Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.cer (download)
Hash identifier:          L2DzpMlwQMYuo1NDq4ttA53cReSDpczGZjt+GzbcqkE=
Subject key identifier:   9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB0ACC83C97ECCA874E878B56384849
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 206259
    2: IP: 185.83.144.0/22
    3: IP: 185.174.28.0/22
    4: IP: 2a05:9bc0::/29
    5: IP: 2a0b:8100::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:ac:c8:3c:97:ec:ca:87:4e:87:8b:56:38:48:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:70:89:c1:ef:50:1b:34:6c:38:56:ac:a5:
                    6d:0c:67:62:6f:7d:bb:f2:88:aa:7e:cb:35:12:39:
                    b5:75:c7:ed:3b:3e:0f:f6:fc:4b:5e:97:05:51:1b:
                    b9:15:50:d4:b9:ac:32:48:bb:2b:26:35:12:d9:fe:
                    4c:aa:d8:af:e1:6f:6b:8c:7e:41:c3:67:d8:1f:ef:
                    2d:bd:69:eb:a9:9f:87:fe:8a:1f:d5:56:cd:6f:21:
                    ac:4f:6c:81:7d:6a:30:0d:7b:05:cc:22:fe:13:e6:
                    d0:ed:ba:ba:75:8a:bf:79:71:06:c6:13:ff:47:be:
                    13:ce:93:d5:b6:fa:93:0a:01:60:46:50:58:5f:f5:
                    ee:3d:fd:39:b9:df:51:b2:0f:57:ef:3b:84:ed:70:
                    a5:58:17:cf:f4:db:71:d5:64:78:49:a3:f5:ce:54:
                    77:cd:b8:28:a0:cc:da:15:b3:a0:54:f6:f1:d4:cc:
                    ff:a7:b1:9b:1f:14:9f:db:dd:62:5c:2e:33:e1:64:
                    f4:12:f9:05:e6:6d:cf:db:f1:c1:1a:63:7c:64:7c:
                    f9:ba:ad:0d:30:b8:76:42:b9:fc:4d:8f:c0:93:04:
                    56:17:02:9e:a4:f4:7e:ef:a7:98:c6:e4:df:00:07:
                    75:b8:60:20:6f:ec:6e:5a:86:ce:62:f5:6d:3c:1f:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.144.0/22
                  185.174.28.0/22
                IPv6:
                  2a05:9bc0::/29
                  2a0b:8100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206259

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:21:2c:f1:08:ff:11:5b:e8:e3:9d:82:ac:7f:8d:77:9a:
         4f:1c:a5:d4:52:1d:6a:63:3f:99:4c:77:91:27:bb:3f:6b:3b:
         91:36:16:97:44:13:05:82:b1:8f:05:48:f9:ce:33:27:76:de:
         b8:66:8e:bf:d5:89:bb:97:16:84:15:b6:22:e5:d4:a7:69:0c:
         5e:b1:f7:c7:6e:f1:52:e4:81:2e:fa:53:a9:98:0c:b6:09:cc:
         be:f4:51:e6:3b:ad:fc:a2:8c:e9:49:a0:69:97:8c:c3:fd:13:
         a7:8d:76:78:86:71:22:06:a6:1c:d7:f0:d6:9e:fb:05:f2:51:
         60:40:ab:c0:55:19:d7:c3:06:20:28:99:6b:6e:03:40:65:a6:
         da:8d:04:46:8c:6c:99:be:b7:44:f6:34:e0:82:4d:e4:fd:58:
         41:44:34:c1:2d:f1:df:7b:5f:83:6f:3a:86:7e:7b:ea:31:ca:
         20:8c:65:51:4e:45:b0:35:8a:a8:0c:83:ca:be:98:e5:41:42:
         27:8a:b5:52:ec:8d:a3:03:ad:40:3b:17:0b:26:31:af:52:08:
         37:c0:12:ac:a0:b0:70:af:cc:b0:fc:58:f7:f8:10:14:7b:74:
         0b:03:83:02:5a:5a:70:c8:46:fc:2a:db:cc:09:00:ca:65:c6:
         d6:0e:11:f8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAYVvsKzIPJfsyodOh4tWOEhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDUxMzhlMWZhY2Y3YjY1ZGJiNTc1ZmE3ZDQ3MjQwYzI3OGIzNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6pwicHvUBs0bDhWrKVtDGdib327
8oiqfss1Ejm1dcftOz4P9vxLXpcFURu5FVDUuawySLsrJjUS2f5Mqtiv4W9rjH5B
w2fYH+8tvWnrqZ+H/oof1VbNbyGsT2yBfWowDXsFzCL+E+bQ7bq6dYq/eXEGxhP/
R74TzpPVtvqTCgFgRlBYX/XuPf05ud9Rsg9X7zuE7XClWBfP9Ntx1WR4SaP1zlR3
zbgooMzaFbOgVPbx1Mz/p7GbHxSf291iXC4z4WT0EvkF5m3P2/HBGmN8ZHz5uq0N
MLh2Qrn8TY/AkwRWFwKepPR+76eYxuTfAAd1uGAgb+xuWobOYvVtPB/oBwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFJ1ROOH6z3tl27V1+n1HJAwnizTfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2QwMDFm
Zi04MzIzLTRiODktYmUzZC1jMmVmZWIzYjMyYTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZDAwMWZm
LTgzMjMtNGI4OS1iZTNkLWMyZWZlYjNiMzJhNS8xL25WRTQ0ZnJQZTJYYnRYWDZm
VWNrRENlTE5OOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuVOQAwQCua4cMBQEAgACMA4DBQMqBZvAAwUD
KguBADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJbMwDQYJKoZIhvcNAQELBQAD
ggEBAAvQISzxCP8RW+jjnYKsf413mk8cpdRSHWpjP5lMd5Enuz9rO5E2FpdEEwWC
sY8FSPnOMyd23rhmjr/VibuXFoQVtiLl1KdpDF6x98du8VLkgS76U6mYDLYJzL70
UeY7rfyijOlJoGmXjMP9E6eNdniGcSIGphzX8Nae+wXyUWBAq8BVGdfDBiAomWtu
A0BlptqNBEaMbJm+t0T2NOCCTeT9WEFENMEt8d97X4NvOoZ+e+oxyiCMZVFORbA1
iqgMg8q+mOVBQieKtVLsjaMDrUA7FwsmMa9SCDfAEqygsHCvzLD8WPf4EBR7dAsD
gwJaWnDIRvwq28wJAMplxtYOEfg=
-----END CERTIFICATE-----
Generated at Wed Feb 8 07:07:24 2023 by rpki-client.