Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
File:                     dC44IKB42kewo3Ti06ZtYmPB4j8.cer (raw, json)
Hash identifier:          e+S+c1m9jEIO0xz6l82cfbiS1Pa6JF2W45m8vlImfIM=
Subject key identifier:   74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BB311E4199F39DF4FEB31AF528538C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:32:17 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 48741

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:31:1e:41:99:f3:9d:f4:fe:b3:1a:f5:28:53:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:32:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:d0:d4:b9:20:0d:ae:2c:7a:39:1d:66:13:
                    0c:6f:0a:b9:5a:d2:1b:b4:64:63:c5:0c:07:8c:5a:
                    1a:b8:3e:df:75:b8:16:08:ee:82:5a:17:e3:66:b3:
                    d4:9e:9f:5f:e7:7f:45:48:eb:54:01:b5:9c:c8:e2:
                    b5:ea:6d:61:05:3f:c1:51:18:df:8f:d5:ab:8f:b6:
                    fd:62:34:ac:01:c9:98:52:53:30:9c:39:ec:fa:39:
                    46:5c:d6:54:81:3d:18:d4:d3:d0:57:b2:b9:41:3d:
                    6d:62:c6:81:24:a3:c3:5a:49:cb:8f:af:74:b7:93:
                    36:f5:53:ee:c4:4e:e3:28:dc:45:58:41:7b:4d:01:
                    3f:81:1a:06:44:ac:1f:9a:f4:f6:45:fd:c1:af:e3:
                    7d:b5:0a:e9:3a:df:b3:12:6b:fe:3a:82:e2:ec:11:
                    5a:5d:c2:65:9d:41:1f:d0:9d:bb:b9:8e:5f:d9:ff:
                    05:b9:cd:72:4b:6a:37:8f:8d:42:70:e5:00:e4:30:
                    76:4c:7c:1d:92:84:0c:e1:41:ad:68:03:ef:8b:3d:
                    03:b5:09:48:13:ac:72:dc:1a:52:9c:03:2a:7f:29:
                    c3:0c:58:b8:5c:44:63:f2:be:70:54:96:d3:3e:b4:
                    40:36:8a:9f:fe:2e:1e:de:9b:94:9c:87:12:84:9d:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48741

    Signature Algorithm: sha256WithRSAEncryption
         75:11:f8:27:91:b5:d4:8d:f6:86:6c:06:14:a7:bd:ad:5a:4c:
         6f:d6:58:8c:bc:97:6a:88:55:c8:bd:9d:f5:ca:2e:81:3f:e0:
         df:26:ca:af:c4:87:7a:44:65:ad:3b:60:ae:90:e3:6d:d3:25:
         e2:43:22:53:7f:9e:40:6b:9b:62:c5:bd:84:d1:63:70:dd:37:
         26:53:46:e5:e4:fc:85:e6:39:e0:b3:99:65:4b:50:72:0a:19:
         ec:e5:2f:50:b8:94:7a:ca:fb:82:c3:2b:b3:83:a8:5b:15:b8:
         64:32:b8:bc:95:3a:38:b2:ca:9e:9e:58:e4:b7:e1:f0:e6:81:
         b9:1a:5f:82:20:99:6c:2f:46:05:02:31:fe:bf:c4:50:a6:3b:
         ed:e4:9c:7a:27:de:7c:9f:48:ec:fe:65:e2:ec:54:95:d4:bf:
         1f:4d:64:0e:5a:ff:9b:80:54:fd:b6:ed:c8:f9:38:7c:1a:3f:
         00:a0:fd:ba:a1:a0:c8:7d:01:bb:03:9c:8b:55:e1:a0:6e:76:
         a5:86:43:be:2b:e8:87:d2:6a:28:fb:79:06:61:56:4a:f0:8f:
         89:99:21:46:38:d7:36:7f:34:24:8c:29:76:c5:f7:6a:87:d4:
         d8:98:a7:58:87:96:67:30:2b:17:61:58:e6:4d:a8:e1:5b:7a:
         31:7c:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----