Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
File:                     tpQiR24a5eoNWOT4_fkfBfEC_vs.cer (raw, json)
Hash identifier:          W+khqcLQHu3noiYHZMsypPsloD4R+rRGqiueTJvWxgw=
Subject key identifier:   B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B92E052C63604E1BC8D7E35EAA5F9A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:31:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60045
                          IP: 146.0.56.0/23
                          IP: 185.15.204.0/22
                          IP: 194.247.170.0/23
                          IP: 2a02:fe40::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:2e:05:2c:63:60:4e:1b:c8:d7:e3:5e:aa:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:31:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:af:fd:a2:77:bf:87:19:4b:48:7d:17:42:
                    1f:19:52:e2:44:40:c1:97:50:a8:fd:55:7e:a6:76:
                    54:48:09:f5:bf:cc:fb:f2:8c:74:5e:40:17:b9:8f:
                    30:7b:1e:1d:69:72:f6:8f:c2:4c:47:6d:2c:12:ca:
                    16:4e:35:b5:ec:33:10:8d:81:9f:57:0d:0d:f6:f7:
                    b1:d2:c1:6b:5d:91:ec:be:70:97:e8:8f:94:12:ba:
                    3a:77:15:e5:ac:92:7d:f5:aa:ae:f4:63:e4:76:d8:
                    07:58:b8:24:34:6f:8e:ff:df:a2:b0:79:9f:c5:6c:
                    82:d9:da:f8:d8:cd:18:d6:15:8c:02:65:bc:81:48:
                    92:b2:84:09:95:ec:13:b2:78:16:32:9b:65:18:f7:
                    ae:a0:84:c2:ab:e8:b6:6a:c7:8e:7a:98:10:bd:ca:
                    4c:9b:be:21:39:fa:6b:c8:0d:25:ea:34:19:c0:c0:
                    42:4a:3c:67:66:c1:e9:bc:75:03:3f:97:63:62:71:
                    1a:e3:91:36:44:59:37:60:02:1b:4b:a4:4b:5d:fe:
                    e9:72:e4:f7:db:b8:f1:63:1e:09:ae:dc:d1:1d:0e:
                    04:72:f8:e3:a9:e1:c1:8e:e5:d6:2e:ab:7d:a1:6a:
                    09:d4:9c:ad:0a:3c:ff:0d:42:2b:24:35:4b:21:13:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.0.56.0/23
                  185.15.204.0/22
                  194.247.170.0/23
                IPv6:
                  2a02:fe40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60045

    Signature Algorithm: sha256WithRSAEncryption
         8c:2a:f7:8c:af:67:bf:e4:5e:73:87:4d:d2:9b:af:37:1d:ef:
         80:9f:f4:a2:de:7d:d0:cd:52:de:0b:fc:e8:74:82:34:48:51:
         c4:12:1c:66:ca:75:9c:19:3f:7f:61:54:58:8c:4d:7b:fc:80:
         ff:d6:80:20:ea:8d:84:12:c3:70:da:1d:59:25:0a:49:fe:06:
         80:4b:9e:ff:5a:cd:48:51:4a:d4:76:0c:cb:6f:15:43:25:86:
         36:33:44:ba:2a:20:f0:76:a8:4c:eb:fe:c5:da:28:6f:d4:2f:
         1c:d2:58:93:ff:07:70:7c:ea:31:82:a0:30:c1:be:0e:2d:1b:
         35:44:55:98:3b:5a:df:ba:e0:42:52:fa:8f:dd:10:bb:15:a3:
         c9:c4:5b:3b:e0:95:e1:44:0a:60:50:ec:82:2f:58:40:98:3f:
         ce:be:d4:4b:92:e8:ca:80:16:ef:f0:36:26:0d:68:24:96:36:
         e8:7c:de:ee:c5:5a:1f:8e:91:c3:69:d0:a6:23:fc:8d:94:76:
         d9:4b:a6:67:3a:3f:25:e7:3c:45:2d:a4:9e:cb:5f:5a:6d:a8:
         ce:ef:22:55:4c:02:a9:39:ab:ee:5d:54:24:1b:de:78:1b:72:
         bb:23:96:1c:1e:fb:01:31:bc:7b:c1:e4:0b:48:b0:1b:c7:27:
         8d:33:5d:f5
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYzGuS4FLGNgThvI1+Neql+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjk0MjI0NzZlMWFlNWVhMGQ1OGU0ZjhmZGY5MWYwNWYxMDJmZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Ov/aJ3v4cZS0h9F0IfGVLiREDB
l1Co/VV+pnZUSAn1v8z78ox0XkAXuY8wex4daXL2j8JMR20sEsoWTjW17DMQjYGf
Vw0N9vex0sFrXZHsvnCX6I+UEro6dxXlrJJ99aqu9GPkdtgHWLgkNG+O/9+isHmf
xWyC2dr42M0Y1hWMAmW8gUiSsoQJlewTsngWMptlGPeuoITCq+i2aseOepgQvcpM
m74hOfpryA0l6jQZwMBCSjxnZsHpvHUDP5djYnEa45E2RFk3YAIbS6RLXf7pcuT3
27jxYx4JrtzRHQ4EcvjjqeHBjuXWLqt9oWoJ1JytCjz/DUIrJDVLIRMxnQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFLaUIkduGuXqDVjk+P35HwXxAv77MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2U0OWFm
ZS0xNWFlLTQ4NWEtYWY3Ni02NjUxNmZmY2U3NTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZTQ5YWZl
LTE1YWUtNDg1YS1hZjc2LTY2NTE2ZmZjZTc1MC8xL3RwUWlSMjRhNWVvTldPVDRf
ZmtmQmZFQ192cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQBkgA4AwQCuQ/MAwQBwveqMA0EAgACMAcDBQMq
Av5AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDqjTANBgkqhkiG9w0BAQsFAAOC
AQEAjCr3jK9nv+Rec4dN0puvNx3vgJ/0ot590M1S3gv86HSCNEhRxBIcZsp1nBk/
f2FUWIxNe/yA/9aAIOqNhBLDcNodWSUKSf4GgEue/1rNSFFK1HYMy28VQyWGNjNE
uiog8HaoTOv+xdoob9QvHNJYk/8HcHzqMYKgMMG+Di0bNURVmDta37rgQlL6j90Q
uxWjycRbO+CV4UQKYFDsgi9YQJg/zr7US5LoyoAW7/A2Jg1oJJY26Hze7sVaH46R
w2nQpiP8jZR22UumZzo/Jec8RS2knstfWm2ozu8iVUwCqTmr7l1UJBveeBtyuyOW
HB77ATG8e8HkC0iwG8cnjTNd9Q==
-----END CERTIFICATE-----
Generated at Fri May 3 02:17:31 2024 by rpki-client on console-ams.rpki-client.org