Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
File:                     i5PlZ68ZipTh_PBf4P58khCVqEo.cer (raw, json)
Hash identifier:          CddVqU/cfN6sWJc1a5Dj6H3I97p9T04tz2IWxwg+Pxc=
Subject key identifier:   8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4255547711B8187B8BFE5F5C5A1E8C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:30:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:1bf4::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:55:47:71:1b:81:87:b8:bf:e5:f5:c5:a1:e8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:30:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:ac:b4:64:54:c3:70:21:2c:14:8b:f2:8b:
                    fa:8e:56:21:d6:7f:9e:51:25:c2:a8:84:2f:85:0c:
                    b1:98:33:87:38:ce:86:62:57:d9:c0:76:19:d6:dc:
                    59:c6:8b:75:93:c3:05:2c:b7:50:2f:71:85:a8:9c:
                    38:ba:9f:02:cf:4e:38:2a:1a:e1:f7:90:3f:a3:37:
                    64:6f:e1:37:29:20:f8:f6:81:c7:1c:ae:8d:55:97:
                    54:c3:bf:7b:01:6d:94:4d:17:64:99:c7:db:c7:24:
                    f3:89:69:4e:b8:6b:88:0b:37:fe:a6:3c:7a:ab:9a:
                    51:01:e8:6a:6b:40:17:09:6c:e7:92:d3:1c:5b:9e:
                    3e:bb:cb:c6:88:b6:2c:3f:78:a0:23:49:2e:92:22:
                    7e:da:16:6f:0c:f6:fa:30:42:eb:5d:f5:d2:a4:f4:
                    46:2c:ed:95:b6:ae:34:fa:3a:b6:d2:8f:fb:92:aa:
                    b5:d7:54:39:2b:43:ae:20:e2:31:ff:ad:07:21:b6:
                    e9:cd:fa:5f:48:3d:8e:45:49:fd:37:36:84:69:36:
                    01:e9:6c:35:d3:1a:c9:ed:de:e4:06:1f:2d:5f:86:
                    da:8a:cf:bc:3b:8a:a1:f6:b0:da:0f:01:f2:99:db:
                    41:fc:a2:be:dc:af:54:91:1d:38:b3:29:94:7b:b3:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1bf4::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:3d:a2:8f:69:42:87:16:e5:c3:f3:61:63:96:06:28:49:
         82:c4:17:9c:5f:fe:a3:f2:d0:c7:d0:d0:86:2d:81:4d:d8:fd:
         59:ba:84:1f:28:36:60:54:e4:46:03:31:38:96:98:94:73:61:
         c7:b7:d1:d3:2a:fc:16:9a:76:0c:ef:a3:84:65:f5:29:d2:ac:
         cc:8d:ea:99:58:ad:12:9a:95:ab:cc:28:e1:cf:95:c6:b3:9b:
         b3:37:a8:2f:dd:ed:98:c2:ae:aa:0a:79:4c:83:fd:07:27:af:
         b4:5f:22:8c:1d:3c:9a:3f:8b:0d:ed:db:a8:38:49:36:80:74:
         e7:51:23:ee:6b:e3:ba:e4:6f:a2:33:8c:00:d7:0e:66:77:e5:
         e3:0e:ec:db:35:ef:ad:d9:bc:e3:0e:c5:1c:a1:e4:3b:ba:d2:
         c9:f1:52:7d:e6:c0:46:1b:6f:0a:37:c1:ce:8f:f1:cf:a8:69:
         af:bf:95:11:20:25:3d:a9:af:25:1d:00:62:73:f9:ed:79:78:
         9a:fc:f1:86:8c:24:63:c3:80:a9:5a:bc:7e:6f:99:9d:65:05:
         a1:5e:4f:05:97:e5:23:a2:7e:bc:71:c7:9c:72:7f:c1:e3:f5:
         ee:44:ab:57:2c:e2:d0:70:f1:38:f4:d2:56:12:bf:7b:e4:45:
         a3:ed:a5:cb
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYzEJVVHcRuBh7i/5fXFoejIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjkzZTU2N2FmMTk4YTk0ZTFmY2YwNWZlMGZlN2M5MjEwOTVhODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwustGRUw3AhLBSL8ov6jlYh1n+e
USXCqIQvhQyxmDOHOM6GYlfZwHYZ1txZxot1k8MFLLdQL3GFqJw4up8Cz044Khrh
95A/ozdkb+E3KSD49oHHHK6NVZdUw797AW2UTRdkmcfbxyTziWlOuGuICzf+pjx6
q5pRAehqa0AXCWznktMcW54+u8vGiLYsP3igI0kukiJ+2hZvDPb6MELrXfXSpPRG
LO2Vtq40+jq20o/7kqq111Q5K0OuIOIx/60HIbbpzfpfSD2ORUn9NzaEaTYB6Ww1
0xrJ7d7kBh8tX4bais+8O4qh9rDaDwHymdtB/KK+3K9UkR04symUe7OmcwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFIuT5WevGYqU4fzwX+D+fJIQlahKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2NmMTMw
ZC1lZmQ0LTRkZmItYTFhMy1hMmJmMGExOGNkZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvY2YxMzBk
LWVmZDQtNGRmYi1hMWEzLWEyYmYwYTE4Y2RkYy8xL2k1UGxaNjhaaXBUaF9QQmY0
UDU4a2hDVnFFby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBv0MA0GCSqGSIb3DQEBCwUAA4IBAQBl
/z2ij2lChxblw/NhY5YGKEmCxBecX/6j8tDH0NCGLYFN2P1ZuoQfKDZgVORGAzE4
lpiUc2HHt9HTKvwWmnYM76OEZfUp0qzMjeqZWK0SmpWrzCjhz5XGs5uzN6gv3e2Y
wq6qCnlMg/0HJ6+0XyKMHTyaP4sN7duoOEk2gHTnUSPua+O65G+iM4wA1w5md+Xj
DuzbNe+t2bzjDsUcoeQ7utLJ8VJ95sBGG28KN8HOj/HPqGmvv5URICU9qa8lHQBi
c/nteXia/PGGjCRjw4CpWrx+b5mdZQWhXk8Fl+Ujon68cceccn/B4/XuRKtXLOLQ
cPE49NJWEr975EWj7aXL
-----END CERTIFICATE-----