Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.cer (raw, json)
Hash identifier:          l0aj3Bw2SyCo22IbeZf1KblYvTtlQ5EXyErwr1zj8wI=
Subject key identifier:   FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DAE34EEF342DAD2466FDEA69BDE1A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:10e4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:e3:4e:ef:34:2d:ad:24:66:fd:ea:69:bd:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:63:cf:86:cd:77:0a:14:d4:58:39:23:24:
                    71:54:26:6a:14:93:ee:2e:dc:b1:44:84:56:cd:e0:
                    49:9e:8f:51:c0:a5:a3:ce:71:bf:03:d4:ec:4a:85:
                    f1:fe:52:6d:b5:bd:a2:9e:4c:41:a4:66:84:1f:88:
                    38:7a:71:b9:71:c1:b5:46:d3:34:48:8c:03:cc:50:
                    7a:fd:45:02:90:cf:1c:6b:56:d0:2c:be:e7:a9:81:
                    41:4c:1f:70:08:87:af:b9:95:27:90:d3:a5:ee:2a:
                    cf:2a:d1:5c:15:99:ec:93:2b:76:70:64:a6:ef:1d:
                    d9:8a:1e:4f:cd:4f:75:1f:9f:42:63:de:04:45:d7:
                    cf:4f:a9:55:ca:cf:ee:fc:ca:87:f2:93:34:f7:25:
                    51:ad:c6:18:97:9c:d5:07:2a:84:a8:e7:40:ee:30:
                    71:ab:d3:2d:c5:a5:8f:7d:ae:bc:2f:0d:16:ab:2a:
                    b4:df:68:76:12:c4:e7:39:64:1e:cc:24:cf:ae:41:
                    26:fd:de:a6:fc:83:43:10:e0:e8:1d:1c:27:82:8c:
                    07:db:d0:84:04:65:1c:d5:ca:a2:2b:7b:48:db:93:
                    5e:72:3e:a9:30:fe:7e:55:2c:36:9e:95:dd:00:18:
                    d6:90:1c:09:64:b3:fd:85:14:41:06:d8:5f:f5:b1:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:10e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:88:15:45:29:48:d0:44:d5:c0:1d:92:c5:97:dd:c3:f5:
         67:ef:36:a9:d2:cb:1e:9c:1e:49:55:3d:f1:64:97:f5:fc:bd:
         92:f0:cf:2a:5b:9f:eb:4f:62:39:cd:13:3c:84:9a:0c:b3:1e:
         f7:c1:ae:29:16:3d:3d:fb:c1:15:13:0b:27:cd:04:17:01:ef:
         c7:39:a4:d8:53:8c:6e:16:d3:40:e6:e6:fe:1d:7b:e3:1a:94:
         a1:08:b7:f0:cc:b3:c2:f0:78:f0:e7:ea:9e:bc:0a:97:60:cb:
         a7:58:9d:56:6b:78:bd:d2:72:ea:ad:34:a7:b6:f4:94:d9:37:
         03:67:75:39:a8:bd:31:89:24:6d:b7:be:c3:76:96:c1:b4:7c:
         36:40:60:c7:e1:44:aa:68:78:af:1c:14:88:2f:97:59:87:49:
         27:15:52:ce:ba:e8:59:48:b9:ad:7a:3a:a0:4f:d9:cb:85:5d:
         0d:37:6c:e5:54:c9:f9:a4:ed:7d:08:d4:1a:a8:3f:10:8c:6c:
         04:cc:ae:90:b6:86:03:7e:0d:87:0a:1a:be:8f:3a:1d:be:a0:
         07:a0:25:4b:ec:ff:d5:6c:b1:45:cc:53:09:9d:15:b9:1b:11:
         09:17:f0:49:0e:ab:16:3c:3e:47:8b:23:0a:c9:48:dd:eb:da:
         15:11:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----