Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
File:                     vqse58Ta0p0SfVZdG5N5RlwoiTc.cer (raw, json)
Hash identifier:          CB4svvbbG0r9BrdojAu5ZU1t2suVLr8eRF8z+OM8JGo=
Subject key identifier:   BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B7313B9217B861D5DF0425981050C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:30:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 3226
                          IP: 87.250.0.0/19
                          IP: 91.146.0.0/18
                          IP: 92.55.0.0/18
                          IP: 92.241.224.0/19
                          IP: 217.14.192.0/20
                          IP: 217.29.176.0/20
                          IP: 217.114.144.0/20
                          IP: 2a00:4580::/30

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:31:3b:92:17:b8:61:d5:df:04:25:98:10:50:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=beab1ee7c4dad29d127d565d1b9379465c288937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:d8:fb:f3:d6:ae:bb:3f:8f:0a:2d:4b:e2:
                    0a:19:64:5f:42:72:7e:db:d9:63:01:fd:48:76:02:
                    aa:af:eb:a1:25:28:cf:d0:be:fd:0f:a7:a6:41:82:
                    9d:d1:5b:6b:7a:b8:61:d7:e3:6d:50:46:d7:91:d1:
                    4f:24:6c:70:01:14:35:aa:8c:ae:ab:a6:ea:7e:47:
                    3d:dc:17:83:7f:90:0f:8e:aa:44:69:49:ad:98:14:
                    63:91:00:d2:0f:56:25:cb:3a:17:52:cf:c6:c1:43:
                    31:9f:34:1d:a1:ed:8c:f7:06:63:36:b7:89:f0:f3:
                    92:7f:9e:aa:2a:d3:0d:60:da:cf:2e:23:15:1a:44:
                    91:e2:53:69:68:b4:9b:91:83:df:e1:a6:26:47:a0:
                    08:99:a9:38:9f:0e:3a:e1:4e:d5:06:9d:af:26:e8:
                    ff:c1:13:80:1a:c8:e5:10:17:2b:30:77:e2:0a:ed:
                    80:06:73:d3:9b:1f:5a:e6:1e:03:f4:c4:59:67:ee:
                    b3:d2:81:1b:c4:80:f0:80:02:06:6b:a3:8f:7d:02:
                    ec:cb:a4:d5:21:a1:5e:ce:08:2c:b6:24:45:39:e9:
                    56:d6:91:c7:01:f0:3a:b1:9f:f3:84:41:cf:f8:e3:
                    11:4e:fb:55:a9:bd:bf:ad:aa:41:62:6f:92:26:79:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.250.0.0/19
                  91.146.0.0/18
                  92.55.0.0/18
                  92.241.224.0/19
                  217.14.192.0/20
                  217.29.176.0/20
                  217.114.144.0/20
                IPv6:
                  2a00:4580::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3226

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:64:64:fb:bb:b3:3d:bf:99:c1:40:ac:9a:cb:5a:60:df:
         48:5d:6d:27:78:0c:95:75:dc:89:83:a4:c4:1e:f5:6d:bd:86:
         38:4b:5d:1a:62:6c:c4:2d:8d:e5:32:e6:9b:05:08:5e:3c:01:
         46:05:84:84:a0:94:9e:5b:12:d2:dc:cc:d7:09:f4:f6:1e:71:
         c7:24:df:d7:51:b5:46:4a:ff:17:4f:6e:01:bb:d9:08:6e:b3:
         73:26:97:4b:91:57:c8:0f:69:d9:e3:23:dd:b5:85:af:51:7f:
         8f:2a:21:5c:78:57:36:96:f9:e4:49:54:14:8f:16:38:27:e1:
         bb:1c:90:2f:a4:c1:a7:74:fe:f2:da:b5:c3:f9:44:9f:14:fb:
         c6:51:16:4e:35:2c:76:36:ee:80:48:4b:b1:ad:0b:e1:7f:0b:
         c8:3c:1a:71:e6:27:11:d8:ba:60:fd:07:dc:e1:b3:20:99:05:
         d5:da:f9:08:31:ed:63:ed:be:65:e4:bd:d3:a9:4a:ae:94:1f:
         6c:72:a1:fc:47:20:1b:0e:32:21:37:85:61:28:ef:79:09:fb:
         34:d5:b3:a7:cf:ad:61:76:48:2b:c0:4b:f6:c1:0b:a3:12:2a:
         a8:98:a6:25:7a:ed:1d:a0:f3:19:5f:58:5b:65:0c:47:ab:75:
         18:2e:89:51
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAYzDtzE7khe4YdXfBCWYEFDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWFiMWVlN2M0ZGFkMjlkMTI3ZDU2NWQxYjkzNzk0NjVjMjg4OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gjY+/PWrrs/jwotS+IKGWRfQnJ+
29ljAf1IdgKqr+uhJSjP0L79D6emQYKd0Vtrerhh1+NtUEbXkdFPJGxwARQ1qoyu
q6bqfkc93BeDf5APjqpEaUmtmBRjkQDSD1YlyzoXUs/GwUMxnzQdoe2M9wZjNreJ
8POSf56qKtMNYNrPLiMVGkSR4lNpaLSbkYPf4aYmR6AImak4nw464U7VBp2vJuj/
wROAGsjlEBcrMHfiCu2ABnPTmx9a5h4D9MRZZ+6z0oEbxIDwgAIGa6OPfQLsy6TV
IaFezggstiRFOelW1pHHAfA6sZ/zhEHP+OMRTvtVqb2/rapBYm+SJnkVTwIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFL6rHufE2tKdEn1WXRuTeUZcKIk3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzYxYTY5
My04MzZhLTQxMjItYjkyOS1lMmE5MjA1YTlkMmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNjFhNjkz
LTgzNmEtNDEyMi1iOTI5LWUyYTkyMDVhOWQyYS8xL3Zxc2U1OFRhMHAwU2ZWWmRH
NU41Umx3b2lUYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQFV/oAAwQGW5IAAwQGXDcAAwQFXPHgAwQE2Q7A
AwQE2R2wAwQE2XKQMA0EAgACMAcDBQIqAEWAMBkGCCsGAQUFBwEIAQH/BAowCKAG
MAQCAgyaMA0GCSqGSIb3DQEBCwUAA4IBAQAtLWRk+7uzPb+ZwUCsmstaYN9IXW0n
eAyVddyJg6TEHvVtvYY4S10aYmzELY3lMuabBQhePAFGBYSEoJSeWxLS3MzXCfT2
HnHHJN/XUbVGSv8XT24Bu9kIbrNzJpdLkVfID2nZ4yPdtYWvUX+PKiFceFc2lvnk
SVQUjxY4J+G7HJAvpMGndP7y2rXD+USfFPvGURZONSx2Nu6ASEuxrQvhfwvIPBpx
5icR2Lpg/Qfc4bMgmQXV2vkIMe1j7b5l5L3TqUqulB9scqH8RyAbDjIhN4VhKO95
Cfs01bOnz61hdkgrwEv2wQujEiqomKYleu0doPMZX1hbZQxHq3UYLolR
-----END CERTIFICATE-----
Generated at Fri May 3 12:06:59 2024 by rpki-client on console-ams.rpki-client.org