Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
File:                     n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer (raw, json)
Hash identifier:          4kp7T36YlwHbMtRa2V0iJTioARQ4dRUiW1Ik+wEoNpM=
Subject key identifier:   9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC80122D445C7103FEF69DFF08E0921C7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204068
                          IP: 193.243.183.64/26
                          IP: 2001:7f8:53::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:22:d4:45:c7:10:3f:ef:69:df:f0:8e:09:21:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:87:3e:0b:8c:a4:73:e4:a2:e3:c2:c9:50:
                    b9:de:0d:12:1e:4a:ce:7d:a2:49:43:3c:f3:36:79:
                    a4:cd:3d:17:4e:7a:1f:dd:3c:41:bf:c5:f2:90:6e:
                    ab:24:e1:53:93:d4:63:b4:cd:67:af:5a:dd:bb:1d:
                    01:f8:8e:24:0f:9c:6e:06:92:f4:41:83:67:94:e6:
                    38:1c:1e:88:54:7e:3e:a0:fc:0e:7c:7c:17:1c:14:
                    40:5f:f8:e9:da:6d:2c:9b:4a:e8:68:94:ab:b2:a2:
                    de:d6:d1:7d:84:1c:c4:2e:17:91:1c:a5:a5:12:e9:
                    03:c5:71:d4:74:6d:fc:46:0a:31:2e:f8:56:82:b2:
                    21:53:b2:2d:14:47:e7:19:98:11:c6:6c:a6:aa:22:
                    25:79:66:60:8a:47:ba:c7:f5:5d:cf:a6:1f:31:9c:
                    26:90:4a:2d:60:2f:a8:bd:ad:de:f6:72:1e:9e:72:
                    7a:98:0e:3a:06:63:73:2c:bc:53:2a:27:e1:4c:dd:
                    a3:04:2e:58:e2:0f:ed:86:9c:df:ea:7f:04:8f:8f:
                    e7:d4:55:10:63:04:44:84:b9:71:ed:13:77:b9:d3:
                    83:1d:ea:ef:4b:2b:f4:f4:8f:10:5c:fb:2f:6e:6e:
                    79:20:1c:f7:c4:15:7f:85:db:94:62:01:2d:e2:c4:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.183.64/26
                IPv6:
                  2001:7f8:53::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204068

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:22:35:44:e1:ae:7b:9b:2f:94:ad:17:15:12:38:d1:58:
         ca:f5:b1:6d:df:70:e6:15:6b:40:88:7d:01:bd:8c:58:12:a0:
         d0:d3:0c:81:b1:96:a1:77:fe:ce:f1:3e:4f:82:54:22:df:85:
         0e:60:7b:71:11:00:87:76:71:65:9b:85:d6:9b:d8:f9:f4:45:
         40:dc:1f:c9:55:50:73:3a:4b:b8:9b:99:c4:a4:28:32:0c:41:
         7a:74:e0:78:c5:0c:f3:f9:fb:d3:03:d7:82:e7:49:7a:31:55:
         e3:ed:cd:de:74:c2:a6:ec:0a:9a:a5:1a:20:95:85:d2:da:00:
         ed:09:ea:7a:7d:17:42:6a:c4:b5:3c:ff:84:69:22:ee:23:51:
         8f:f9:78:e6:67:ca:8c:6f:72:46:24:1f:52:8a:e7:20:61:9b:
         62:8f:fd:5b:cf:d7:4a:ee:3e:8d:46:2f:d6:17:cc:9d:b3:0a:
         6e:2e:be:d6:15:00:67:78:8b:02:53:ec:74:8f:3d:aa:47:08:
         4d:ce:fc:0a:1c:15:35:4e:9d:98:04:b3:ca:62:d1:0f:c3:61:
         ed:73:c3:7b:e1:f7:92:35:ad:58:23:16:9b:53:c2:2d:11:92:
         9e:cf:e4:f9:50:41:cb:ee:27:d1:30:2a:12:d4:a5:3c:a5:26:
         ff:38:58:85
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAYzIASLURccQP+9p3/COCSHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmYwN2Y1MDllOTQ3YjI2N2Y4N2JhMGFkZTg5ZWM0ZDNhZTU2YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0GHPguMpHPkouPCyVC53g0SHkrO
faJJQzzzNnmkzT0XTnof3TxBv8XykG6rJOFTk9RjtM1nr1rdux0B+I4kD5xuBpL0
QYNnlOY4HB6IVH4+oPwOfHwXHBRAX/jp2m0sm0roaJSrsqLe1tF9hBzELheRHKWl
EukDxXHUdG38RgoxLvhWgrIhU7ItFEfnGZgRxmymqiIleWZgike6x/Vdz6YfMZwm
kEotYC+ova3e9nIennJ6mA46BmNzLLxTKifhTN2jBC5Y4g/thpzf6n8Ej4/n1FUQ
YwREhLlx7RN3udODHervSyv09I8QXPsvbm55IBz3xBV/hduUYgEt4sQ0KQIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFJ/wf1CelHsmf4e6Ct6J7E065Wo+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzQxOTUz
YS03OWJhLTQ0MDItYmNkZS04OTk4YWFhN2YzMTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNDE5NTNh
LTc5YmEtNDQwMi1iY2RlLTg5OThhYWE3ZjMxNS8xL25fQl9VSjZVZXlaX2g3b0sz
b25zVFRybGFqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDANBAIAATAHAwUGwfO3QDAPBAIAAjAJAwcAIAEH+ABTMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwMdJDANBgkqhkiG9w0BAQsFAAOCAQEAgKEiNUTh
rnubL5StFxUSONFYyvWxbd9w5hVrQIh9Ab2MWBKg0NMMgbGWoXf+zvE+T4JUIt+F
DmB7cREAh3ZxZZuF1pvY+fRFQNwfyVVQczpLuJuZxKQoMgxBenTgeMUM8/n70wPX
gudJejFV4+3N3nTCpuwKmqUaIJWF0toA7Qnqen0XQmrEtTz/hGki7iNRj/l45mfK
jG9yRiQfUornIGGbYo/9W8/XSu4+jUYv1hfMnbMKbi6+1hUAZ3iLAlPsdI89qkcI
Tc78ChwVNU6dmASzymLRD8Nh7XPDe+H3kjWtWCMWm1PCLRGSns/k+VBBy+4n0TAq
EtSlPKUm/zhYhQ==
-----END CERTIFICATE-----
Generated at Fri May 3 03:41:57 2024 by rpki-client on console-fra.rpki-client.org