Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
File:                     fGXsjueSu10KPMcJrcrptoWp3ls.cer (raw, json)
Hash identifier:          ornRvknfvW+73bYBVJREai7+jXRVyEanwF25sB0eR8Y=
Subject key identifier:   7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2A46EBF279F2FE4A8CC39BF9065A9B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:33:37 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.127.96.0/22
                          IP: 2a03:96a0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:46:eb:f2:79:f2:fe:4a:8c:c3:9b:f9:06:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:33:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:0c:e6:8e:88:47:d7:2c:51:6d:01:3d:98:
                    70:66:b6:9a:cb:5d:5d:08:98:9d:c6:9b:80:7e:6a:
                    f7:63:6c:9b:5e:d2:ab:0e:1a:5a:c3:65:0b:e3:0e:
                    18:31:04:14:65:de:af:64:36:c4:d9:cc:f8:68:dd:
                    c0:a0:1e:1d:d8:c2:99:f4:8c:83:45:4f:09:9e:ae:
                    e0:f8:ca:84:0a:2a:81:49:4f:2b:1d:f2:80:6f:b9:
                    ec:4d:7d:fe:8d:6e:30:ba:12:41:af:3f:7f:0c:c5:
                    5d:b6:70:1a:80:39:02:ce:83:45:82:3c:0a:b2:7b:
                    1d:f0:0d:dd:df:85:77:fc:0d:b7:3e:8b:e9:f8:10:
                    5c:55:19:8e:45:ee:8e:47:9a:52:1f:e1:66:a8:cf:
                    d2:4f:6d:b6:ec:99:c3:ec:84:c3:77:0f:cd:22:be:
                    fd:7d:e2:da:7e:35:b9:82:d6:a6:ac:1d:d9:d3:d6:
                    55:2a:c2:41:31:ec:d5:9b:f0:5e:d3:81:d0:63:7c:
                    17:37:19:ca:69:24:67:5a:27:d1:d6:b2:36:ff:3c:
                    9d:47:c7:c9:f0:70:55:1e:2f:a7:1d:e2:69:5a:15:
                    de:da:7d:b8:c9:85:8d:a4:dd:55:9a:30:10:c8:98:
                    c9:03:46:bc:64:92:0d:a1:48:25:bf:a3:51:18:ed:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.96.0/22
                IPv6:
                  2a03:96a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:37:e1:eb:f8:02:44:78:d7:fc:e8:ac:78:ba:9c:15:0d:
         58:a0:b9:05:13:08:11:d0:12:46:e4:9b:d2:c7:b0:79:dd:60:
         3c:bd:3a:31:b3:1f:6a:79:83:16:1e:c6:b1:4b:3f:2c:c1:0d:
         06:58:d8:8b:ea:4c:bb:d4:b2:ac:2b:9c:fe:20:b0:a3:9c:c4:
         d6:ab:88:1e:09:8c:e8:3d:6b:58:ed:5c:75:43:9e:11:db:57:
         be:5c:de:a2:b0:bc:66:c0:48:79:ea:fb:94:3e:4c:71:03:cf:
         b9:98:78:0c:d5:5c:4b:a3:2d:42:14:7e:5d:20:8e:a2:d7:16:
         9f:6d:5b:79:ab:bb:89:23:74:87:32:db:14:63:c7:73:c3:0d:
         32:21:6f:43:aa:ca:3b:a8:a5:af:06:e9:5c:ef:9c:8d:e7:a1:
         e2:bf:3b:62:a9:73:05:a6:f0:7f:ce:a5:66:fd:39:4a:5c:d9:
         74:a5:01:83:1d:bd:6b:bd:44:0a:e7:b3:dc:bf:ee:8b:45:50:
         e1:ff:b0:de:2c:d9:da:48:2f:d4:fb:78:e2:d3:ef:ad:0a:d6:
         b4:64:10:33:3d:21:35:81:e8:c1:9a:8e:e7:93:20:34:d9:0a:
         28:d2:4f:80:c2:eb:0c:47:30:d7:42:8c:15:8e:96:6f:d6:09:
         b4:d7:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----