Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X9ot9HVEGGls2-HKWQx9dBRj9Ww.cer
File:                     X9ot9HVEGGls2-HKWQx9dBRj9Ww.cer (raw, json)
Hash identifier:          PoegosUhpkKRo+osPLgV8cxQsXQFH0H/R1xPiniEI6c=
Subject key identifier:   5F:DA:2D:F4:75:44:18:69:6C:DB:E1:CA:59:0C:7D:74:14:63:F5:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BC0756F510E21BF9DFC6DC35DE697F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://pub.rpki.win/repo/rpkiwin/0/5FDA2DF4754418696CDBE1CA590C7D741463F56C.mft
caRepository:             rsync://pub.rpki.win/repo/rpkiwin/0/
Notify URL:               https://pub.rpki.win/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211851

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:07:56:f5:10:e2:1b:f9:df:c6:dc:35:de:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5fda2df4754418696cdbe1ca590c7d741463f56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:79:0c:dc:62:a2:9b:98:04:22:94:e9:79:
                    d5:a5:19:c3:9c:79:9d:2c:10:c4:36:04:6d:47:f8:
                    4f:64:f0:9b:d9:0e:af:12:93:68:d1:fd:ba:80:b1:
                    9f:e9:10:dc:73:4e:7a:e8:8a:1f:e9:a8:b4:88:8a:
                    34:6d:54:92:a8:45:9f:64:58:f7:17:1d:6c:78:d1:
                    0a:c5:3a:90:3d:f6:01:1b:ae:0c:87:f7:79:6b:c6:
                    b4:9b:63:63:26:47:25:91:e0:a3:61:b6:46:ba:07:
                    0f:bd:4d:21:44:3b:88:75:61:a6:89:e1:22:b2:20:
                    64:bc:4d:97:9e:95:9b:a7:40:10:61:34:d6:cd:94:
                    21:86:f6:8d:fc:ce:39:60:e6:f8:1c:29:8d:25:22:
                    bb:38:50:18:d2:7f:52:4e:6e:45:8b:b9:43:36:48:
                    f4:2f:37:42:45:f0:4f:16:56:5f:a2:84:4b:f3:a8:
                    da:f5:97:fb:9b:a3:c5:a7:1f:ed:d6:1c:1a:56:50:
                    d1:42:71:7e:70:e0:10:89:26:2c:62:5f:2d:0a:5b:
                    74:12:6d:83:a3:1b:a4:6f:e8:8a:c6:60:03:d2:b1:
                    95:25:7d:f6:de:81:05:9b:ff:a0:d6:4d:a5:30:ab:
                    72:fb:61:97:75:bd:47:b4:c1:0c:9a:ae:c9:ba:b4:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DA:2D:F4:75:44:18:69:6C:DB:E1:CA:59:0C:7D:74:14:63:F5:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://pub.rpki.win/repo/rpkiwin/0/
                RPKI Manifest - URI:rsync://pub.rpki.win/repo/rpkiwin/0/5FDA2DF4754418696CDBE1CA590C7D741463F56C.mft
                RPKI Notify - URI:https://pub.rpki.win/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211851

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:8c:1a:c9:ab:7a:ba:18:3a:79:36:e5:39:77:8f:77:42:
         8a:a2:ce:90:0e:f4:ae:10:a9:98:e0:d7:42:80:c7:78:3f:a5:
         a9:26:c0:43:90:6e:91:38:14:34:73:4b:70:58:b9:9c:d7:0d:
         f5:3c:ae:9e:1e:b5:0f:96:e5:44:54:f9:15:6c:cd:fc:f9:5a:
         8e:b2:ce:92:cd:57:f0:52:fe:29:55:6b:fb:4a:26:4b:6a:ef:
         b3:bd:9f:4a:b4:3e:34:c5:32:9d:2d:b9:f2:46:dd:64:ce:21:
         e9:49:4c:27:ac:4f:0d:e3:bb:83:4f:bb:47:da:09:78:17:47:
         5a:29:f6:e8:0b:7d:29:7b:8e:dc:3e:0f:46:57:c0:55:4c:58:
         58:5b:72:8f:8a:7b:c6:9d:e2:f8:1f:7c:da:07:97:cd:59:43:
         3a:68:51:cf:23:7d:cd:95:a2:39:b6:81:14:3a:da:2d:5e:60:
         1e:d8:96:34:85:7c:ac:8a:04:24:b2:a8:16:5c:3f:59:94:f7:
         07:1c:92:b0:03:a9:3a:d8:3c:63:a7:e9:31:1e:9c:2a:e5:0c:
         02:6b:53:1e:e2:79:16:d2:d2:53:0a:33:68:8f:b6:a5:ba:06:
         7f:f6:83:4f:6d:57:c2:90:9b:e1:41:58:83:5c:a6:93:86:fd:
         c4:19:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----