Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
File:                     Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer (raw, json)
Hash identifier:          67MRqfEbi6GqGKKEk4Xc+96YjbWF088uLfA5xcqpbhc=
Subject key identifier:   65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B772EF473E44F122E115B473D312A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:31:23 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.33.124.0/24
                          IP: 2a10:a80::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:77:2e:f4:73:e4:4f:12:2e:11:5b:47:3d:31:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:31:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:0b:e9:3b:f6:b0:49:fd:bc:5a:4b:fd:2d:
                    fe:39:7f:69:3e:21:6a:74:20:8a:26:f9:cc:76:42:
                    a2:aa:c4:96:59:76:8c:77:f6:ac:52:31:31:5b:c2:
                    87:b6:b6:8b:1a:24:e9:9c:90:81:8d:bb:b5:9f:a3:
                    b4:0e:da:77:14:42:f3:75:83:73:ab:ef:86:47:2d:
                    e0:85:57:68:bc:df:10:77:57:ce:2c:77:3b:a7:d1:
                    dc:ed:05:b0:fe:f5:ce:17:02:b9:8e:a9:87:1d:8f:
                    21:90:e8:82:e2:a1:fe:bf:17:6f:16:63:6b:b6:eb:
                    b9:47:92:15:b1:4e:4a:9e:c8:c0:a7:25:e4:4f:61:
                    4e:f8:9e:16:56:49:07:a5:6d:d2:0f:ba:0e:ee:cf:
                    b1:2c:b7:88:b1:9e:11:ce:64:9a:ac:45:e7:ba:aa:
                    d7:12:7d:c2:f5:72:97:6f:86:d5:4d:bb:51:28:0b:
                    fb:7e:5b:70:c3:fd:94:91:17:46:d4:29:83:78:c8:
                    2c:7c:a6:21:bb:26:a9:7a:ab:f1:23:58:79:8c:d8:
                    eb:d9:0b:88:74:fb:52:86:bf:47:21:ba:64:89:98:
                    93:d8:e1:21:5c:69:ac:e9:55:7c:b0:6f:6d:62:41:
                    67:33:ed:b9:1a:ac:44:d1:00:2e:61:3d:09:49:7b:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.124.0/24
                IPv6:
                  2a10:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:32:fd:50:e1:d9:31:de:5e:77:e2:e5:34:8e:25:a0:02:
         1c:3e:23:2d:ae:9b:a9:6d:56:2e:6a:b7:ad:37:42:61:cf:81:
         df:a0:00:ff:fd:d0:ee:e0:5a:93:2e:da:16:10:eb:02:bf:47:
         ee:19:1e:40:0e:d4:fe:76:db:34:31:46:48:ac:ad:32:e9:2a:
         c8:00:a8:f0:03:2c:e3:f4:58:a7:65:8c:09:64:e5:05:7d:8b:
         c5:47:c0:36:08:ca:70:4d:6e:68:ef:95:c0:ff:94:35:77:9c:
         cb:9e:02:35:d5:bb:cc:6d:93:2a:7c:72:fc:3b:bd:6c:d4:c5:
         ef:ca:00:66:5c:68:8f:a2:d0:41:67:6f:a2:80:7f:be:36:b7:
         67:1e:7e:86:2d:16:7b:c3:b3:59:95:70:03:54:32:21:96:e0:
         7a:cc:f3:2f:91:26:16:e6:04:e5:c5:d6:36:8d:52:08:e0:06:
         08:6a:39:03:8d:ef:35:e4:62:10:5a:87:0f:d3:80:7a:68:d0:
         15:09:b0:70:78:27:bd:03:38:cd:c0:7f:53:91:5a:5f:b0:c7:
         17:40:56:28:b4:08:4c:bd:a1:47:30:f8:15:d9:11:70:44:66:
         b4:5e:c3:48:e3:93:1e:3f:cc:e5:67:8c:e3:fd:09:d0:eb:e1:
         5f:4d:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----