Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.cer (raw, json)
Hash identifier:          idqHPTwHZL2/VRE0W/vl4YFCQAjam1l10L7mhZXQ9p4=
Subject key identifier:   81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D62FD988488FB33EA398F781D66CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49292
                          IP: 5.183.164.0/22
                          IP: 62.80.192.0/19
                          IP: 91.231.63.0/24
                          IP: 212.3.0.0/19
                          IP: 2a02:920::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:62:fd:98:84:88:fb:33:ea:39:8f:78:1d:66:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=81689572b200ba4879381c8574274265592a14ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:42:d8:54:ce:3a:63:d8:d3:76:3b:27:99:
                    bc:71:31:04:b2:7c:45:0f:c7:85:13:0f:4c:c5:13:
                    14:73:c6:ee:1d:98:0f:c3:f3:53:12:ee:96:f1:ee:
                    ab:80:37:08:5b:0f:ff:ac:51:b6:93:c2:2b:1c:61:
                    eb:f1:82:79:68:d0:78:cc:da:a5:6c:ca:be:c2:e9:
                    9e:f8:49:d9:db:b6:ac:d3:e0:68:bf:21:83:ef:df:
                    5c:0f:90:39:60:87:38:d4:18:08:7e:fc:2d:8f:bf:
                    ba:84:75:d8:99:8c:ba:76:9d:91:60:10:76:60:d8:
                    ed:ea:25:41:e0:8e:31:b0:fb:0f:81:00:05:27:ab:
                    0c:cf:65:55:14:1f:bb:49:5d:f5:32:36:46:90:29:
                    51:2b:64:55:9e:14:f5:18:77:74:98:8c:91:14:9c:
                    33:6e:1b:f4:06:b2:89:03:32:4c:9f:e8:93:a5:2f:
                    46:e5:bc:66:cf:8d:ad:74:50:fb:98:f9:2f:89:4c:
                    74:e4:6b:b8:cf:6d:3f:58:bb:7a:91:c1:96:9b:36:
                    71:41:82:81:f1:08:90:6e:7b:19:e8:00:f8:fd:32:
                    4b:54:4a:3c:d9:33:3b:7f:f2:a2:07:25:50:1d:77:
                    38:da:31:5e:7c:d4:f7:56:8b:1a:67:49:0e:1d:8e:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.164.0/22
                  62.80.192.0/19
                  91.231.63.0/24
                  212.3.0.0/19
                IPv6:
                  2a02:920::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49292

    Signature Algorithm: sha256WithRSAEncryption
         a6:a5:65:70:8c:2d:d3:58:9f:ad:ca:a2:c7:1d:8d:52:72:4c:
         61:d7:b7:a6:ed:5a:67:18:d8:bb:a4:80:4a:4f:8b:e6:28:78:
         eb:a3:57:19:87:3e:14:e0:ad:56:69:2d:1c:ea:33:85:2c:b4:
         3a:60:0c:4f:0f:10:97:57:ee:3b:cc:7e:49:df:91:a3:2d:35:
         7d:1c:fe:45:ca:16:06:fd:88:61:3a:fb:68:b8:f1:76:51:e5:
         ad:b8:be:07:90:5a:b2:51:a2:73:01:8c:32:88:3e:e9:a6:ba:
         2c:53:74:ce:3f:7c:9e:2e:f4:b3:dd:34:60:4f:71:49:1e:17:
         c1:f6:46:49:6f:61:07:9e:d1:a8:54:6a:08:f8:1b:19:97:28:
         0d:bf:ed:b8:ae:0c:a8:a2:ca:96:18:1a:85:ad:da:9a:76:cc:
         e7:d1:a1:f2:d8:a7:45:03:94:00:b0:27:29:a8:e3:05:bd:ed:
         f6:da:dc:e6:f0:e2:f0:12:2b:cd:75:f3:92:81:49:43:57:e7:
         f0:1e:b5:dc:39:02:35:79:68:c5:44:21:08:a4:a3:9c:4d:0c:
         da:10:29:db:57:71:e5:36:9d:9f:cd:71:d4:ac:d0:de:95:cf:
         39:58:39:cb:59:12:68:7d:9f:b6:a1:e3:2e:e8:63:3a:c1:44:
         4e:35:ad:ca
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAYzCbWL9mISI+zPqOY94HWbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTY4OTU3MmIyMDBiYTQ4NzkzODFjODU3NDI3NDI2NTU5MmExNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYJC2FTOOmPY03Y7J5m8cTEEsnxF
D8eFEw9MxRMUc8buHZgPw/NTEu6W8e6rgDcIWw//rFG2k8IrHGHr8YJ5aNB4zNql
bMq+wume+EnZ27as0+BovyGD799cD5A5YIc41BgIfvwtj7+6hHXYmYy6dp2RYBB2
YNjt6iVB4I4xsPsPgQAFJ6sMz2VVFB+7SV31MjZGkClRK2RVnhT1GHd0mIyRFJwz
bhv0BrKJAzJMn+iTpS9G5bxmz42tdFD7mPkviUx05Gu4z20/WLt6kcGWmzZxQYKB
8QiQbnsZ6AD4/TJLVEo82TM7f/KiByVQHXc42jFefNT3VosaZ0kOHY7x5QIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFIFolXKyALpIeTgchXQnQmVZKhSrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzg4ZDY4
NC01NjI3LTRmZjItYWE0Yi02MjQxNTkyYTk0NGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvODhkNjg0
LTU2MjctNGZmMi1hYTRiLTYyNDE1OTJhOTQ0Yi8xL2dXaVZjcklBdWtoNU9CeUZk
Q2RDWlZrcUZLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQCBbekAwQFPlDAAwQAW+c/AwQF1AMAMA0EAgAC
MAcDBQMqAgkgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDAjDANBgkqhkiG9w0B
AQsFAAOCAQEApqVlcIwt01ifrcqixx2NUnJMYde3pu1aZxjYu6SASk+L5ih466NX
GYc+FOCtVmktHOozhSy0OmAMTw8Ql1fuO8x+Sd+Roy01fRz+RcoWBv2IYTr7aLjx
dlHlrbi+B5BaslGicwGMMog+6aa6LFN0zj98ni70s900YE9xSR4XwfZGSW9hB57R
qFRqCPgbGZcoDb/tuK4MqKLKlhgaha3amnbM59Gh8tinRQOUALAnKajjBb3t9trc
5vDi8BIrzXXzkoFJQ1fn8B613DkCNXloxUQhCKSjnE0M2hAp21dx5Tadn81x1KzQ
3pXPOVg5y1kSaH2ftqHjLuhjOsFETjWtyg==
-----END CERTIFICATE-----
Generated at Fri May 3 07:25:03 2024 by rpki-client on console-ams.rpki-client.org