Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
File:                     fQakK7JEblHxkuo3W99-7FpRx38.cer (download)
Hash identifier:          7BLSNf+rePKqg6zhpI3+xi9tV/OR9GpnZ/kGRcqXfrE=
Subject key identifier:   7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD808B16ED51B160D6F7A262B37074
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 15723
    2: IP: 5.10.240.0/20
    3: IP: 5.178.0.0/20
    4: IP: 37.128.200.0/21
    5: IP: 46.23.96.0/20
    6: IP: 62.217.128.0/19
    7: IP: 85.158.144.0/21
    8: IP: 88.151.192.0/21
    9: IP: 109.205.208.0/21
   10: IP: 164.215.96.0/21
   11: IP: 185.81.216.0/22
   12: IP: 188.64.8.0/21
   13: IP: 2a00:48c0::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:80:8b:16:ed:51:b1:60:d6:f7:a2:62:b3:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:33:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:77:cb:10:78:71:be:cc:1f:a0:6e:17:c6:
                    19:1f:00:79:7c:63:c1:5c:9b:a7:64:97:72:08:a1:
                    b3:b0:25:6f:e9:4d:ba:e1:3a:48:77:2d:1b:ae:7f:
                    3b:cc:24:85:c8:82:03:db:61:73:70:0d:c8:27:7f:
                    01:57:fe:58:c5:65:34:b2:04:95:5f:2f:9e:4e:51:
                    ef:46:0f:78:d2:23:59:48:2b:d9:b4:00:15:63:31:
                    a3:6f:ca:10:91:72:91:74:61:cc:24:7e:f1:26:cd:
                    e9:99:82:56:3d:c9:6e:8c:c0:2d:09:59:04:82:dd:
                    30:00:92:bb:d4:76:57:40:e2:7f:15:0c:dd:78:88:
                    d0:67:2c:46:ac:ba:f8:de:c1:26:4c:63:8e:fa:8c:
                    39:3a:60:bf:8b:9e:80:f2:8f:9d:38:b5:66:9f:eb:
                    21:76:9b:58:a3:73:bd:21:86:0e:36:f3:42:71:33:
                    88:dd:a2:a0:97:42:11:aa:08:c4:4a:04:d2:db:e7:
                    45:52:f6:2b:4c:70:ef:94:98:e1:88:b8:3c:19:7a:
                    14:92:e2:30:9b:48:22:68:6d:15:6d:c3:f1:02:47:
                    d7:a6:f0:17:8a:c1:c7:fb:54:26:c8:c1:0a:7c:35:
                    07:e9:3b:15:bd:36:5c:aa:5a:60:a0:ea:4c:47:7c:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.10.240.0/20
                  5.178.0.0/20
                  37.128.200.0/21
                  46.23.96.0/20
                  62.217.128.0/19
                  85.158.144.0/21
                  88.151.192.0/21
                  109.205.208.0/21
                  164.215.96.0/21
                  185.81.216.0/22
                  188.64.8.0/21
                IPv6:
                  2a00:48c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15723

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:47:74:b7:60:f5:6f:12:d9:5a:af:d7:65:ab:15:b5:13:
         6c:9c:68:77:27:5c:f6:61:c7:37:61:67:5f:14:2b:bd:61:16:
         89:ab:a0:77:37:48:a6:2b:9d:df:59:0d:32:79:c0:16:ed:5f:
         d0:7c:41:38:47:8a:2f:07:e6:9e:04:93:76:63:76:18:92:0c:
         ac:e0:8e:5d:57:f7:72:f2:e9:ea:5c:6a:e5:d6:77:40:8e:96:
         eb:50:9a:d7:79:03:79:be:72:a9:25:f8:0e:16:db:bc:17:dc:
         e6:99:16:c4:66:51:c1:68:78:64:1b:97:9f:06:fe:14:8c:fb:
         87:32:07:23:65:7e:40:91:7e:19:69:81:89:0d:14:c0:f6:3d:
         7a:89:8c:57:bb:6f:ec:a2:a2:e8:c9:e9:1a:28:f8:2f:be:b6:
         06:c3:52:22:54:8f:2f:af:06:6d:d5:46:24:db:fe:0e:2e:5f:
         28:99:1f:f0:cf:ed:67:e8:64:3a:d5:4d:21:b1:1a:5d:4d:c1:
         33:47:b0:4c:3a:e0:65:e3:43:11:35:47:13:ac:fa:12:95:ce:
         17:1b:58:84:50:23:eb:4e:a1:6c:72:69:c3:62:42:56:5a:47:
         8f:48:bd:19:7e:21:69:22:51:a8:da:46:6c:c7:7e:dc:78:b7:
         1d:ed:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 8 05:06:31 2023 by rpki-client.