Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
File:                     f_Igq9YH41e_slwvf9SPzGq2a4g.cer (download)
Hash identifier:          vunC1J+Xhl94bGr6DU3II2BGOtJwoVoPf5slBXGDDAg=
Subject key identifier:   7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED42505F584AA3DC6CE0444BFB72BE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 94.247.139.0/24
    2: IP: 2a11:8580::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:25:05:f5:84:aa:3d:c6:ce:04:44:bf:b7:2b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:a5:63:40:5b:36:20:c4:20:c3:17:26:73:
                    e4:6b:97:29:54:09:9f:f7:f7:ed:11:4c:24:a8:e2:
                    94:84:0c:37:af:4c:b0:e2:db:89:72:99:83:36:17:
                    70:50:1c:2d:4b:9f:a6:04:31:99:86:d4:7d:9e:3e:
                    19:a0:99:da:6f:45:d6:22:50:22:70:68:81:85:0b:
                    09:5c:b1:46:17:66:39:66:e1:b0:c8:e8:01:3c:6c:
                    97:8c:c0:61:0f:94:7c:d9:9e:d2:ac:de:77:22:63:
                    61:cb:3b:2d:1a:b2:21:1f:25:ee:41:a4:68:bf:e9:
                    65:8f:33:e8:17:fe:74:6d:20:d9:56:90:37:12:25:
                    45:58:70:0d:48:8f:11:5c:3e:33:f3:76:58:f6:64:
                    db:0c:a7:fe:88:d8:3a:46:94:2b:70:a0:22:1a:30:
                    4b:97:97:b1:1f:75:dd:61:42:ea:50:97:75:50:69:
                    b5:08:80:51:0e:8d:2b:a7:e8:82:82:62:3a:49:db:
                    3c:4a:79:b6:24:69:dd:62:5a:f2:24:ec:1d:5c:3a:
                    24:53:e6:cc:aa:a4:c3:e1:62:a3:ad:84:9a:d8:db:
                    2e:8c:74:f0:fc:0f:2e:3e:26:90:b5:0a:f8:d2:4e:
                    6f:ce:7f:8f:45:ad:36:04:12:72:a5:8e:00:fb:87:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.139.0/24
                IPv6:
                  2a11:8580::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:46:d8:3c:70:4e:cf:ba:e7:3b:5b:a8:b3:d7:ba:e2:c5:
         33:64:0b:87:cd:9e:db:5d:7a:7c:65:b2:2d:af:4b:b3:11:c8:
         25:49:7e:05:4e:7b:bf:11:8d:81:0f:43:bc:a5:37:ff:ac:0d:
         17:51:53:6a:51:8b:1d:e3:a1:29:7e:43:af:c0:4e:19:d8:22:
         74:af:d9:4c:2b:33:ec:80:f7:9c:cb:89:62:f3:74:77:37:4f:
         3a:54:85:89:6f:cc:08:0b:71:50:74:8c:3b:50:88:eb:4a:d9:
         be:9b:49:df:4a:8c:ee:49:41:12:3d:af:a8:66:02:06:6f:c7:
         17:1d:e9:7f:f5:65:d2:d9:c0:a8:f8:9a:73:53:4c:5a:ce:d2:
         40:14:68:8e:fd:7e:69:75:1b:89:6f:51:b7:4d:3f:d5:3f:8d:
         c1:0b:b5:98:9e:5d:65:21:47:e0:3a:82:42:e0:8f:66:95:e2:
         be:c2:17:b2:35:4d:52:ba:70:a7:01:a8:ca:9c:a8:63:a6:ed:
         6d:27:64:08:8d:84:4e:22:fa:0c:98:78:11:f0:bc:73:0b:bb:
         e8:e8:78:f6:b2:db:48:a4:e5:23:2f:16:b3:1b:2f:26:e5:21:
         c1:8b:1b:d4:c9:a5:12:4e:04:ae:f3:0b:31:9b:7c:3a:d4:ee:
         83:3e:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 30 10:55:35 2023 by rpki-client.