Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer (raw, json)
Hash identifier:          Mbq42KmWS8MlGyPHShvmXSaylQsHEmTTXxBTATNa+is=
Subject key identifier:   B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5011C55E356404EE90BC0FC5B75140C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 57929
                          AS: 199603
                          IP: 37.46.88.0/21
                          IP: 2a00:71c0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:1c:55:e3:56:40:4e:e9:0b:c0:fc:5b:75:14:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:e9:1b:43:14:f1:58:73:05:55:08:13:7e:
                    da:dd:fa:d2:fb:96:e8:16:4f:ed:ba:96:dd:3c:7f:
                    98:f1:4a:57:74:2a:6d:95:b5:b9:48:0c:cb:91:8d:
                    2d:18:21:fd:07:ca:01:35:93:6c:12:93:83:2d:1e:
                    60:1a:f3:ac:4b:90:e2:a0:6c:67:95:ee:7c:f4:52:
                    b4:fb:5b:1d:fb:bd:b8:54:9b:41:0a:3f:c8:ec:fb:
                    56:94:ee:d7:5a:91:3a:83:af:44:9a:1f:d9:e7:1a:
                    0e:92:70:44:1e:b1:f3:82:cc:7e:fc:45:e9:83:78:
                    19:7f:65:54:ce:ee:ea:74:69:45:db:c7:52:fa:8e:
                    61:aa:72:59:12:b2:69:7e:d0:1c:0f:12:cb:5f:4a:
                    e7:3e:19:04:08:1a:7f:62:be:b6:67:18:26:37:54:
                    42:77:e6:93:50:f1:49:2c:3c:11:a9:70:27:f0:87:
                    fa:cc:5e:20:d6:d6:a5:36:14:f3:ca:6d:71:72:2b:
                    bd:4d:b1:fb:e5:26:44:6e:27:d1:10:b7:32:65:5b:
                    06:3e:03:ca:4e:5b:ae:15:96:f9:f2:ea:d7:8e:e5:
                    d8:d4:3f:b6:85:ad:6a:f2:45:36:f7:44:47:73:65:
                    25:d3:bd:cb:0f:7b:79:f9:1a:98:41:84:e4:5e:14:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.88.0/21
                IPv6:
                  2a00:71c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57929
                  199603

    Signature Algorithm: sha256WithRSAEncryption
         40:59:f0:fa:63:01:4f:d9:4a:da:84:2d:38:bd:41:3f:d9:bb:
         21:f1:91:aa:dc:e4:19:b0:23:26:62:34:18:c0:86:d3:8f:f2:
         bb:12:ff:95:df:5f:74:42:7d:dc:38:27:f1:39:fb:38:17:d0:
         97:d3:d4:fa:e7:1f:d7:dc:fd:3b:fa:50:39:9b:56:0a:31:b9:
         fb:3e:a9:92:b8:f8:8b:62:a0:1d:2c:42:b2:c3:1b:9a:12:c2:
         f9:bf:b6:e7:66:eb:f0:d6:c8:5b:6a:a7:9b:48:49:fc:94:7a:
         7f:d4:8d:60:76:87:cf:87:9a:07:e2:d5:02:dc:6c:06:5b:c4:
         d0:b3:ed:fa:03:d7:b2:a7:01:48:1a:7b:3e:2a:9c:5d:2f:63:
         12:7a:b5:b7:92:e3:1b:59:bd:1f:95:88:9f:d7:53:53:d9:50:
         16:9c:03:69:ac:69:9c:81:8b:2e:ee:4e:bc:6f:cd:1e:4d:81:
         f0:c4:60:a3:0f:cc:c0:da:7c:d9:31:54:bd:bc:70:a6:d2:a6:
         5c:92:aa:74:24:1e:a7:5d:48:3a:bd:f4:2d:79:ce:69:77:34:
         dc:cd:e9:37:4f:7e:9f:38:b8:db:eb:83:a0:dc:50:78:d7:c1:
         6b:89:72:5d:9d:4b:f8:75:f2:32:03:97:c1:cf:53:8b:0a:06:
         d5:4b:ab:8e
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYzFARxV41ZATukLwPxbdRQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWVlNmVjMWFmM2U4ODU1NzgwYjU3ZDUwYzMzYjZjOGVlMzMyNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOfpG0MU8VhzBVUIE37a3frS+5bo
Fk/tupbdPH+Y8UpXdCptlbW5SAzLkY0tGCH9B8oBNZNsEpODLR5gGvOsS5DioGxn
le589FK0+1sd+724VJtBCj/I7PtWlO7XWpE6g69Emh/Z5xoOknBEHrHzgsx+/EXp
g3gZf2VUzu7qdGlF28dS+o5hqnJZErJpftAcDxLLX0rnPhkECBp/Yr62ZxgmN1RC
d+aTUPFJLDwRqXAn8If6zF4g1talNhTzym1xciu9TbH75SZEbifRELcyZVsGPgPK
TluuFZb58urXjuXY1D+2ha1q8kU290RHc2Ul073LD3t5+RqYQYTkXhQFPQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFLHubsGvPohVeAtX1QwztsjuMySkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzIwZGFi
OC00ZGQ2LTQwZjUtOWMyMi02NTI2NDYzNjY2OTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjBkYWI4
LTRkZDYtNDBmNS05YzIyLTY1MjY0NjM2NjY5MS8xL3NlNXV3YTgtaUZWNEMxZlZE
RE8yeU80ekpLUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDJS5YMA0EAgACMAcDBQAqAHHAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDiSQIDAwuzMA0GCSqGSIb3DQEBCwUAA4IBAQBAWfD6
YwFP2UrahC04vUE/2bsh8ZGq3OQZsCMmYjQYwIbTj/K7Ev+V3190Qn3cOCfxOfs4
F9CX09T65x/X3P07+lA5m1YKMbn7PqmSuPiLYqAdLEKywxuaEsL5v7bnZuvw1shb
aqebSEn8lHp/1I1gdofPh5oH4tUC3GwGW8TQs+36A9eypwFIGns+KpxdL2MSerW3
kuMbWb0flYif11NT2VAWnANprGmcgYsu7k68b80eTYHwxGCjD8zA2nzZMVS9vHCm
0qZckqp0JB6nXUg6vfQtec5pdzTczek3T36fOLjb64Og3FB418FriXJdnUv4dfIy
A5fBz1OLCgbVS6uO
-----END CERTIFICATE-----
Generated at Fri May 3 09:39:21 2024 by rpki-client on console-ams.rpki-client.org