Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
File:                     pTmv66zomajuC7T4u0R1_iR6FSg.cer (raw, json)
Hash identifier:          XoKh2F3nPdSkFM7xBSxRVlfKV9N2rnoFVmSvW5U2dCE=
Subject key identifier:   A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348F27D1D3AB56EBABE6B8361CFCB63
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:46 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 40979 -- 40980
                          AS: 42354
                          AS: 42360
                          AS: 42388
                          AS: 42473
                          AS: 47147
                          AS: 51453
                          AS: 199159
                          IP: 2.57.104.0/22
                          IP: 37.235.0.0/21
                          IP: 37.252.224.0/19
                          IP: 45.84.252.0/22
                          IP: 45.132.60.0/22
                          IP: 45.147.108.0/22
                          IP: 86.62.32.0/22
                          IP: 94.16.0.0/19
                          IP: 94.16.96.0/19
                          IP: 144.208.192.0/18
                          IP: 176.123.54.0/23
                          IP: 178.255.152.0/21
                          IP: 185.2.176.0/22
                          IP: 185.50.232.0/22
                          IP: 185.81.204.0 -- 185.81.211.255
                          IP: 185.116.96.0/22
                          IP: 185.216.176.0/22
                          IP: 185.228.148.0/22
                          IP: 185.232.68.0/22
                          IP: 188.65.72.0/21
                          IP: 188.172.192.0/18
                          IP: 193.26.156.0/22
                          IP: 193.33.114.0/23
                          IP: 194.1.206.0/24
                          IP: 194.36.144.0/22
                          IP: 213.227.160.0/19
                          IP: 217.146.0.0/19
                          IP: 2a00:11c0::/32
                          IP: 2a00:d9c0::/32
                          IP: 2a01:6740::/32
                          IP: 2a01:aea0::/32
                          IP: 2a05:8900::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:f2:7d:1d:3a:b5:6e:ba:be:6b:83:61:cf:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:04:75:52:e0:42:fb:98:f3:6c:b5:0b:1c:
                    b9:15:84:89:1c:8b:e5:97:e4:8a:52:4e:4f:20:83:
                    b0:4e:9d:dc:af:06:41:b8:37:03:6c:bf:c3:98:02:
                    44:1f:e7:72:a6:56:4c:5d:fe:60:14:e3:e0:64:5f:
                    2b:64:d7:a6:1e:f6:b2:ca:81:2f:db:34:e4:7d:e8:
                    c8:97:6e:5e:ed:db:15:dc:a5:ff:90:9b:30:64:91:
                    3b:b6:53:75:0c:3d:3a:d7:65:db:b9:ec:58:4a:cf:
                    67:89:35:22:67:61:97:12:9a:15:8d:b5:ef:0c:3e:
                    25:84:b3:67:f2:53:ec:8b:ac:2c:ce:64:3c:da:b4:
                    c8:be:21:3b:0f:e4:1a:ff:0f:8d:f3:87:ec:f9:2e:
                    ed:52:e9:48:2c:59:97:61:bf:bb:ef:10:fd:59:f5:
                    95:b6:27:6e:7f:5e:01:4b:be:fc:bc:ac:b4:07:ff:
                    48:42:c6:aa:7b:5d:a0:83:fa:b5:a7:4d:6c:c0:f5:
                    05:87:bc:6e:03:f0:ae:ed:f2:4f:9f:2f:af:17:d1:
                    06:21:bf:75:a8:20:ea:2b:7e:c6:9b:cd:1b:2b:58:
                    45:00:d8:b6:bd:5b:d7:57:60:ff:21:3a:af:ec:a4:
                    fd:7c:2c:0d:1e:bc:0f:28:c0:45:bf:6c:05:1c:76:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.104.0/22
                  37.235.0.0/21
                  37.252.224.0/19
                  45.84.252.0/22
                  45.132.60.0/22
                  45.147.108.0/22
                  86.62.32.0/22
                  94.16.0.0/19
                  94.16.96.0/19
                  144.208.192.0/18
                  176.123.54.0/23
