Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer (download)
Hash identifier:          0qCWJZN0sp61dy9ZDA7sjB7wLZkCptDcMLsw3tXPSvw=
Subject key identifier:   8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB2957E8630995A0F24F82A1E7653F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 210694
    2: IP: 45.8.24.0/22
    3: IP: 45.11.52.0/22
    4: IP: 45.11.176.0/22
    5: IP: 45.13.108.0/22
    6: IP: 45.14.216.0/22
    7: IP: 45.15.196.0/22
    8: IP: 45.81.72.0/22
    9: IP: 45.82.4.0/22
   10: IP: 45.83.240.0/22
   11: IP: 45.85.188.0/22
   12: IP: 45.88.84.0/22
   13: IP: 45.88.184.0/22
   14: IP: 45.91.116.0/22
   15: IP: 45.93.149.0 -- 45.93.151.255
   16: IP: 45.132.120.0/22
   17: IP: 45.133.140.0/22
   18: IP: 45.146.60.0/22
   19: IP: 45.146.192.0/22
   20: IP: 45.152.4.0/22
   21: IP: 45.153.200.0/22
   22: IP: 91.212.20.0/24
   23: IP: 91.212.27.0/24
   24: IP: 91.212.38.0/24
   25: IP: 91.212.45.0/24
   26: IP: 193.39.215.0/24
   27: IP: 193.39.246.0/24
   28: IP: 193.39.250.0/24
   29: IP: 193.41.32.0/24
   30: IP: 195.80.230.0/23
   31: IP: 195.82.132.0/23
   32: IP: 2a06:7780::/29
   33: IP: 2a0c:cc40::/29
   34: IP: 2a0d:d000::/29
   35: IP: 2a0e:4200::/29
   36: IP: 2a0e:6300::/29
   37: IP: 2a10:2380::/29
   38: IP: 2a10:38c0::/29
   39: IP: 2a10:3940::/29
   40: IP: 2a10:39c0::/29
   41: IP: 2a10:3a40::/29
   42: IP: 2a10:3ac0::/29
   43: IP: 2a10:3b40::/29
   44: IP: 2a10:3bc0::/29
   45: IP: 2a10:3c40::/29
   46: IP: 2a10:3cc0::/29
   47: IP: 2a10:3d40::/29
   48: IP: 2a10:3dc0::/29
   49: IP: 2a10:3e40::/29
   50: IP: 2a10:5e80::/29
   51: IP: 2a10:5f80::/29
   52: IP: 2a10:6080::/29
   53: IP: 2a10:6180::/29
   54: IP: 2a10:6280::/29
   55: IP: 2a10:6380::/29
   56: IP: 2a10:6480::/29
   57: IP: 2a10:6580::/29
   58: IP: 2a10:6680::/29
   59: IP: 2a10:6780::/29
   60: IP: 2a10:6880::/29
   61: IP: 2a10:6980::/29
   62: IP: 2a10:7280::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:29:57:e8:63:09:95:a0:f2:4f:82:a1:e7:65:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:4b:50:1f:4f:7b:cb:fc:57:20:80:1c:1f:
                    3e:42:07:f8:50:23:c4:89:62:2d:44:d4:b2:d7:af:
                    55:7f:9d:e1:0f:a3:8f:cd:ff:d5:31:2f:85:4d:5b:
                    b3:f4:1c:73:50:25:4f:12:7a:d8:a3:bf:d5:2f:b0:
                    9c:70:ee:5b:b8:fa:7a:04:31:d4:9c:2a:65:b9:3d:
                    05:3a:57:9a:b0:9b:16:b7:70:cc:91:81:aa:b1:10:
                    21:f5:a7:20:23:38:43:0b:38:e1:3b:f1:09:71:d4:
                    86:1a:b3:c8:d7:65:ef:e1:8d:11:0a:b3:1c:0a:6e:
                    a5:94:23:b4:dc:c6:23:48:01:f2:be:27:8f:0b:c3:
                    10:1f:c8:3a:b8:3a:da:4a:a0:01:93:7b:66:eb:02:
                    f2:b6:00:0a:97:7f:b7:96:c9:e9:c7:2b:3b:47:c3:
                    0c:e9:35:b7:e8:6b:51:d2:8e:01:27:60:e3:59:c4:
                    50:0f:8f:08:cf:7f:78:e7:90:25:61:35:ae:17:74:
                    38:30:bc:7d:73:9a:7f:50:70:da:cf:fb:93:74:fd:
                    2c:d5:bf:2c:8a:7d:e5:0b:db:ee:f8:ad:5d:10:20:
                    6f:2a:d1:d4:35:57:a6:5a:04:8b:f3:2b:12:ad:51:
                    cc:bc:10:f6:a7:2c:9f:6f:54:13:cb:e3:6d:08:d2:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.24.0/22
