Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
File:                     hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer (raw, json)
Hash identifier:          tPCAG/Neh0TNpw7WKSFX/bCdugtn/+iIROOuxDXn3+Q=
Subject key identifier:   86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B07333C8D921EC2E130D246A5187A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:30:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49360
                          IP: 5.56.8.0/21
                          IP: 5.83.120.0/21
                          IP: 31.7.144.0/20
                          IP: 45.90.232.0/22
                          IP: 91.214.72.0/22
                          IP: 185.29.248.0/22
                          IP: 2a0a:d3c0::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:07:33:3c:8d:92:1e:c2:e1:30:d2:46:a5:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:30:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=869569a2526687da91a7ecd4f567f5409cdffe79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:25:85:17:0b:4d:fb:17:6b:90:c8:67:62:
                    f5:1b:ea:94:ba:0e:80:e3:22:0a:d7:7a:9b:bd:74:
                    ec:1b:a6:c9:7c:c7:24:54:f7:4e:95:71:3d:37:f3:
                    cd:d3:c8:08:03:d1:7f:22:52:92:05:b3:6e:33:26:
                    8c:e7:dd:b7:66:6c:5f:b0:bf:7b:bb:6c:ad:38:e4:
                    04:56:5e:0a:a3:20:0e:9b:2f:dc:df:6c:9e:62:89:
                    05:65:52:0c:60:0f:85:37:36:bd:12:69:da:ff:6a:
                    85:27:f4:05:5d:9a:89:0b:08:19:82:fa:72:d2:c7:
                    f1:06:0f:8e:67:a0:c2:ea:c7:a6:8d:91:8b:76:d7:
                    1f:08:7b:18:41:86:eb:13:87:2f:80:29:1c:ac:ca:
                    94:14:7d:33:4e:56:8e:39:29:94:98:2a:79:c8:be:
                    be:46:3e:3f:7d:9d:61:1a:a0:bf:b2:37:b0:07:45:
                    82:06:7f:2f:ab:47:37:ba:df:0b:e4:16:2a:25:0e:
                    08:2b:4e:93:e5:c4:26:ca:fc:25:58:18:ba:7d:b4:
                    01:4c:80:e7:ce:db:7c:e4:d8:75:64:95:4d:2f:39:
                    45:05:5b:ec:3f:79:53:c1:66:2a:4d:26:79:19:69:
                    45:a1:2b:87:61:64:27:f5:26:07:84:af:53:4f:ab:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.8.0/21
                  5.83.120.0/21
                  31.7.144.0/20
                  45.90.232.0/22
                  91.214.72.0/22
                  185.29.248.0/22
                IPv6:
                  2a0a:d3c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49360

    Signature Algorithm: sha256WithRSAEncryption
         9d:89:50:4b:5a:a8:29:25:5e:8d:c1:07:4b:9d:f3:4d:0a:04:
         2a:55:89:38:e6:42:c8:05:d5:d0:15:49:37:cd:8f:19:2a:a8:
         53:1c:5d:22:fd:92:e8:80:79:10:06:c7:11:b8:dc:f8:6f:7c:
         cd:78:09:a6:5d:78:d9:e2:91:29:3f:a0:99:5f:b1:1e:a7:ed:
         e2:df:f6:d4:41:85:0e:64:0c:d8:37:73:f8:74:aa:80:64:71:
         d2:85:ea:5e:14:18:9a:f5:3d:7f:f2:82:c9:cf:55:22:66:cf:
         7d:48:b9:bb:0e:9d:3e:77:75:cb:6b:14:36:12:fb:28:e3:a3:
         86:21:54:15:57:c1:6d:4e:f9:ff:4d:b5:38:89:48:4b:3a:65:
         e2:5a:5a:9d:b0:2a:e8:c7:eb:7c:4e:41:ec:c6:5d:b0:a5:df:
         64:c8:f8:87:91:7b:95:b0:30:ab:70:75:56:79:5c:a3:9a:3c:
         9e:ee:5a:1d:79:63:4f:fb:48:6b:d4:21:57:aa:d9:65:a4:37:
         55:d8:9f:6a:fe:78:ea:a0:40:5f:7e:68:af:c4:80:c8:d2:ce:
         06:d2:b4:cd:97:b7:9f:95:a4:fc:d7:f0:29:99:88:b1:2c:c4:
         31:d8:88:fb:ce:1c:d6:b1:6c:af:57:7c:8f:59:04:de:d1:30:
         3b:da:5a:fd
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYzGSwczPI2SHsLhMNJGpRh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njk1NjlhMjUyNjY4N2RhOTFhN2VjZDRmNTY3ZjU0MDljZGZmZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdYlhRcLTfsXa5DIZ2L1G+qUug6A
4yIK13qbvXTsG6bJfMckVPdOlXE9N/PN08gIA9F/IlKSBbNuMyaM5923ZmxfsL97
u2ytOOQEVl4KoyAOmy/c32yeYokFZVIMYA+FNza9Emna/2qFJ/QFXZqJCwgZgvpy
0sfxBg+OZ6DC6semjZGLdtcfCHsYQYbrE4cvgCkcrMqUFH0zTlaOOSmUmCp5yL6+
Rj4/fZ1hGqC/sjewB0WCBn8vq0c3ut8L5BYqJQ4IK06T5cQmyvwlWBi6fbQBTIDn
ztt85Nh1ZJVNLzlFBVvsP3lTwWYqTSZ5GWlFoSuHYWQn9SYHhK9TT6sBpQIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFIaVaaJSZofakafs1PVn9UCc3/55MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5Lzc0MGRl
Yy0wNTlmLTQ1YzAtOTk5YS0xZWFhNTkxYjY3NzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNzQwZGVj
LTA1OWYtNDVjMC05OTlhLTFlYWE1OTFiNjc3MS8xL2hwVnBvbEptaDlxUnAtelU5
V2YxUUp6Zl9uay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQDBTgIAwQDBVN4AwQEHweQAwQCLVroAwQCW9ZI
AwQCuR34MA0EAgACMAcDBQMqCtPAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDA
0DANBgkqhkiG9w0BAQsFAAOCAQEAnYlQS1qoKSVejcEHS53zTQoEKlWJOOZCyAXV
0BVJN82PGSqoUxxdIv2S6IB5EAbHEbjc+G98zXgJpl142eKRKT+gmV+xHqft4t/2
1EGFDmQM2Ddz+HSqgGRx0oXqXhQYmvU9f/KCyc9VImbPfUi5uw6dPnd1y2sUNhL7
KOOjhiFUFVfBbU75/021OIlISzpl4lpanbAq6MfrfE5B7MZdsKXfZMj4h5F7lbAw
q3B1Vnlco5o8nu5aHXljT/tIa9QhV6rZZaQ3Vdifav546qBAX35or8SAyNLOBtK0
zZe3n5Wk/NfwKZmIsSzEMdiI+84c1rFsr1d8j1kE3tEwO9pa/Q==
-----END CERTIFICATE-----
Generated at Fri May 3 11:58:16 2024 by rpki-client on console-ams.rpki-client.org