Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
File:                     pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer (download)
Hash identifier:          DO43fAQJFaU3ITysv9QXXjv5ps6gmHVMYUPZp6tcRqs=
Subject key identifier:   A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB21CB937CEA4A9E239BF426863C01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 2.56.248.0/22
    2: IP: 2.59.56.0/22
    3: IP: 5.181.176.0/22
    4: IP: 45.12.80.0/22
    5: IP: 45.87.172.0/22
    6: IP: 45.91.136.0/22
    7: IP: 45.137.96.0/22
    8: IP: 45.158.56.0/22
    9: IP: 85.209.220.0/22
   10: IP: 92.119.12.0/22
   11: IP: 171.22.76.0/22
   12: IP: 185.172.172.0/22
   13: IP: 193.37.239.0/24
   14: IP: 193.38.53.0/24
   15: IP: 193.39.9.0 -- 193.39.10.255
   16: IP: 2a0a:c280::/29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:21:cb:93:7c:ea:4a:9e:23:9b:f4:26:86:3c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:a0:82:b5:b4:d7:4d:c5:5c:a4:55:60:16:
                    6f:44:35:f8:02:9a:09:54:e4:a0:8d:11:5c:4b:21:
                    c9:f6:6a:e8:ef:59:0f:b7:d4:65:77:29:b9:3a:f4:
                    2f:e5:84:72:89:12:c3:76:92:30:74:1d:87:89:f2:
                    b7:78:91:31:38:05:f5:d1:ed:cc:b3:db:ca:d1:ab:
                    bd:f2:a0:e0:53:28:5b:f9:21:72:c4:79:14:74:40:
                    2b:be:45:31:d1:53:6c:50:4a:26:a7:22:9c:25:b1:
                    8b:66:89:37:61:21:02:99:f7:51:2e:34:37:43:ca:
                    8e:06:09:b6:d7:ea:45:d7:80:b3:b4:58:d5:09:db:
                    c9:46:dc:30:16:30:37:95:89:97:0d:56:82:5f:8f:
                    12:9a:15:88:2c:0e:7f:32:be:71:d4:3e:00:76:a7:
                    8c:03:a7:9a:35:55:fe:e2:79:f2:d2:ca:76:fc:9e:
                    e7:66:d8:15:2d:1d:ec:66:16:6a:b0:5b:28:67:e2:
                    45:07:6a:7b:bd:98:9a:a2:fe:b8:aa:6c:fa:7d:32:
                    f0:75:25:1a:76:59:5f:cf:3d:3d:bc:5b:af:3c:9f:
                    58:db:6c:83:cd:2b:ec:0d:e1:db:5a:dc:bf:97:98:
                    0e:7e:0b:c4:af:a1:35:ad:b1:f5:75:37:f4:07:ab:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.248.0/22
                  2.59.56.0/22
                  5.181.176.0/22
                  45.12.80.0/22
                  45.87.172.0/22
                  45.91.136.0/22
                  45.137.96.0/22
                  45.158.56.0/22
                  85.209.220.0/22
                  92.119.12.0/22
                  171.22.76.0/22
                  185.172.172.0/22
                  193.37.239.0/24
                  193.38.53.0/24
                  193.39.9.0-193.39.10.255
                IPv6:
                  2a0a:c280::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:dd:97:66:5f:b9:b0:d4:8f:4c:40:9b:bb:bc:ef:32:80:
         1f:12:84:ef:b1:c2:0c:b8:f7:06:12:b5:dc:89:df:a0:11:1d:
         16:1d:69:3b:0f:7d:e8:d6:59:12:51:94:3f:cc:c9:0c:76:8d:
         82:e6:46:d5:d0:05:89:97:bc:63:1c:12:40:0d:d7:a7:de:94:
         5f:5c:ab:13:92:39:9a:07:9b:15:ba:f4:17:cd:a0:a1:34:b4:
         bf:0d:6e:76:de:9f:24:8b:05:bf:93:ea:4f:f3:31:ce:aa:9e:
         15:81:7f:ad:a4:47:eb:7e:2b:ff:b9:35:0e:eb:d6:cf:fc:0f:
         80:df:8d:9a:4d:60:5e:11:d4:0a:80:63:a8:d7:99:01:66:4f:
         ae:31:da:5f:51:ae:d1:6c:b9:72:f7:0e:0b:a5:aa:17:e9:1a:
         f8:ae:b7:3b:c9:f6:6e:c7:e8:3b:47:c3:bf:96:ce:54:7d:57:
         e4:79:c4:d0:1c:7a:84:aa:fc:b6:a4:b0:ff:ba:22:76:5d:3b:
         73:a4:a2:11:4f:2c:d5:e3:19:e6:69:34:64:48:62:61:16:d6:
         81:9b:cf:3a:a3:9a:4f:76:3e:50:0a:79:80:ef:8b:21:e4:a5:
         ab:9b:51:55:8a:40:11:47:e7:cb:73:c6:c5:06:84:28:8c:19:
         5d:3e:fa:97
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAYVu+yHLk3zqSp4jm/QmhjwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jKggrW0103FXKRVYBZvRDX4ApoJ
VOSgjRFcSyHJ9mro71kPt9Rldym5OvQv5YRyiRLDdpIwdB2HifK3eJExOAX10e3M
s9vK0au98qDgUyhb+SFyxHkUdEArvkUx0VNsUEompyKcJbGLZok3YSECmfdRLjQ3
Q8qOBgm21+pF14CztFjVCdvJRtwwFjA3lYmXDVaCX48SmhWILA5/Mr5x1D4AdqeM
A6eaNVX+4nny0sp2/J7nZtgVLR3sZhZqsFsoZ+JFB2p7vZiaov64qmz6fTLwdSUa
dllfzz09vFuvPJ9Y22yDzSvsDeHbWty/l5gOfgvEr6E1rbH1dTf0B6udewIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFKRMJn+nVM1lCen4BycxI77pbFJdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2FiMjZh
NS02N2I5LTQ2NjctODU1Yi00OGFmMDgwMDRiNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYWIyNmE1
LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldVSjZmZ0hK
ekVqdnVsc1VsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGKBggrBgEF
BQcBBwEB/wR7MHkwaAQCAAEwYgMEAgI4+AMEAgI7OAMEAgW1sAMEAi0MUAMEAi1X
rAMEAi1biAMEAi2JYAMEAi2eOAMEAlXR3AMEAlx3DAMEAqsWTAMEArmsrAMEAMEl
7wMEAMEmNTAMAwQAwScJAwQAwScKMA0EAgACMAcDBQMqCsKAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSTt2XZl+5sNSPTECbu7zvMoAfEoTvscIMuPcGErXcid+gER0WHWk7
D33o1lkSUZQ/zMkMdo2C5kbV0AWJl7xjHBJADden3pRfXKsTkjmaB5sVuvQXzaCh
NLS/DW523p8kiwW/k+pP8zHOqp4VgX+tpEfrfiv/uTUO69bP/A+A342aTWBeEdQK
gGOo15kBZk+uMdpfUa7RbLly9w4LpaoX6Rr4rrc7yfZux+g7R8O/ls5UfVfkecTQ
HHqEqvy2pLD/uiJ2XTtzpKIRTyzV4xnmaTRkSGJhFtaBm886o5pPdj5QCnmA74sh
5KWrm1FVikARR+fLc8bFBoQojBldPvqX
-----END CERTIFICATE-----
Generated at Mon Feb 6 18:19:05 2023 by rpki-client.