Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
File:                     Uw4xZLFq4JEmhPqpDkORTeH91aU.cer (raw, json)
Hash identifier:          ibgHMR0zuF6Stx5lLNwVAav75oR999kly2rKq4NAGDA=
Subject key identifier:   53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56F0553DE97A82AE4D96BC6C7B2526C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:30:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208232
                          IP: 2001:67c:1334::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6f:05:53:de:97:a8:2a:e4:d9:6b:c6:c7:b2:52:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:30:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:a3:f6:76:2d:b2:4c:00:38:20:50:d7:df:
                    30:62:44:6e:76:a3:1d:ee:4b:ca:87:68:ea:46:ce:
                    e7:98:c3:66:e2:b0:e2:97:7d:06:e4:f7:62:04:53:
                    70:2f:7a:df:39:69:1d:ea:25:87:fb:f0:9e:80:30:
                    db:fc:7c:2c:41:84:84:86:f3:26:bb:eb:48:6a:5b:
                    89:70:1c:4d:90:27:d4:8b:9e:eb:3c:8c:dd:64:c4:
                    b6:8a:b3:82:51:a1:af:b9:7b:66:ad:1c:f6:01:9b:
                    3f:10:c0:cf:11:72:95:8b:39:69:53:cc:4c:e1:54:
                    4e:5e:7a:8a:8e:d1:ad:d6:b3:83:f4:f9:bc:cb:c9:
                    21:8d:b8:a0:ef:b3:c9:c5:17:72:fc:fe:f6:5a:a5:
                    d1:87:98:b0:e9:4f:53:41:10:6c:58:57:6e:17:ce:
                    18:e4:2f:51:22:45:a7:5c:a4:7c:51:c4:5a:ca:7d:
                    dd:52:a9:9c:9d:1c:ac:d7:7a:7e:0d:1f:7c:f3:b4:
                    53:3b:5d:7e:09:38:86:dc:3b:9d:fd:5f:89:b3:6c:
                    8f:7c:6c:93:b3:48:b7:77:97:49:52:06:23:4f:4e:
                    0b:ae:2f:15:15:4d:ba:98:bf:59:d9:98:66:ca:76:
                    f4:7e:35:7a:62:ad:e0:cb:11:5f:88:c5:ba:d8:c9:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1334::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208232

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:ba:fa:55:b3:54:53:69:b8:05:05:8c:f5:2f:04:4b:55:
         6e:80:ad:d4:d6:df:5b:9a:7c:36:8f:42:bf:fc:eb:07:b0:db:
         c7:5a:e5:5a:32:aa:af:6c:c5:d7:11:5d:8e:25:15:31:a8:5d:
         26:c7:a9:d0:35:3b:e4:65:60:02:d1:bd:ac:19:d7:b6:3e:2c:
         d3:96:b7:6d:e4:d3:d9:19:89:74:d6:32:b4:ea:74:67:9a:b9:
         84:93:0a:ab:9d:8f:e4:3f:b2:5a:32:cd:84:95:ce:80:ff:7e:
         c8:e1:bc:15:d6:19:af:c5:b5:28:9e:0d:b4:ba:e3:22:1c:08:
         d9:04:38:96:28:fe:38:cc:d9:31:3f:ab:88:c4:68:85:0a:69:
         12:62:b6:4c:c5:eb:1e:b2:5e:4a:52:e5:05:25:ae:b5:c1:0e:
         f2:92:27:d4:ac:41:ac:ea:a2:cd:88:30:af:ed:b9:dc:52:b3:
         75:39:17:8f:28:d5:4d:6d:6a:9e:b8:f9:3c:7b:e5:1d:34:19:
         cf:da:0d:c2:4c:1c:be:5f:b1:f7:c3:82:da:60:84:ec:dc:ef:
         3a:f5:82:82:a0:ee:af:42:18:2f:80:8c:b5:25:7f:cd:f4:95:
         e7:7a:74:bf:82:12:fd:51:77:a5:bf:f9:30:61:91:9d:fb:6b:
         e6:ab:a5:07
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzFbwVT3peoKuTZa8bHslJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzBlMzE2NGIxNmFlMDkxMjY4NGZhYTkwZTQzOTE0ZGUxZmRkNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRCj9nYtskwAOCBQ198wYkRudqMd
7kvKh2jqRs7nmMNm4rDil30G5PdiBFNwL3rfOWkd6iWH+/CegDDb/HwsQYSEhvMm
u+tIaluJcBxNkCfUi57rPIzdZMS2irOCUaGvuXtmrRz2AZs/EMDPEXKVizlpU8xM
4VROXnqKjtGt1rOD9Pm8y8khjbig77PJxRdy/P72WqXRh5iw6U9TQRBsWFduF84Y
5C9RIkWnXKR8UcRayn3dUqmcnRys13p+DR9887RTO11+CTiG3Dud/V+Js2yPfGyT
s0i3d5dJUgYjT04Lri8VFU26mL9Z2Zhmynb0fjV6Yq3gyxFfiMW62MkDYQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFFMOMWSxauCRJoT6qQ5DkU3h/dWlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2FiNjBi
NS1lNzIwLTQ4MGItOWE5MC0wNDljYmJlMmY3NjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYWI2MGI1
LWU3MjAtNDgwYi05YTkwLTA0OWNiYmUyZjc2Ny8xL1V3NHhaTEZxNEpFbWhQcXBE
a09SVGVIOTFhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBM0MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMtaDANBgkqhkiG9w0BAQsFAAOCAQEAeVu6+lWzVFNpuAUFjPUvBEtVboCt
1NbfW5p8No9Cv/zrB7Dbx1rlWjKqr2zF1xFdjiUVMahdJsep0DU75GVgAtG9rBnX
tj4s05a3beTT2RmJdNYytOp0Z5q5hJMKq52P5D+yWjLNhJXOgP9+yOG8FdYZr8W1
KJ4NtLrjIhwI2QQ4lij+OMzZMT+riMRohQppEmK2TMXrHrJeSlLlBSWutcEO8pIn
1KxBrOqizYgwr+253FKzdTkXjyjVTW1qnrj5PHvlHTQZz9oNwkwcvl+x98OC2mCE
7NzvOvWCgqDur0IYL4CMtSV/zfSV53p0v4IS/VF3pb/5MGGRnftr5qulBw==
-----END CERTIFICATE-----