Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer (raw, json)
Hash identifier:          OBb1zTmjnu/+9TdG1FgsZqK93gFpd5u067oZUbbjiUw=
Subject key identifier:   C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D553B36F037220F8E54197847F1C58493
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 12:39:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 95.131.120.0/23
                          IP: 95.131.124.0/22
                          IP: 185.154.28.0/22
                          IP: 2a02:c49:: -- 2a02:c4f:ffff:ffff:ffff:ffff:ffff:ffff

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:55:3b:36:f0:37:22:0f:8e:54:19:78:47:f1:c5:84:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 29 12:39:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:6a:12:0f:d6:c5:0b:ee:2b:51:ea:00:b1:
                    7e:bb:54:b3:34:af:17:30:05:8e:03:bc:20:59:75:
                    50:e7:e4:70:a0:2b:af:20:0f:17:93:53:27:da:d4:
                    5e:41:b6:7c:5b:62:0c:0d:17:c6:a4:44:c8:96:1b:
                    1a:4b:bb:88:df:fa:47:ac:cf:f0:61:f3:70:1c:79:
                    1b:30:a7:1d:3b:77:38:0c:b4:8e:42:9a:64:26:79:
                    f5:4c:56:24:5f:1a:c5:5c:63:06:d6:3e:ca:0f:7d:
                    7b:d3:4f:88:2d:f4:10:f9:71:44:b2:65:96:81:05:
                    8f:25:2c:df:71:c7:8f:91:cd:3f:26:37:bc:ec:a1:
                    bb:33:c8:5b:83:c2:6f:fd:10:c6:55:2c:28:bc:13:
                    0b:b5:0a:a0:83:ec:8a:9f:dc:4b:68:2c:f3:26:7c:
                    04:c3:b4:cf:0d:cc:69:73:85:bf:b4:26:f8:6d:fc:
                    46:82:c9:98:0b:87:57:91:f0:34:b4:00:af:89:ba:
                    36:95:b6:4f:9a:b3:93:c1:50:7e:26:63:2a:b6:cb:
                    c0:9e:3b:65:60:0d:e5:a5:4c:dd:f0:93:6e:b4:82:
                    0c:ae:a4:f6:c0:84:ae:86:b6:c7:eb:9f:d5:48:7d:
                    04:b2:56:5c:1b:80:55:70:9d:bf:fa:3e:4d:a9:04:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.131.120.0/23
                  95.131.124.0/22
                  185.154.28.0/22
                IPv6:
                  2a02:c49::-2a02:c4f:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         58:97:93:96:fc:ef:46:b4:52:61:a9:a9:83:9c:1f:6e:fe:bf:
         22:76:aa:91:46:a9:ff:4d:be:1e:06:cd:2d:84:63:fb:6f:0a:
         48:a6:dc:2f:97:ea:d0:49:6a:b9:c4:21:0e:b2:15:3d:c3:e6:
         3a:85:02:4d:9a:a0:b9:b0:62:cc:d1:b2:78:80:ed:ab:34:78:
         21:21:27:68:d1:5e:7a:49:a9:82:a2:9a:9c:c1:fb:ad:65:a2:
         1a:33:07:66:c1:53:fd:31:af:f4:e4:15:f4:3b:53:6d:f9:64:
         fb:3f:31:20:df:23:55:36:bb:67:a9:96:6a:a5:16:4d:af:89:
         84:0c:fb:48:ef:4f:3f:d6:d3:6e:20:24:8f:78:95:6f:18:a5:
         aa:b3:9a:64:23:70:13:9c:54:b3:1a:08:93:17:1d:97:24:b8:
         fd:74:45:8d:d2:97:b2:fe:12:9f:36:6d:8e:50:b1:54:39:df:
         40:12:5d:47:e5:bb:d3:e0:af:0f:ff:9f:a5:94:2f:22:88:10:
         ca:af:7b:e6:8b:8e:d7:69:3e:8a:36:b0:bb:d0:c0:33:d3:4f:
         e4:28:4e:27:8b:90:9e:81:97:e2:f7:93:ac:93:08:dd:ac:b3:
         77:23:7e:b6:ad:dd:bc:1a:f5:2c:e3:2b:d8:92:47:62:fa:0b:
         dc:f4:2c:3a
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAY1VOzbwNyIPjlQZeEfxxYSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTI5MTIzOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDJmNTllY2E2NDI5M2QyYzkxNmU3YWJiMDllMDUyZTJjYjFjYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRqEg/WxQvuK1HqALF+u1SzNK8X
MAWOA7wgWXVQ5+RwoCuvIA8Xk1Mn2tReQbZ8W2IMDRfGpETIlhsaS7uI3/pHrM/w
YfNwHHkbMKcdO3c4DLSOQppkJnn1TFYkXxrFXGMG1j7KD31700+ILfQQ+XFEsmWW
gQWPJSzfccePkc0/Jje87KG7M8hbg8Jv/RDGVSwovBMLtQqgg+yKn9xLaCzzJnwE
w7TPDcxpc4W/tCb4bfxGgsmYC4dXkfA0tACvibo2lbZPmrOTwVB+JmMqtsvAnjtl
YA3lpUzd8JNutIIMrqT2wISuhrbH65/VSH0EslZcG4BVcJ2/+j5NqQSo5QIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFMAvWeymQpPSyRbnq7CeBS4ssctjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzU4YjIw
YS00NTJiLTRmMmItYWFiNS03ZDEzYzA3MmQ5NmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNThiMjBh
LTQ1MmItNGYyYi1hYWI1LTdkMTNjMDcyZDk2Yi8xL3dDOVo3S1pDazlMSkZ1ZXJz
SjRGTGl5eHkyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAYBAIAATASAwQBX4N4AwQCX4N8AwQCuZocMBYEAgACMBAwDgMF
ACoCDEkDBQQqAgxAMA0GCSqGSIb3DQEBCwUAA4IBAQBYl5OW/O9GtFJhqamDnB9u
/r8idqqRRqn/Tb4eBs0thGP7bwpIptwvl+rQSWq5xCEOshU9w+Y6hQJNmqC5sGLM
0bJ4gO2rNHghISdo0V56SamCopqcwfutZaIaMwdmwVP9Ma/05BX0O1Nt+WT7PzEg
3yNVNrtnqZZqpRZNr4mEDPtI708/1tNuICSPeJVvGKWqs5pkI3ATnFSzGgiTFx2X
JLj9dEWN0pey/hKfNm2OULFUOd9AEl1H5bvT4K8P/5+llC8iiBDKr3vmi47XaT6K
NrC70MAz00/kKE4ni5CegZfi95OskwjdrLN3I362rd28GvUs4yvYkkdi+gvc9Cw6
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:57 2024 by rpki-client on console-ams.rpki-client.org