Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
File:                     SFF8v1-HKM7CSvPC6G7PuANT5g0.cer (raw, json)
Hash identifier:          xk6VHKyTdyZAO9RT8maI8geIDdV7ta5OxwBQoHQLf5Y=
Subject key identifier:   48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DEE9664167BE663AACF9C82C6245B4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:31:41 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208836

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:e9:66:41:67:be:66:3a:ac:f9:c8:2c:62:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:31:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:70:97:49:db:c9:72:7b:9f:1d:e0:b8:50:
                    77:1b:c0:95:c6:04:2e:c2:87:d0:c9:7e:24:17:09:
                    5a:47:d9:fd:65:d1:c8:ed:d1:e0:a3:20:35:1e:9b:
                    d2:28:04:fe:ea:1b:ce:02:ca:bb:b7:88:f3:00:30:
                    7b:27:20:0e:76:09:19:da:c2:be:7c:f5:6b:f5:67:
                    bc:6f:3d:38:56:be:9e:50:b9:d9:07:bc:d7:ae:2b:
                    63:0c:ff:26:5d:86:63:d4:80:7a:40:9f:0c:ca:f3:
                    b5:06:3a:f0:b4:ba:e7:2b:6d:8d:90:f3:7b:cd:fb:
                    1e:7f:f2:a1:39:16:f0:b1:71:cb:fc:bf:76:51:a3:
                    e2:03:59:93:8f:78:f8:73:89:0d:bd:0c:d1:8d:3f:
                    b5:c6:3e:cf:5c:3a:c4:cd:93:38:0b:8f:36:d5:17:
                    d0:bf:61:66:67:95:9e:e4:b1:82:24:47:1a:44:f9:
                    a4:82:ba:14:10:6c:33:14:27:3d:46:6d:63:e7:c7:
                    cd:be:8d:49:f4:07:75:3f:2c:ab:e7:81:bc:d2:5a:
                    35:45:88:54:4d:44:bc:ca:eb:46:a1:da:a0:d4:ab:
                    24:04:02:bc:26:fb:93:12:35:c3:69:5e:a5:14:1e:
                    76:ef:ea:88:ce:c7:1b:09:5b:96:e9:3f:7d:da:8f:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208836

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:49:09:1a:a4:56:4e:44:ef:44:4a:da:af:3b:2c:00:38:
         09:73:5c:44:d7:14:cc:e5:65:6e:44:e6:f7:3b:04:41:3f:a7:
         51:c3:98:81:e1:d5:c9:44:8d:76:7f:57:9a:0a:54:00:90:4e:
         ff:6f:ec:1c:a3:50:b1:54:d7:83:50:c6:97:22:38:d7:e0:ed:
         1e:5e:e0:b5:5f:fd:d0:e8:bf:0a:fd:23:d7:04:ab:cd:bf:f5:
         f8:8e:ea:41:4e:a3:24:d7:4a:08:3e:3f:09:a0:f9:83:7e:12:
         3f:8d:6b:e0:66:39:f8:ee:b1:ed:26:0c:ff:85:29:18:26:53:
         16:32:04:cb:0b:cd:bb:6a:76:21:ce:df:04:23:4a:ee:02:b0:
         e1:65:f3:47:c6:f6:48:ed:12:e2:6c:26:be:b4:42:48:7d:00:
         6f:d9:fa:bc:35:a0:79:70:77:be:90:75:85:3a:15:81:f0:9f:
         8b:9a:06:0c:17:f5:0a:f0:10:24:9a:ff:c2:5e:61:95:4b:d9:
         52:15:04:94:b4:01:83:70:d2:fc:8b:80:31:28:4e:51:15:48:
         de:35:d9:65:00:3f:df:b0:b7:7c:e8:b0:06:31:f7:cc:43:a7:
         aa:f6:c7:81:db:6a:a0:e5:e8:40:62:30:eb:f2:d6:f1:3f:be:
         ca:a1:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----