:31:48:79:d0:45:d5:6a:69:
         7a:16:40:c9:97:d8:65:d9:cf:66:c3:ed:68:ed:13:86:5e:42:
         14:82:04:06:d4:67:9b:b6:5b:a7:5a:d3:5a:2d:d6:5c:25:57:
         19:f2:0f:3b:ff:b3:20:9c:11:7e:36:68:9b:bf:17:58:85:8a:
         0e:a5:e0:ab:51:86:5b:f3:85:e1:2c:48:6b:60:c4:a9:c5:3b:
         06:bb:5f:e8:f6:e9:00:b1:b6:c5:90:a2:1c:73:1e:a1:3b:0d:
         16:a2:20:02:d2:7c:36:5e:b9:e5:f0:e8:ad:23:b5:75:a7:e0:
         f4:05:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 5 13:19:39 2023 by rpki-client.