Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gSps3Fy5zpz9lQs0QNMIO3iLleY.cer
File:                     gSps3Fy5zpz9lQs0QNMIO3iLleY.cer (download)
Hash identifier:          pSmvnO2tS6aNNqRvZlyI+ow6/4BREHQ+Qcz/EcmxTWY=
Subject key identifier:   81:2A:6C:DC:5C:B9:CE:9C:FD:95:0B:34:40:D3:08:3B:78:8B:95:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708BCDC829FC055BF71DAC0EE965D4B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 91.242.245.0/24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:cd:c8:29:fc:05:5b:f7:1d:ac:0e:e9:65:d4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=812a6cdc5cb9ce9cfd950b3440d3083b788b95e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:32:51:aa:82:fe:ea:95:2a:33:5e:69:76:
                    1a:ef:b8:72:89:56:1e:ae:74:f6:70:9a:18:4b:f1:
                    87:f1:09:40:6a:cb:81:a8:5d:8c:ad:98:26:ac:e8:
                    28:5e:08:64:f1:02:ee:df:11:80:7e:3c:0c:5a:24:
                    7f:1e:b1:36:1e:b3:7d:93:8d:01:71:2b:e4:f2:44:
                    ee:78:a3:c3:cf:87:bb:58:6f:4f:4e:ac:c7:f2:a5:
                    07:c8:4f:52:93:8a:ab:99:8e:66:16:c8:2f:f8:b3:
                    ce:91:8d:5b:86:38:2d:15:75:bd:d3:37:52:f2:05:
                    39:10:db:9b:5f:7c:3e:82:6c:ed:51:d1:01:90:a5:
                    84:eb:a2:3d:50:05:fb:ea:b9:89:2e:e6:c1:97:28:
                    91:6e:21:af:b6:12:a0:c0:49:dd:01:f6:c1:d2:b7:
                    bf:57:21:90:07:94:cb:5f:44:a3:6e:2d:f6:c7:eb:
                    d8:7d:37:12:05:2f:b9:fd:fd:7f:1f:30:5d:51:d8:
                    8c:27:bf:8f:9d:c8:5a:cf:85:22:e8:2f:66:4f:32:
                    39:7b:7b:07:f2:f4:8b:24:e7:5c:ee:4b:7d:4d:9e:
                    28:67:82:ca:eb:6a:34:b6:e5:b2:73:c3:b5:d9:65:
                    09:f3:77:64:f4:d7:1a:68:1a:d2:2c:07:2c:87:5b:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                81:2A:6C:DC:5C:B9:CE:9C:FD:95:0B:34:40:D3:08:3B:78:8B:95:E6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:ea:02:09:59:e6:ea:43:b0:07:40:8c:4b:b9:09:4c:e1:
         7f:44:88:fe:06:b0:a2:16:c0:3e:e1:8b:d0:4c:04:ae:7d:31:
         ab:43:0a:44:87:ce:1d:f2:51:d0:bc:16:4e:ab:d9:40:4f:eb:
         5e:71:c4:4d:73:b1:88:49:0d:e0:3b:8a:4c:d9:18:c8:14:25:
         e7:c6:16:69:f9:a3:15:7c:05:13:21:d7:ae:5b:ca:d6:48:f9:
         6d:f5:12:4e:42:98:f5:46:e6:73:24:73:c8:54:a3:b9:38:17:
         50:ab:53:31:53:b6:0e:9b:2b:cb:59:8c:5d:ec:c7:68:87:71:
         14:bd:c2:df:bc:34:10:5e:cf:66:ac:28:25:6a:a3:9e:88:07:
         eb:24:ac:1a:97:5c:2f:c4:50:e9:56:e9:57:9e:63:e3:46:91:
         22:36:ab:1a:53:ca:77:89:78:46:64:c1:14:02:11:44:e0:d4:
         62:02:f4:40:b0:55:5a:39:12:8c:23:e2:dd:b2:2f:cd:f3:c5:
         25:ad:c4:eb:cf:f4:90:8e:ae:35:53:d4:68:a0:b3:03:be:f5:
         7c:00:34:1f:b0:c3:09:60:89:fb:0d:68:09:65:94:2f:b9:ac:
         e7:7b:86:00:e1:8a:0b:07:f1:2a:3c:3a:cf:c9:ba:72:f8:79:
         31:b9:a8:0c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwi83IKfwFW/cdrA7pZdS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTJhNmNkYzVjYjljZTljZmQ5NTBiMzQ0MGQzMDgzYjc4OGI5NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxUyUaqC/uqVKjNeaXYa77hyiVYe
rnT2cJoYS/GH8QlAasuBqF2MrZgmrOgoXghk8QLu3xGAfjwMWiR/HrE2HrN9k40B
cSvk8kTueKPDz4e7WG9PTqzH8qUHyE9Sk4qrmY5mFsgv+LPOkY1bhjgtFXW90zdS
8gU5ENubX3w+gmztUdEBkKWE66I9UAX76rmJLubBlyiRbiGvthKgwEndAfbB0re/
VyGQB5TLX0Sjbi32x+vYfTcSBS+5/f1/HzBdUdiMJ7+Pnchaz4Ui6C9mTzI5e3sH
8vSLJOdc7kt9TZ4oZ4LK62o0tuWyc8O12WUJ83dk9NcaaBrSLAcsh1toUwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIEqbNxcuc6c/ZULNEDTCDt4i5XmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2YyZGFm
NC0yZTlmLTQ5MjEtODJkOC1mYzQyYWU1ZWMxYjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZjJkYWY0
LTJlOWYtNDkyMS04MmQ4LWZjNDJhZTVlYzFiNS8xL2dTcHMzRnk1enB6OWxRczBR
Tk1JTzNpTGxlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW/L1MA0GCSqGSIb3DQEBCwUAA4IBAQBVjeoC
CVnm6kOwB0CMS7kJTOF/RIj+BrCiFsA+4YvQTASufTGrQwpEh84d8lHQvBZOq9lA
T+teccRNc7GISQ3gO4pM2RjIFCXnxhZp+aMVfAUTIdeuW8rWSPlt9RJOQpj1RuZz
JHPIVKO5OBdQq1MxU7YOmyvLWYxd7Mdoh3EUvcLfvDQQXs9mrCglaqOeiAfrJKwa
l1wvxFDpVulXnmPjRpEiNqsaU8p3iXhGZMEUAhFE4NRiAvRAsFVaORKMI+Ldsi/N
88UlrcTrz/SQjq41U9RooLMDvvV8ADQfsMMJYIn7DWgJZZQvuazne4YA4YoLB/Eq
PDrPybpy+HkxuagM
-----END CERTIFICATE-----
Generated at Mon Jan 30 10:56:06 2023 by rpki-client.