Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
File:                     9xPX34BXC8z7JzeT8ApdRshT5Jo.cer (raw, json)
Hash identifier:          CqR9qnqn0F0saZ6hIQQvjZOlJSz4IPesw0C13suQKBA=
Subject key identifier:   F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E5ECEF0B3FE808821D60D35BCA72F7C60
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 21 Mar 2024 02:20:04 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215274

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5e:ce:f0:b3:fe:80:88:21:d6:0d:35:bc:a7:2f:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 21 02:20:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f713d7df80570bccfb273793f00a5d46c853e49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:d2:1e:90:01:22:8f:ae:5e:1d:ee:fb:78:
                    0f:b2:fa:71:26:62:a5:5f:25:30:c2:76:a2:a9:69:
                    d9:4b:51:4a:c9:b8:07:1f:c2:2c:b7:19:e2:d9:91:
                    ae:3a:5d:41:9d:4c:3d:f7:86:2d:0b:e9:3e:20:3c:
                    89:0a:f8:10:ad:e9:fa:e5:cb:ef:89:98:0f:5b:b9:
                    de:49:e7:38:c7:7f:41:b2:41:98:29:90:4c:d4:8b:
                    93:88:23:47:ae:01:26:05:db:7b:fe:69:5f:5c:53:
                    d1:e1:c9:71:62:b9:bc:bd:bf:6d:f6:8e:15:8f:26:
                    af:dd:e6:ad:52:1b:9d:b2:2b:b9:76:e7:eb:62:0f:
                    70:d2:6e:70:ee:53:79:32:82:83:52:b3:49:dd:c6:
                    1f:34:cb:04:2d:38:c8:37:69:68:fa:bb:91:57:40:
                    b2:cc:ce:24:ee:8c:e6:f9:78:56:56:96:4f:85:c3:
                    97:ab:4f:32:36:ca:98:a1:b1:d8:5a:92:84:88:ff:
                    8d:e8:3c:80:14:83:bb:17:3e:bf:17:76:4b:84:c3:
                    ab:52:e0:59:d5:9c:a9:4e:77:ee:04:3a:87:7a:33:
                    ae:56:86:b4:94:43:4d:6b:7b:68:c9:a7:a2:ce:ed:
                    ab:d1:f5:eb:ec:7a:a7:2d:43:de:25:8e:d3:66:f3:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215274

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:a2:31:09:6a:5e:d7:bc:41:ff:55:23:21:e1:51:ad:40:
         cf:90:96:69:08:d0:c8:c3:92:ed:a4:6a:33:69:9a:df:f9:a6:
         89:f5:16:2e:9a:3e:cb:e1:74:54:1f:9c:b0:5f:d8:3c:b7:6f:
         e5:95:9a:ff:61:f3:92:82:56:38:89:a2:1d:d6:9f:b1:98:74:
         42:29:02:bb:7b:f4:bb:f6:f2:1f:86:a4:74:0f:5d:49:c2:22:
         e6:4a:b8:cd:c4:af:5e:2b:7c:39:7c:60:b1:e9:fd:4d:e5:0b:
         da:89:3f:1e:a8:11:6f:5e:4d:79:ae:76:33:ec:c7:bd:7c:e0:
         57:5c:d3:b0:2b:d4:3e:b7:29:9e:1c:cf:d0:ae:99:80:c0:99:
         fb:99:d4:3e:03:d7:6a:e7:9f:dc:38:4a:bd:f7:48:36:e6:aa:
         07:5b:68:b1:2e:30:0b:88:7c:39:27:c1:35:b6:bd:2b:8e:0a:
         9d:0f:0e:34:f1:6d:0a:5d:b1:80:51:04:05:63:17:5d:4b:7b:
         c1:7d:60:85:3b:fd:26:63:4a:d7:12:75:ac:46:25:13:e5:d9:
         fc:8b:2d:3f:cb:a3:93:bd:da:18:3c:a8:b0:8b:d8:73:e3:11:
         7a:09:5b:f2:4c:84:93:d8:89:e5:ce:b3:27:e4:bb:12:55:fe:
         60:20:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----