Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
File:                     wig0jpBUlz16X4GTvU5cRPZzmeE.cer (raw, json)
Hash identifier:          Gtt6wOHj9v7yueVGbWBMpcQefWQFHYC51QvUOjgjzsM=
Subject key identifier:   C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC06F28F84CE0B7D1C9A078033C5FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 48165
                          AS: 198412
                          IP: 176.124.112.0/23
                          IP: 185.121.24.0/22
                          IP: 185.187.152.0/22
                          IP: 2a05:b0c0::/29
                          IP: 2a0b:a780::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Apr 2024 23:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:06:f2:8f:84:ce:0b:7d:1c:9a:07:80:33:c5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:04:0f:95:dd:93:60:15:e9:32:f9:38:f8:
                    12:91:ff:d3:5c:2e:e6:3d:59:30:2c:ca:38:24:5b:
                    a7:7c:d5:e4:bf:0e:ad:7b:2a:75:f8:35:3d:d1:e7:
                    c9:02:5b:89:58:d6:dc:71:93:a5:11:a6:e3:c5:9f:
                    29:c3:75:6b:f7:66:c2:6a:85:e0:36:73:7f:ae:a2:
                    20:f1:e5:fa:2e:a9:e6:e9:bd:b5:fe:b5:51:af:6d:
                    a8:c2:bf:10:66:91:86:61:fa:79:ee:86:50:b1:6a:
                    ec:17:1f:3e:b1:ff:12:28:ef:a5:d3:45:a3:f7:bf:
                    36:ae:70:51:2b:2b:a2:13:08:a9:ff:1c:19:a6:26:
                    e9:8f:87:28:27:31:ba:9d:7b:f5:dc:fe:02:8f:88:
                    ea:0a:16:31:52:42:2a:3f:7f:79:f6:af:ef:dc:95:
                    5c:b9:75:65:1c:c4:60:08:ee:8c:49:3f:a9:85:b4:
                    16:c5:f7:1d:ac:1b:5f:17:d8:d3:d6:5c:e4:7a:7f:
                    f4:7c:eb:39:70:92:da:7f:31:d7:0c:6a:f9:b0:83:
                    1f:04:63:d2:99:84:c9:d4:01:4a:da:56:96:65:1f:
                    5f:40:05:d8:03:28:58:db:d1:b7:e8:ef:25:91:83:
                    81:8c:ed:ba:d2:ee:db:6f:9e:34:be:fe:f5:5d:ac:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.124.112.0/23
                  185.121.24.0/22
                  185.187.152.0/22
                IPv6:
                  2a05:b0c0::/29
                  2a0b:a780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48165
                  198412

    Signature Algorithm: sha256WithRSAEncryption
         85:91:7a:ad:0d:f8:07:61:6f:ef:ee:79:f7:da:b9:3d:8f:6d:
         57:88:ea:80:e4:8b:c9:84:c6:2f:64:61:36:47:e1:6c:ba:2f:
         a5:6b:e6:48:7a:d2:d4:49:d6:d2:f6:3f:91:4b:51:85:1b:78:
         26:79:36:f0:d7:51:1d:ec:6d:16:e2:71:4d:66:39:fa:ca:f9:
         18:06:d5:60:df:6e:9e:95:09:1c:9a:17:87:d9:bc:56:ea:7a:
         7b:29:57:78:57:ea:f9:f8:2b:53:3a:fe:da:b5:b3:c5:b0:00:
         95:20:e7:cd:93:21:73:18:22:51:e8:1d:3f:59:5e:a4:ec:c1:
         3a:3c:57:5b:90:b9:45:84:89:9f:65:ff:e6:29:67:0e:90:e4:
         10:48:8a:25:53:82:e6:e1:25:ca:9c:78:2d:51:6f:d5:b4:0e:
         26:46:99:bc:b3:c8:e0:7e:16:08:9c:b4:f2:9d:63:e2:80:08:
         51:22:b4:09:af:81:44:06:ae:c8:df:1e:f1:53:ae:3b:f7:a7:
         d8:a4:dc:cd:60:d2:88:b0:97:ab:69:b2:78:20:85:8f:70:ff:
         83:3b:0a:4f:55:a8:17:72:b7:9f:ac:14:ed:78:45:08:67:ff:
         ea:93:cc:a8:13:67:33:44:87:8d:ef:f1:5c:fc:f9:b7:c5:9f:
         5b:49:bf:49
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYzF3Abyj4TOC30cmgeAM8X6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjI4MzQ4ZTkwNTQ5NzNkN2E1ZjgxOTNiZDRlNWM0NGY2NzM5OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP4ED5Xdk2AV6TL5OPgSkf/TXC7m
PVkwLMo4JFunfNXkvw6teyp1+DU90efJAluJWNbccZOlEabjxZ8pw3Vr92bCaoXg
NnN/rqIg8eX6Lqnm6b21/rVRr22owr8QZpGGYfp57oZQsWrsFx8+sf8SKO+l00Wj
9782rnBRKyuiEwip/xwZpibpj4coJzG6nXv13P4Cj4jqChYxUkIqP3959q/v3JVc
uXVlHMRgCO6MST+phbQWxfcdrBtfF9jT1lzken/0fOs5cJLafzHXDGr5sIMfBGPS
mYTJ1AFK2laWZR9fQAXYAyhY29G36O8lkYOBjO260u7bb540vv71XazHuQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFMIoNI6QVJc9el+Bk71OXET2c5nhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2YxNjc5
NC05MWFkLTQ5ODQtOWM2Yy1lODhmZmY4MmQ1NTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZjE2Nzk0
LTkxYWQtNDk4NC05YzZjLWU4OGZmZjgyZDU1My8xL3dpZzBqcEJVbHoxNlg0R1R2
VTVjUlBaem1lRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF
BwEHAQH/BDIwMDAYBAIAATASAwQBsHxwAwQCuXkYAwQCubuYMBQEAgACMA4DBQMq
BbDAAwUDKgungDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvCUCAwMHDDANBgkq
hkiG9w0BAQsFAAOCAQEAhZF6rQ34B2Fv7+5599q5PY9tV4jqgOSLyYTGL2RhNkfh
bLovpWvmSHrS1EnW0vY/kUtRhRt4Jnk28NdRHextFuJxTWY5+sr5GAbVYN9unpUJ
HJoXh9m8Vup6eylXeFfq+fgrUzr+2rWzxbAAlSDnzZMhcxgiUegdP1lepOzBOjxX
W5C5RYSJn2X/5ilnDpDkEEiKJVOC5uElypx4LVFv1bQOJkaZvLPI4H4WCJy08p1j
4oAIUSK0Ca+BRAauyN8e8VOuO/en2KTczWDSiLCXq2myeCCFj3D/gzsKT1WoF3K3
n6wU7XhFCGf/6pPMqBNnM0SHje/xXPz5t8WfW0m/SQ==
-----END CERTIFICATE-----
Generated at Fri Apr 12 09:36:53 2024 by rpki-client on console-ams.rpki-client.org