Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
File:                     TjQBh8D85f_wN87ZplCCQ-QE2nE.cer (raw, json)
Hash identifier:          XU79iGTsQni4rxHkJIT4yZLCyf8QZ+IdTimOGYgPniY=
Subject key identifier:   4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B07E78FA6838F21C3F5F3A0A938AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:30:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199392
                          IP: 2001:67c:c28::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:07:e7:8f:a6:83:8f:21:c3:f5:f3:a0:a9:38:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:30:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e340187c0fce5fff037ced9a6508243e404da71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:41:68:5b:1f:aa:59:a7:71:d9:e2:8c:74:
                    d4:22:8a:55:d0:cc:c7:b4:ce:a8:e2:87:e7:18:81:
                    bd:44:78:23:04:22:2b:a5:9c:da:71:c7:2a:d7:f6:
                    26:50:aa:b4:9f:8b:63:fc:f9:0e:b8:e1:4e:21:38:
                    3a:5e:e9:a2:ee:7f:b9:84:34:94:f5:0b:7f:df:75:
                    67:4e:37:5e:04:ec:a5:79:fe:53:7e:a1:99:ea:b5:
                    21:1f:f7:3b:da:ca:3c:71:e6:bf:20:a0:a2:f7:a3:
                    65:af:8a:1d:22:81:3c:2c:3e:13:a8:ff:8c:8b:91:
                    e4:9d:29:12:ac:de:a1:0d:f8:c7:24:69:bc:ff:ae:
                    e8:57:c5:29:c4:58:37:25:c6:d1:0f:b8:63:bd:6b:
                    7d:83:d5:36:ac:83:36:b4:cf:96:dc:f5:4b:42:5d:
                    c3:29:ec:9f:96:ca:f9:2e:c5:31:43:8f:86:24:46:
                    a3:ec:8f:28:ad:92:79:38:85:67:21:36:d5:38:32:
                    b6:aa:5e:a6:a2:b3:ed:75:f1:40:4c:dd:4e:c9:b7:
                    18:b9:1e:bb:74:5e:44:7b:99:22:c6:a0:3d:d5:5b:
                    32:30:6f:d9:cc:ee:18:d0:2b:e5:63:69:ba:a6:e0:
                    49:12:4a:1b:60:d4:82:4a:cb:0b:e9:ec:57:82:c3:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:c28::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199392

    Signature Algorithm: sha256WithRSAEncryption
         61:ff:25:9d:18:3b:a1:6a:02:0a:4d:47:c2:e4:ea:e8:90:b2:
         f9:5c:e5:92:49:af:8d:94:a3:69:fe:c9:f2:0e:5b:37:f8:33:
         13:de:28:c7:c8:05:ce:d8:0f:94:91:e5:f2:53:9b:cc:a0:3c:
         39:df:93:1e:55:8c:2d:46:e5:50:85:0b:f2:15:d7:82:3e:a1:
         4e:73:c9:bf:dd:72:a0:e5:b9:2f:18:57:a7:2f:a3:55:e6:86:
         74:90:d1:30:51:f4:8c:3d:53:83:99:d6:42:70:23:a2:ea:6b:
         1e:41:d9:94:84:b2:a2:7a:0c:dd:80:42:37:5a:5e:aa:c3:4d:
         10:d7:ef:98:a8:07:ba:af:49:64:86:95:8c:e6:3e:95:09:2e:
         55:fd:90:e6:df:3f:7b:df:ea:4e:b1:35:42:18:32:88:b1:32:
         b0:0e:88:52:10:9a:2b:2b:d0:67:aa:5a:df:87:5d:2b:c7:f0:
         07:b9:55:87:4e:7e:a7:f1:eb:e0:bf:e3:a1:6b:87:7d:41:64:
         f9:ed:62:99:93:11:4f:d1:d3:94:3f:6e:8d:b0:f8:16:ae:5d:
         fc:b2:f5:58:03:32:0c:e6:f7:88:36:2e:91:99:74:9f:db:b4:
         fc:b6:89:ad:85:cd:0c:9a:ae:e5:73:9f:25:d1:f6:91:e0:72:
         4a:d1:e6:4a
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzGSwfnj6aDjyHD9fOgqTivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTM0MDE4N2MwZmNlNWZmZjAzN2NlZDlhNjUwODI0M2U0MDRkYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bBBaFsfqlmncdnijHTUIopV0MzH
tM6o4ofnGIG9RHgjBCIrpZzacccq1/YmUKq0n4tj/PkOuOFOITg6Xumi7n+5hDSU
9Qt/33VnTjdeBOylef5TfqGZ6rUhH/c72so8cea/IKCi96Nlr4odIoE8LD4TqP+M
i5HknSkSrN6hDfjHJGm8/67oV8UpxFg3JcbRD7hjvWt9g9U2rIM2tM+W3PVLQl3D
Keyflsr5LsUxQ4+GJEaj7I8orZJ5OIVnITbVODK2ql6morPtdfFATN1OybcYuR67
dF5Ee5kixqA91VsyMG/ZzO4Y0CvlY2m6puBJEkobYNSCSssL6exXgsNGFwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFE40AYfA/OX/8DfO2aZQgkPkBNpxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzk2MWY2
NC04MzdjLTQ4MTEtYWE0Mi01OGYyMTViY2E1M2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvOTYxZjY0
LTgzN2MtNDgxMS1hYTQyLTU4ZjIxNWJjYTUzYS8xL1RqUUJoOEQ4NWZfd044N1pw
bENDUS1RRTJuRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAwoMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMK4DANBgkqhkiG9w0BAQsFAAOCAQEAYf8lnRg7oWoCCk1HwuTq6JCy+Vzl
kkmvjZSjaf7J8g5bN/gzE94ox8gFztgPlJHl8lObzKA8Od+THlWMLUblUIUL8hXX
gj6hTnPJv91yoOW5LxhXpy+jVeaGdJDRMFH0jD1Tg5nWQnAjouprHkHZlISyonoM
3YBCN1peqsNNENfvmKgHuq9JZIaVjOY+lQkuVf2Q5t8/e9/qTrE1QhgyiLEysA6I
UhCaKyvQZ6pa34ddK8fwB7lVh05+p/Hr4L/joWuHfUFk+e1imZMRT9HTlD9ujbD4
Fq5d/LL1WAMyDOb3iDYukZl0n9u0/LaJrYXNDJqu5XOfJdH2keByStHmSg==
-----END CERTIFICATE-----