Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
File:                     IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer (raw, json)
Hash identifier:          SzY2EKpPFKqX0amHE//U+pesoHmg+BuQ2Jv2mOcD96s=
Subject key identifier:   21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01908E7DE1BDB94466FAAF3A4F628833B909
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 18:38:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216373

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:8e:7d:e1:bd:b9:44:66:fa:af:3a:4f:62:88:33:b9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  7 18:38:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:c8:df:1b:a7:36:b5:f6:ff:aa:e7:03:2f:
                    6e:cb:0d:29:c9:5f:e9:e0:53:35:98:c1:87:dc:8c:
                    c6:ba:97:d7:e9:51:d9:ed:7c:b7:cc:b8:67:4d:39:
                    0b:cb:65:2a:b4:69:03:d0:86:d2:71:e4:2d:11:19:
                    80:36:9f:d7:a7:83:af:e9:01:e5:ae:54:2e:c1:40:
                    04:3a:62:46:f2:e8:cf:4f:43:7d:cc:d1:03:94:c3:
                    1a:67:1c:d1:37:01:82:22:62:da:98:5c:c2:fb:1a:
                    d3:b8:b9:10:d3:0d:bf:f5:43:55:33:46:2c:ba:bd:
                    fe:59:09:20:73:3f:0d:00:ca:ad:20:12:c9:01:70:
                    db:c7:88:36:17:65:97:a0:1f:57:2b:4d:45:ce:fc:
                    25:e4:7d:50:53:b9:b2:e1:56:77:c7:cc:cd:8f:22:
                    b4:19:5c:e1:a5:92:18:cb:fd:c2:53:b5:ee:23:92:
                    61:f7:ff:c7:92:ea:11:54:28:56:92:f4:83:1e:5c:
                    73:09:18:f7:f1:e1:d8:61:b0:ff:0d:7d:0b:33:cf:
                    09:80:86:3b:48:ee:12:fc:15:df:ba:2a:20:c7:99:
                    0a:d1:67:2f:9c:cd:09:22:6a:69:c8:7a:1a:f4:e9:
                    49:25:14:96:80:f6:68:e2:9e:bd:a9:c0:fe:bf:04:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216373

    Signature Algorithm: sha256WithRSAEncryption
         a8:56:3f:4d:67:58:ce:4b:41:c1:d9:47:50:4b:5b:a0:f0:90:
         72:d9:78:29:36:44:aa:86:b2:f4:89:8f:da:48:69:63:52:2c:
         29:77:32:55:97:12:3c:35:30:6e:e7:f4:74:94:fa:4b:f9:c8:
         62:75:4f:5a:64:15:44:4f:28:95:67:96:b3:0a:c8:70:30:d1:
         4d:41:c8:e4:e2:96:e2:1e:ae:2b:ab:32:31:8e:ce:60:d6:4c:
         d0:48:ed:f7:5b:88:0a:86:6a:91:8e:e9:69:02:4c:ce:31:c5:
         a8:60:e4:f0:6c:f0:9d:0f:f5:ca:4b:5e:db:05:11:15:1b:18:
         a1:3c:d1:d5:03:cb:33:79:79:ef:ba:da:35:c0:c5:fd:9b:6c:
         e0:a8:e8:63:52:6e:dc:22:73:31:3d:a8:36:17:dc:37:78:20:
         0b:fc:2d:a0:24:9c:fb:6b:02:51:b9:af:25:6e:ff:29:b7:ee:
         67:3c:f1:75:1b:d7:81:0b:9d:14:4f:83:e2:31:fd:a6:0e:1e:
         ea:83:48:84:cc:c1:c3:d7:f7:4a:29:e5:2a:d4:23:1f:f1:f1:
         bc:10:8e:76:1e:83:f7:28:48:c1:d3:b0:c0:a4:bf:3f:f4:e8:
         1b:1d:9c:6e:f5:c0:2c:bd:b2:3b:6c:e7:cf:c4:e7:81:b1:08:
         47:fc:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----