                  178.255.152.0/21
                  185.2.176.0/22
                  185.50.232.0/22
                  185.81.204.0-185.81.211.255
                  185.116.96.0/22
                  185.216.176.0/22
                  185.228.148.0/22
                  185.232.68.0/22
                  188.65.72.0/21
                  188.172.192.0/18
                  193.26.156.0/22
                  193.33.114.0/23
                  194.1.206.0/24
                  194.36.144.0/22
                  213.227.160.0/19
                  217.146.0.0/19
                IPv6:
                  2a00:11c0::/32
                  2a00:d9c0::/32
                  2a01:6740::/32
                  2a01:aea0::/32
                  2a05:8900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40979-40980
                  42354
                  42360
                  42388
                  42473
                  47147
                  51453
                  199159

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:68:d0:f8:13:4d:c8:20:bf:9e:4b:e3:9f:fd:36:ac:81:
         9c:66:3c:1a:8a:e3:a1:f5:44:1e:20:ae:46:52:15:eb:93:84:
         50:f8:a4:53:5f:97:49:81:a0:db:73:14:71:71:ed:73:25:6d:
         9b:70:96:4e:fe:b9:ee:58:f8:14:23:cd:a8:e7:1e:6a:99:a2:
         70:42:eb:7b:a3:b5:c9:42:0a:23:f9:90:12:78:82:61:1f:f2:
         e6:eb:f1:0f:e1:de:d8:0f:ce:7d:ff:b9:3a:7e:fa:cd:7b:97:
         f1:8e:72:ca:23:77:47:68:5a:b4:83:ef:6c:bb:27:b2:ed:e8:
         a0:ef:d8:d1:19:36:60:0f:c7:bf:9c:02:f3:eb:c5:1a:4e:15:
         ff:7d:0c:b4:cb:76:2d:26:67:68:f7:b3:19:7f:db:f1:ad:2c:
         df:84:d1:e9:ff:0a:70:36:97:e2:79:9d:0a:f9:38:7b:92:c6:
         3d:08:bb:af:96:6c:97:73:ba:31:ab:66:08:91:1e:3c:2f:a3:
         08:5c:63:5f:fc:a4:bd:87:f5:a5:e5:3a:e1:58:8c:c7:c0:9a:
         56:7b:ae:58:55:a2:9c:7b:5e:2d:d6:53:4c:15:8e:ae:30:33:
         a4:9e:21:ff:fd:db:50:44:bf:81:f1:73:ae:d5:8d:3b:9e:9b:
         db:9f:ce:b5
-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgISAYzDSPJ9HTq1brq+a4Nhz8tjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTM5YWZlYmFjZTg5OWE4ZWUwYmI0ZjhiYjQ0NzVmZTI0N2ExNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aIEdVLgQvuY82y1Cxy5FYSJHIvl
l+SKUk5PIIOwTp3crwZBuDcDbL/DmAJEH+dyplZMXf5gFOPgZF8rZNemHvayyoEv
2zTkfejIl25e7dsV3KX/kJswZJE7tlN1DD0612XbuexYSs9niTUiZ2GXEpoVjbXv
DD4lhLNn8lPsi6wszmQ82rTIviE7D+Qa/w+N84fs+S7tUulILFmXYb+77xD9WfWV
tiduf14BS778vKy0B/9IQsaqe12gg/q1p01swPUFh7xuA/Cu7fJPny+vF9EGIb91
qCDqK37Gm80bK1hFANi2vVvXV2D/ITqv7KT9fCwNHrwPKMBFv2wFHHYTMwIDAQAB
o4IDnjCCA5owHQYDVR0OBBYEFKU5r+us6Jmo7gu0+LtEdf4kehUoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzk4YzRl
ZS0yZjU5LTQ1YTctYWRiNi03NDEzOTU5MTMxMmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvOThjNGVl
LTJmNTktNDVhNy1hZGI2LTc0MTM5NTkxMzEyZS8xL3BUbXY2NnpvbWFqdUM3VDR1
MFIxX2lSNkZTZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHyBggrBgEF
BQcBBwEB/wSB4jCB3zCBsQQCAAEwgaoDBAICOWgDBAMl6wADBAUl/OADBAItVPwD
BAIthDwDBAItk2wDBAJWPiADBAVeEAADBAVeEGADBAaQ0MADBAGwezYDBAOy/5gD
BAK5ArADBAK5MugwDAMEArlRzAMEArlR0AMEArl0YAMEArnYsAMEArnklAMEArno
RAMEA7xBSAMEBryswAMEAsEanAMEAcEhcgMEAMIBzgMEAsIkkAMEBdXjoAMEBdmS
ADApBAIAAjAjAwUAKgARwAMFACoA2cADBQAqAWdAAwUAKgGuoAMFAyoFiQAwRAYI
KwYBBQUHAQgBAf8ENTAzoDEwLzAKAgMAoBMCAwCgFAIDAKVyAgMApXgCAwCllAID
AKXpAgMAuCsCAwDI/QIDAwn3MA0GCSqGSIb3DQEBCwUAA4IBAQCT0WjQ+BNNyCC/
nkvjn/02rIGcZjwaiuOh9UQeIK5GUhXrk4RQ+KRTX5dJgaDbcxRxce1zJW2bcJZO
/rnuWPgUI82o5x5qmaJwQut7o7XJQgoj+ZASeIJhH/Lm6/EP4d7YD859/7k6fvrN
e5fxjnLKI3dHaFq0g+9suyey7eig79jRGTZgD8e/nALz68UaThX/fQy0y3YtJmdo
97MZf9vxrSzfhNHp/wpwNpfieZ0K+Th7ksY9CLuvlmyXc7oxq2YIkR48L6MIXGNf
/KS9h/Wl5TrhWIzHwJpWe65YVaKce14t1lNMFY6uMDOkniH//dtQRL+B8XOu1Y07
npvbn861
-----END CERTIFICATE-----
Generated at Fri May 3 12:03:10 2024 by rpki-client on console-ams.rpki-client.org