Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
File:                     X_S8YTfFQKibkXPMLeMusEyebq4.cer (raw, json)
Hash identifier:          A2ImcCovA4G6HRYKV/r+1cK6Am6huovzeD+T1M3Vwio=
Subject key identifier:   5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DDAAAE6C2B1F12CED6E7F35CFC51E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:30:19 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 5.61.64.0/21
                          IP: 2a01:52c0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dd:aa:ae:6c:2b:1f:12:ce:d6:e7:f3:5c:fc:51:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:30:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:c4:ad:e9:30:7c:57:c2:72:81:24:2c:3e:
                    75:ef:fe:56:6e:12:83:92:4d:c6:c9:7b:0a:a3:84:
                    7f:2a:34:d8:56:af:fe:53:0c:38:b5:3a:64:74:c1:
                    29:54:4c:13:a4:cd:03:0e:e1:7c:f4:a9:93:74:f3:
                    00:e8:84:a8:8f:85:9d:17:41:7b:ab:e7:f5:ae:9a:
                    e2:68:9b:cf:4f:b3:2e:d2:37:6b:b4:b4:e2:56:3e:
                    34:c5:71:e8:15:70:c4:86:73:b6:6f:6f:c1:b3:4a:
                    9a:33:86:61:bb:66:6a:d5:3a:5d:4b:25:5c:a1:5e:
                    f6:b1:33:ed:79:c6:58:e2:c3:18:1b:7c:54:a9:79:
                    4c:ac:42:38:73:12:36:41:36:c3:67:6f:00:8d:55:
                    23:5d:bc:7d:a7:5c:bf:69:41:a5:00:47:ee:50:3f:
                    71:13:1d:02:86:1f:6c:3e:45:97:85:20:22:58:3b:
                    16:73:53:af:b5:60:6e:c6:ad:18:8f:b4:d1:55:69:
                    e0:7d:91:9c:b3:e4:38:3a:7c:48:47:21:3a:62:9a:
                    57:ea:00:c2:bf:c1:7b:ef:37:77:3e:51:bc:21:62:
                    19:a0:20:42:91:16:e9:1d:1e:fa:b5:a9:20:81:f2:
                    23:da:28:bd:25:56:79:fb:01:28:25:4b:ec:d8:7b:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.64.0/21
                IPv6:
                  2a01:52c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:07:fa:08:9c:72:40:53:73:6a:70:27:f6:2f:b0:a4:ed:
         54:1f:11:06:ea:d7:11:37:4f:d3:16:ae:bf:ca:d6:5a:78:28:
         4b:d1:82:20:5d:ca:73:46:d2:58:b1:d0:18:f6:48:b1:a9:cf:
         94:e7:33:14:76:b9:ba:cc:5d:fe:ed:c6:93:84:82:da:4e:8c:
         63:cb:04:b7:ce:8d:d1:31:08:9a:7e:b6:7c:a2:05:f6:64:43:
         91:4d:97:b3:03:44:83:6a:12:8f:f5:52:e3:33:da:dd:f8:db:
         cd:70:85:e4:cb:eb:94:c6:8b:f5:61:93:a7:70:6c:f9:d6:95:
         3d:07:63:69:f2:ed:a9:d3:82:7f:75:03:53:e7:16:39:15:12:
         93:87:fe:bc:41:10:7b:c4:cd:37:5b:48:a9:22:c2:9c:e3:af:
         c0:c5:46:29:a0:c6:db:ef:53:ba:ce:cc:e9:c1:94:0a:d0:13:
         40:2d:9f:25:df:cd:a9:cb:d9:eb:22:bd:f2:21:42:d6:87:26:
         96:0a:89:6e:b8:f0:61:41:75:93:60:d8:f1:d6:ca:54:16:9c:
         62:d6:ad:01:0a:b1:6c:7a:e2:8c:ba:17:dd:af:46:ea:82:b5:
         40:78:a7:36:b5:5e:37:c7:f4:f4:bb:bf:93:e3:1f:0e:51:1f:
         88:07:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----