Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
File:                     9Y3yxGnJeIlfhFgCTFBugByPsho.cer (raw, json)
Hash identifier:          3/0VXUC5dHzAFbYnfyaer3y4ui5fvGa9/IT0FpzhMjY=
Subject key identifier:   F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC793E1FB859D7AC92A7ED701B8F51B41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:30:06 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.189.60.0/22
                          IP: 2a0b:d680::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:e1:fb:85:9d:7a:c9:2a:7e:d7:01:b8:f5:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:30:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f58df2c469c978895f8458024c506e801c8fb21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:ff:0c:d4:2f:35:07:a2:93:de:f9:a9:20:
                    10:ec:c4:32:a9:e4:fb:52:e8:9a:4b:59:9f:52:52:
                    cc:7e:7f:58:a4:a1:e7:27:32:73:b6:53:e0:3a:dd:
                    1b:a9:79:05:11:73:8c:42:ab:85:19:84:95:23:69:
                    2b:c7:3d:1a:c0:de:00:8c:9b:95:96:06:31:eb:11:
                    67:28:19:70:cb:ef:19:3a:36:40:42:62:91:7f:83:
                    a4:dc:9b:9c:d1:51:c5:50:8a:f5:78:73:77:41:29:
                    2d:7e:c1:19:38:3c:71:bf:6f:fa:6d:09:28:77:22:
                    13:62:d9:cc:89:46:e7:0e:17:d7:22:28:bb:97:72:
                    39:bc:af:29:73:59:3d:54:84:47:1c:06:27:2f:35:
                    89:11:40:a7:98:41:9c:77:8a:cf:c7:6e:d8:f6:e7:
                    37:9d:1f:9d:9f:e6:8a:b3:5c:82:a8:2f:52:ec:e1:
                    0f:8e:e3:a5:02:6d:27:ee:0b:eb:68:e0:ca:3b:a5:
                    39:09:36:82:14:fd:d8:ce:e7:84:f9:ba:46:19:a5:
                    eb:1f:55:02:af:2d:27:f5:0a:f2:ac:a2:04:e5:c8:
                    73:c7:c8:f9:fa:34:0e:09:a0:6d:c0:7a:20:3e:40:
                    3b:9a:21:5a:6c:8d:b3:8b:2d:fb:1f:23:83:63:21:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.60.0/22
                IPv6:
                  2a0b:d680::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:86:24:67:3c:97:01:5d:e0:14:13:70:ef:05:c3:f1:a4:e4:
         15:96:5a:f9:04:34:5b:e9:11:26:a6:9b:3b:ca:10:96:3c:f1:
         99:9f:0f:aa:20:4c:5a:5a:b9:86:99:03:0d:7d:ce:33:65:81:
         52:f2:8c:5f:88:da:32:28:f5:ca:60:97:44:96:bd:ad:36:2a:
         2f:dc:65:18:d8:55:96:eb:d0:f0:60:7c:f4:47:5f:f1:51:7d:
         ca:f6:ea:73:9d:36:3c:ea:d1:8a:45:ea:c3:63:1c:2b:33:06:
         98:d8:5c:73:17:1f:5e:38:9a:e3:12:e6:c6:58:17:57:5e:49:
         ec:15:cd:a6:4a:39:ad:86:23:6e:00:58:cc:68:d6:8c:e4:67:
         00:6f:aa:4c:88:88:2f:ad:39:ec:c0:89:e8:fa:e0:3b:2e:fc:
         38:45:bf:3b:46:d7:8d:7d:e7:11:4e:88:6a:89:8d:bb:5e:67:
         83:ae:c4:ff:89:ab:79:8f:df:1d:99:48:51:25:3e:6f:2f:81:
         43:2c:6e:88:33:52:ca:85:8e:db:20:d8:89:8c:8c:b7:7a:87:
         43:71:80:37:bc:2d:7e:4b:71:ae:1a:29:6a:0d:55:30:9b:9d:
         2c:65:f8:4f:11:3b:c7:2c:18:ea:72:aa:db:5d:ae:3c:ca:9c:
         ff:83:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----