Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.cer (raw, json)
Hash identifier:          FiAc4BMSy5+jsJ4S2uz5x9VdbEBQ0dBNB0BRGkJYKd0=
Subject key identifier:   81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B8F666E086849FE4339D2EB9D0E1B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:30:59 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 39115
                          AS: 42808
                          IP: 46.235.104.0/21
                          IP: 77.247.0.0/20
                          IP: 185.71.48.0/22
                          IP: 192.76.118.0/23
                          IP: 212.11.80.0/21
                          IP: 2a01:8680::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:f6:66:e0:86:84:9f:e4:33:9d:2e:b9:d0:e1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:30:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:4b:77:7c:34:8c:ba:f9:b1:50:f0:3d:79:
                    3e:d6:9f:e7:37:81:fa:fd:81:41:bd:64:54:d1:43:
                    6a:78:0b:35:91:80:45:3f:e3:bd:6b:22:e6:c5:84:
                    64:2f:ff:d8:6a:0d:74:b7:36:27:03:b3:fa:4f:03:
                    22:ce:97:54:63:ab:1b:88:a9:55:33:f4:71:16:56:
                    7b:0e:d5:97:c4:47:05:ef:79:41:32:0f:7b:c5:6b:
                    05:d6:3b:09:54:03:e9:37:e4:b1:ca:71:8d:8b:29:
                    08:7f:21:1a:38:f9:d8:cb:de:6a:c2:4f:9f:60:98:
                    e3:73:fa:5f:1f:a1:85:af:ee:34:c3:db:db:4d:e9:
                    07:b9:f0:8d:8b:82:d9:14:5c:66:26:f3:1e:0b:87:
                    47:71:da:58:c4:43:1b:65:7a:4c:bd:25:23:7d:9c:
                    47:66:31:29:4e:fd:76:d2:fd:06:6f:a0:7d:b2:aa:
                    1d:d5:3a:cc:e7:41:47:f1:c1:f7:b0:12:04:b0:ef:
                    7d:48:1f:86:7e:ad:cc:14:b9:bf:c8:b6:2a:68:79:
                    6f:f8:29:60:a0:3d:78:40:12:f3:5b:fb:61:25:4b:
                    f8:08:c5:0b:74:13:41:b2:9f:b5:dc:9b:ad:22:e1:
                    79:32:7a:77:66:97:ab:83:35:a4:f8:c2:e3:9f:bb:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.104.0/21
                  77.247.0.0/20
                  185.71.48.0/22
                  192.76.118.0/23
                  212.11.80.0/21
                IPv6:
                  2a01:8680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39115
                  42808

    Signature Algorithm: sha256WithRSAEncryption
         98:de:30:4e:7d:25:12:09:bd:4d:f5:84:5f:06:b6:55:51:4b:
         21:9f:a9:66:f5:54:6e:b4:91:70:9f:2d:38:80:2a:78:bc:5c:
         4d:6e:34:5f:fd:d4:46:28:50:92:c4:de:83:94:6c:b1:31:3d:
         d4:ea:06:53:f5:e6:9e:69:25:84:72:70:53:e6:9a:be:19:23:
         f9:7c:0f:77:8c:78:86:d4:fc:48:51:13:e2:34:d6:38:12:d8:
         ac:61:d0:fe:f5:9e:a5:f6:a2:ad:64:d0:74:19:26:7d:78:c9:
         c2:ed:61:24:5a:19:c7:f1:36:03:b6:df:48:a6:07:c1:fa:d8:
         04:d0:d2:8a:55:4a:05:fe:1c:b3:38:a2:83:28:71:f4:bc:54:
         0b:b6:76:93:77:86:59:2a:91:57:4e:fb:5b:ce:1f:8d:d1:c8:
         c5:61:8e:06:4a:ea:b1:f0:13:fe:29:a3:d0:b6:bc:a8:61:d0:
         4c:86:c8:b3:f1:3a:52:11:d1:da:ce:31:2a:97:7b:f6:4a:01:
         7f:bb:9e:64:11:d7:00:d4:4e:25:2f:83:ab:43:c5:ec:2e:2e:
         f8:24:12:65:21:b6:49:59:4c:27:d6:9a:93:a2:e5:24:d3:54:
         7a:50:14:38:6a:32:e3:bb:2d:f2:74:e4:8f:6d:a7:1a:a6:fb:
         29:5e:27:69
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAYzGuPZm4IaEn+QznS650OG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTU3ODA1MzJlZDI5YTNmODBlN2JhNDE0ZWZjYjM3OWQ5ZWM5N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU5Ld3w0jLr5sVDwPXk+1p/nN4H6
/YFBvWRU0UNqeAs1kYBFP+O9ayLmxYRkL//Yag10tzYnA7P6TwMizpdUY6sbiKlV
M/RxFlZ7DtWXxEcF73lBMg97xWsF1jsJVAPpN+SxynGNiykIfyEaOPnYy95qwk+f
YJjjc/pfH6GFr+40w9vbTekHufCNi4LZFFxmJvMeC4dHcdpYxEMbZXpMvSUjfZxH
ZjEpTv120v0Gb6B9sqod1TrM50FH8cH3sBIEsO99SB+Gfq3MFLm/yLYqaHlv+Clg
oD14QBLzW/thJUv4CMULdBNBsp+13JutIuF5Mnp3ZpergzWk+MLjn7tFpwIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFIFXgFMu0po/gOe6QU78s3nZ7JfJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2RlMzFh
Ni1hYWEzLTQwOWQtOGQ0Zi1mNjE1NTRjNmMxNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZGUzMWE2
LWFhYTMtNDA5ZC04ZDRmLWY2MTU1NGM2YzE0NS8xL2dWZUFVeTdTbWotQTU3cEJU
dnl6ZWRuc2w4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQDLutoAwQETfcAAwQCuUcwAwQBwEx2AwQD1AtQ
MA0EAgACMAcDBQAqAYaAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCYywIDAKc4
MA0GCSqGSIb3DQEBCwUAA4IBAQCY3jBOfSUSCb1N9YRfBrZVUUshn6lm9VRutJFw
ny04gCp4vFxNbjRf/dRGKFCSxN6DlGyxMT3U6gZT9eaeaSWEcnBT5pq+GSP5fA93
jHiG1PxIURPiNNY4EtisYdD+9Z6l9qKtZNB0GSZ9eMnC7WEkWhnH8TYDtt9IpgfB
+tgE0NKKVUoF/hyzOKKDKHH0vFQLtnaTd4ZZKpFXTvtbzh+N0cjFYY4GSuqx8BP+
KaPQtryoYdBMhsiz8TpSEdHazjEql3v2SgF/u55kEdcA1E4lL4OrQ8XsLi74JBJl
IbZJWUwn1pqTouUk01R6UBQ4ajLjuy3ydOSPbacapvspXidp
-----END CERTIFICATE-----
Generated at Fri May 3 03:35:22 2024 by rpki-client on console-fra.rpki-client.org