Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
File:                     GNl5-JL-uBmXaiX-lH9devN-zH0.cer (raw, json)
Hash identifier:          fyiWMnV4vyYY4S7A8itMx5fEX6Mapv01nub0c4LHON0=
Subject key identifier:   18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7940897906F815CA7EE95E62875AFB8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:30:16 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:654::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:08:97:90:6f:81:5c:a7:ee:95:e6:28:75:af:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:30:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:7f:50:4a:79:1e:af:5b:9f:df:7c:a0:5e:
                    59:f2:1d:4a:8e:d1:22:f1:96:fe:e3:fa:24:ac:9c:
                    d9:9a:83:ce:5c:4d:99:57:b0:5e:c1:8e:31:e4:7b:
                    1f:73:af:2f:16:6d:b4:5f:7a:ba:63:b7:c8:0b:4c:
                    e5:4a:99:63:2e:72:fe:55:6e:47:ce:5f:fd:7b:4f:
                    f2:31:6a:ba:ff:48:19:10:df:7d:72:58:b2:f8:fc:
                    91:eb:c5:17:3a:ac:67:7d:fe:83:96:0d:47:00:a5:
                    d1:e1:6f:70:a4:45:41:fd:cd:62:83:1c:c1:4c:c8:
                    d9:48:c7:26:a2:a9:9f:ec:b9:62:46:17:00:1a:cd:
                    74:c7:c8:c7:d3:23:b4:d1:91:a5:46:4b:e0:62:15:
                    e5:df:64:dc:f8:cf:f2:d1:7e:97:a7:f4:a4:e9:77:
                    81:b3:d0:6e:17:cc:62:ea:77:04:e8:c8:b6:26:36:
                    09:c2:21:35:22:e5:ce:06:44:4e:80:72:a0:ed:52:
                    53:ba:fd:10:c0:c1:59:14:35:9e:c3:0a:f9:a6:a6:
                    5e:8e:80:9f:18:1b:35:1c:fa:4e:e3:b7:1d:7b:55:
                    a5:28:2b:8d:c0:a6:30:02:ff:81:4e:81:7b:63:fc:
                    4e:84:44:ea:c0:d3:24:16:36:13:c7:80:64:76:09:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:654::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:81:2e:59:a6:a7:3c:f3:e7:af:d2:93:98:c2:b9:31:24:
         4a:6c:34:1d:3d:ca:c6:15:28:90:90:9c:04:13:61:35:1c:8b:
         70:5d:c0:46:ac:06:2b:8c:8d:df:93:92:e9:62:a3:22:b8:4e:
         8a:f0:e4:cc:e6:5f:98:20:40:f7:42:fa:d9:21:8c:91:92:f0:
         ea:35:39:8a:dd:02:5b:78:af:06:d2:f5:df:ee:c3:20:85:e1:
         ac:2f:c2:b9:2e:03:d5:21:5f:c7:cb:f8:b5:ce:89:9d:56:b6:
         cb:34:d6:77:ab:91:7d:d8:4d:f5:eb:21:4d:e0:d4:d2:02:9f:
         24:d7:47:ea:78:c1:d8:ba:d8:05:db:13:7c:16:f3:d6:0b:d5:
         cd:9d:c2:d1:52:54:0a:3c:7c:4e:0f:6f:51:dc:26:84:e8:70:
         ef:a6:41:4e:09:69:32:d9:80:5b:fb:44:6f:ee:4d:bb:9c:89:
         b2:21:18:a1:5f:0f:f5:a1:cf:1b:5f:c9:c6:d8:03:a2:1f:36:
         f6:6e:aa:96:79:da:2e:5b:b8:7f:2c:77:a6:87:4c:63:cc:0e:
         dc:a5:76:e7:b9:29:c2:f9:79:42:8a:8c:4a:89:9f:a4:37:34:
         59:e5:46:94:52:5c:18:eb:32:e6:d0:7b:fc:7f:84:5d:79:d5:
         14:04:83:ef
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYzHlAiXkG+BXKfuleYoda+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQ5NzlmODkyZmViODE5OTc2YTI1ZmU5NDdmNWQ3YWYzN2VjYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KF/UEp5Hq9bn998oF5Z8h1KjtEi
8Zb+4/okrJzZmoPOXE2ZV7BewY4x5Hsfc68vFm20X3q6Y7fIC0zlSpljLnL+VW5H
zl/9e0/yMWq6/0gZEN99cliy+PyR68UXOqxnff6Dlg1HAKXR4W9wpEVB/c1igxzB
TMjZSMcmoqmf7LliRhcAGs10x8jH0yO00ZGlRkvgYhXl32Tc+M/y0X6Xp/Sk6XeB
s9BuF8xi6ncE6Mi2JjYJwiE1IuXOBkROgHKg7VJTuv0QwMFZFDWewwr5pqZejoCf
GBs1HPpO47cde1WlKCuNwKYwAv+BToF7Y/xOhETqwNMkFjYTx4BkdglvxwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFBjZefiS/rgZl2ol/pR/XXrzfsx9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2Y1MGI5
MC1mMDMxLTQxMmUtYTA0MC1hZTZhYmNlNTlhYzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvZjUwYjkw
LWYwMzEtNDEyZS1hMDQwLWFlNmFiY2U1OWFjMS8xL0dObDUtSkwtdUJtWGFpWC1s
SDlkZXZOLXpIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAZUMA0GCSqGSIb3DQEBCwUAA4IBAQBv
34EuWaanPPPnr9KTmMK5MSRKbDQdPcrGFSiQkJwEE2E1HItwXcBGrAYrjI3fk5Lp
YqMiuE6K8OTM5l+YIED3QvrZIYyRkvDqNTmK3QJbeK8G0vXf7sMgheGsL8K5LgPV
IV/Hy/i1zomdVrbLNNZ3q5F92E316yFN4NTSAp8k10fqeMHYutgF2xN8FvPWC9XN
ncLRUlQKPHxOD29R3CaE6HDvpkFOCWky2YBb+0Rv7k27nImyIRihXw/1oc8bX8nG
2AOiHzb2bqqWedouW7h/LHemh0xjzA7cpXbnuSnC+XlCioxKiZ+kNzRZ5UaUUlwY
6zLm0Hv8f4RdedUUBIPv
-----END CERTIFICATE-----