Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
File:                     ctdCYWpoBB9_D80HkvOOQQOnncI.cer (raw, json)
Hash identifier:          pA/Ws2HQCTbMOu4Z+IfxxmQBOp3btOaeDRX0UdBQ78M=
Subject key identifier:   72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0192D8505AC81C0D8930F5C29145CAB8EFB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 12:46:37 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214083
                          IP: 2001:678:db4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d8:50:5a:c8:1c:0d:89:30:f5:c2:91:45:ca:b8:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 29 12:46:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:40:ef:56:7a:d3:d0:20:24:c2:f9:ae:6c:43:
                    b8:bd:ee:22:50:e4:6c:06:8d:8c:8b:a3:3c:74:08:
                    27:80:2e:e6:2b:b3:25:17:3b:85:ce:21:2c:93:e5:
                    cd:7e:8f:1f:f3:b0:65:5d:af:ed:30:40:48:a9:2b:
                    50:20:a4:f7:83:ff:28:7b:0b:86:fd:ac:0d:01:0b:
                    e9:86:b3:42:22:15:ed:7c:41:40:cd:06:3d:8e:f4:
                    31:9d:29:48:93:5e:11:79:94:47:64:b6:ae:07:cf:
                    81:b8:4d:92:4c:e1:7a:73:76:55:db:a1:c8:cb:2d:
                    31:63:13:18:15:6c:32:76:07:e9:f1:89:fc:b2:e7:
                    31:54:95:f1:0a:07:0d:17:63:94:39:8c:ac:76:8e:
                    da:68:5a:9b:d1:e3:a2:6e:af:4c:98:2b:77:02:8b:
                    fe:a2:bb:74:a3:a8:f4:f3:b5:9a:d6:1c:e9:a8:46:
                    a9:a1:4c:b6:75:be:e2:65:0c:52:f7:72:0d:5a:35:
                    df:62:4a:5c:73:e3:22:71:e2:ee:93:d6:2e:eb:a7:
                    42:25:8c:60:2f:85:59:2c:68:6b:93:55:13:60:18:
                    0a:26:06:b3:7a:82:5d:50:0d:bb:a3:ea:6d:0b:6b:
                    3c:99:72:dc:be:cf:86:d6:e5:d7:fc:dc:4d:9b:a8:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:db4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214083

    Signature Algorithm: sha256WithRSAEncryption
         66:07:38:2a:be:6e:63:b1:05:c9:eb:70:62:30:89:aa:6b:27:
         2f:73:a9:0f:db:5d:c6:f9:65:1d:14:dc:75:76:88:36:c0:bf:
         0d:8c:13:d5:99:ac:1b:30:70:30:62:e9:62:6d:e2:d5:14:ec:
         22:0b:4e:70:e0:4a:94:31:63:f9:97:20:fb:14:5c:48:8d:19:
         bf:b1:ec:83:f4:a1:8e:dd:dc:cb:2b:1c:c1:1c:27:51:10:80:
         ba:fb:ec:e4:d5:12:3b:18:93:a6:6e:c3:ee:f4:da:99:ed:ad:
         28:86:75:6a:ac:e2:19:0c:b4:06:5b:14:c9:da:30:78:08:aa:
         b7:89:aa:90:70:e5:28:93:86:a1:55:7c:cb:6c:9e:32:fb:60:
         49:26:53:83:70:04:76:84:74:fa:fd:c5:59:06:2f:06:60:82:
         98:e9:2c:82:f0:3a:99:c3:17:4f:e2:ed:b0:28:18:e6:e9:d3:
         f5:53:c3:bc:d1:2a:ec:09:09:9d:c5:25:16:e5:2d:48:4f:3f:
         6d:77:4c:7a:59:37:d2:12:fb:0d:11:cb:02:3e:da:48:08:c2:
         b8:43:91:d1:5e:3e:b0:9e:07:cf:5b:d4:37:51:a1:19:c5:72:
         92:bb:2d:aa:ad:c4:5b:fa:ea:87:ae:10:93:93:73:bd:da:8c:
         05:09:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----