Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
File:                     AblFvZ9KDnOPSRWctrba8iSG1cA.cer (raw, json)
Hash identifier:          vLA00LcxX3jAjgK/PPJzY6/PyA0Plh8v1wbl0ueDvSg=
Subject key identifier:   01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B71135D221ADCA7AE97D431F2617E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:30:03 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212864
                          IP: 2001:67c:2ba4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:11:35:d2:21:ad:ca:7a:e9:7d:43:1f:26:17:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:ff:d1:80:fc:7b:54:e1:f4:64:87:86:b3:
                    ea:0f:11:51:10:9f:bd:6d:bf:11:06:11:08:ed:ca:
                    3f:3d:de:a2:91:3e:9c:0b:fa:de:2f:4b:63:87:c0:
                    85:4b:72:72:fb:3a:4c:80:3c:fd:43:1d:4e:7a:42:
                    d8:96:4a:ca:de:85:6a:2a:55:c1:65:36:99:64:d6:
                    f1:d7:66:aa:58:ff:5d:2c:34:4d:97:d0:7b:d6:ff:
                    d7:dc:b0:aa:16:0e:ec:0f:27:cf:50:cc:8c:87:9c:
                    dc:2f:30:a7:08:00:69:28:a7:1b:fd:8f:62:33:78:
                    85:62:1f:7a:52:71:9d:a5:ff:e7:6f:a8:c9:b4:a1:
                    fc:4e:40:40:8c:9e:07:d2:c5:96:0a:57:ab:ee:a9:
                    94:41:8e:d0:e4:eb:f8:50:e6:ba:5a:68:fe:39:2f:
                    95:3f:a8:42:58:35:e5:87:02:7e:bc:8a:41:57:78:
                    21:83:3d:b9:66:05:89:ce:1e:89:0a:03:0e:9d:7c:
                    7f:40:7e:67:69:dd:c0:12:91:f9:39:24:bc:e7:b4:
                    f6:71:0d:20:75:f0:f6:56:52:61:0c:f7:38:c7:7e:
                    56:68:66:3c:68:9f:06:6c:e3:c6:1c:c5:5b:1c:7f:
                    b4:d4:de:ac:3a:04:3c:9d:e8:ae:6a:4e:ba:67:19:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ba4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212864

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:29:fb:36:13:d2:00:22:0b:0a:dd:b4:21:51:d3:f1:fd:
         3a:44:24:e9:e3:44:c7:ca:68:d6:14:a8:9e:7b:fc:05:31:35:
         9b:b5:96:1b:95:af:cc:45:bf:6b:c8:e6:aa:52:05:d5:96:1c:
         be:c8:6f:ee:ce:18:d6:b1:da:d1:c0:e6:91:c9:54:06:f4:95:
         96:35:5b:16:e7:a7:ab:d9:6f:cb:9a:04:bc:59:54:a8:05:2c:
         2e:30:7d:aa:f0:99:ef:b5:5b:a4:01:10:b0:5c:ab:30:97:ab:
         e9:cc:5e:60:8c:5f:7b:ea:29:15:f8:3c:ce:6c:b9:13:b1:da:
         7b:da:4d:3c:66:0a:11:be:7f:a5:63:bf:00:5d:93:41:4d:be:
         6c:3f:94:3c:a8:15:bd:eb:34:62:d9:b9:bb:be:fa:89:c3:6b:
         df:97:0a:09:08:c2:d7:b3:1d:df:e3:92:2f:d4:b2:5f:bd:24:
         d2:9a:c4:05:2b:12:00:c5:3b:37:e6:28:68:8f:5e:58:ef:71:
         b8:65:60:10:b0:4e:97:cb:eb:8a:6b:09:8f:88:88:f0:37:ce:
         03:88:c8:ff:3d:6a:3d:3f:f1:f9:e1:61:15:cd:91:2b:ff:27:
         04:53:df:4f:77:2b:71:60:24:fa:96:dc:1f:bb:cd:ec:5d:c8:
         20:59:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----