Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j4sV00wItfH8_0-edMlbx2oLar4.cer
File:                     j4sV00wItfH8_0-edMlbx2oLar4.cer (download)
Hash identifier:          pSU9NssIxki7ZQzfPlCtCgvBTQjhvhbaqIGqTSDe9kQ=
Subject key identifier:   8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBEC04D571F7B784D1B49462D0AFED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 185.249.54.0/24
    2: IP: 2a11:b180::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:ec:04:d5:71:f7:b7:84:d1:b4:94:62:d0:af:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f8b15d34c08b5f1fcff4f9e74c95bc76a0b6abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:7d:f9:dc:11:6b:b8:03:14:28:bd:e0:8d:
                    d3:a5:c1:06:64:eb:5d:66:dd:6b:0a:eb:e9:17:a6:
                    a2:ea:ea:0a:20:42:66:43:ed:1f:e6:e6:4d:3c:40:
                    cc:19:5d:08:c4:5b:9a:18:28:a4:99:f9:62:c9:40:
                    df:51:fc:01:bf:8f:76:96:97:b4:18:30:4d:12:4e:
                    f7:d0:5c:ad:b0:10:c0:06:1b:b6:e0:e0:49:22:66:
                    06:06:17:63:1b:32:9f:c6:44:66:3b:7b:a8:91:92:
                    ed:a2:fc:04:c4:c9:24:0b:bc:aa:71:c8:69:a8:ea:
                    ac:4f:e7:29:41:43:ad:76:2a:6f:65:26:5b:64:7d:
                    9a:1e:c3:fe:64:56:72:83:b7:68:11:ba:f0:60:c3:
                    8c:75:c3:c9:ba:ca:dc:cc:08:66:86:c0:01:77:ba:
                    9e:a3:3c:e6:8c:54:12:52:55:62:e1:fa:64:02:bd:
                    8f:f6:c8:cd:e8:12:50:d1:33:85:cb:0b:1c:49:47:
                    ab:1d:ca:d8:ec:49:57:ce:a7:77:8d:12:2a:10:b1:
                    dd:5c:9c:06:44:5a:ab:b6:a4:9d:35:de:1a:e7:86:
                    12:5e:5b:90:cb:d0:fa:de:45:bb:d7:e3:83:60:3e:
                    40:b9:34:4a:f4:bb:bc:3e:fb:c6:56:fa:23:00:fd:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.54.0/24
                IPv6:
                  2a11:b180::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:9e:e7:38:4b:f2:dd:f2:de:bf:48:e5:69:ed:f5:10:f2:
         fa:1e:0e:a4:a3:f8:e0:1c:c7:6a:12:f0:af:c5:b6:20:87:3b:
         66:f4:f2:89:ae:49:1e:54:4c:bc:a0:0a:d3:c4:49:f9:f8:0c:
         9d:19:5d:92:d5:20:5e:73:df:ab:38:93:74:de:93:b7:8c:81:
         30:ce:81:02:bd:a8:ef:07:e8:ab:8e:35:87:87:48:97:8a:da:
         d4:35:fc:79:5c:b6:ff:38:fd:05:eb:e2:be:5e:a6:7c:24:cd:
         78:07:dd:fa:42:7d:63:48:5a:e2:43:cb:5d:02:af:5a:8a:93:
         2d:23:4a:7a:2a:87:0f:ef:20:ea:9e:10:bb:c1:0e:2a:e2:4c:
         c8:2f:7f:ae:a7:b0:f4:f5:80:73:48:21:18:11:be:b5:0f:90:
         f1:a3:18:4c:08:f6:f7:e8:a2:f5:d8:40:5f:f5:c2:cb:e2:dd:
         ac:bc:27:e4:98:c0:54:0e:11:66:9c:e7:5e:07:0f:93:1d:44:
         96:48:fb:fe:a5:c4:a3:89:ef:db:ee:1c:24:3b:f3:64:36:e7:
         46:23:8e:7a:62:fb:8d:76:db:d1:3f:7d:41:69:d7:73:e1:e8:
         be:6a:90:44:43:15:87:4e:d2:43:88:0e:71:aa:63:4d:64:b0:
         51:8f:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 6 18:15:07 2023 by rpki-client.