                  45.11.52.0/22
                  45.11.176.0/22
                  45.13.108.0/22
                  45.14.216.0/22
                  45.15.196.0/22
                  45.81.72.0/22
                  45.82.4.0/22
                  45.83.240.0/22
                  45.85.188.0/22
                  45.88.84.0/22
                  45.88.184.0/22
                  45.91.116.0/22
                  45.93.149.0-45.93.151.255
                  45.132.120.0/22
                  45.133.140.0/22
                  45.146.60.0/22
                  45.146.192.0/22
                  45.152.4.0/22
                  45.153.200.0/22
                  91.212.20.0/24
                  91.212.27.0/24
                  91.212.38.0/24
                  91.212.45.0/24
                  193.39.215.0/24
                  193.39.246.0/24
                  193.39.250.0/24
                  193.41.32.0/24
                  195.80.230.0/23
                  195.82.132.0/23
                IPv6:
                  2a06:7780::/29
                  2a0c:cc40::/29
                  2a0d:d000::/29
                  2a0e:4200::/29
                  2a0e:6300::/29
                  2a10:2380::/29
                  2a10:38c0::/29
                  2a10:3940::/29
                  2a10:39c0::/29
                  2a10:3a40::/29
                  2a10:3ac0::/29
                  2a10:3b40::/29
                  2a10:3bc0::/29
                  2a10:3c40::/29
                  2a10:3cc0::/29
                  2a10:3d40::/29
                  2a10:3dc0::/29
                  2a10:3e40::/29
                  2a10:5e80::/29
                  2a10:5f80::/29
                  2a10:6080::/29
                  2a10:6180::/29
                  2a10:6280::/29
                  2a10:6380::/29
                  2a10:6480::/29
                  2a10:6580::/29
                  2a10:6680::/29
                  2a10:6780::/29
                  2a10:6880::/29
                  2a10:6980::/29
                  2a10:7280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210694

    Signature Algorithm: sha256WithRSAEncryption
         2e:70:54:e4:76:52:9b:b2:1c:1a:39:3c:97:cb:e3:32:e6:59:
         1c:ac:b7:3a:95:c6:db:45:93:50:d0:1f:45:51:8e:5b:82:c4:
         e3:c8:c3:f6:8a:f2:8e:00:bf:bf:e2:c7:81:dc:f1:ce:a0:24:
         b7:b0:69:4c:d2:b2:57:65:8d:85:b7:e6:70:58:70:66:7e:1c:
         c8:e3:28:91:1a:9a:14:47:41:cb:94:dc:1b:15:41:27:f5:ac:
         85:9e:37:4f:6f:da:7a:a0:61:ca:09:d6:a7:6a:a3:de:44:ea:
         0f:b4:a8:5f:95:25:82:c0:72:e0:48:4b:8e:7c:87:46:37:d7:
         ae:25:e7:73:8f:e8:94:8e:90:d8:cc:7d:f9:4d:0a:50:c3:ae:
         b5:d8:ac:62:7b:8f:db:ef:d7:27:da:e2:24:4e:05:ce:17:69:
         21:73:63:73:86:ad:41:e7:aa:a3:fb:e6:b4:89:98:e6:c3:bf:
         1d:e2:35:81:8f:4e:77:1e:40:00:bb:b3:3d:19:10:27:f7:36:
         a7:cf:6b:72:09:8f:6e:d4:78:ee:a3:52:84:a6:55:f5:e7:75:
         0f:af:15:b8:7e:7e:34:2d:3f:c6:88:52:33:9d:4f:21:93:e1:
         ae:6c:3c:d9:71:85:b5:17:bd:1c:24:5a:d9:9c:5f:cf:86:32:
         99:f4:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 2 14:51:05 2023 by rpki-client.