Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
File:                     jTN8DIVpRrj72vKF9Syt3POK0Kg.cer (raw, json)
Hash identifier:          7TVB4prll0QiMAZnSde640i9OMHsenKFfbgGOoR7q40=
Subject key identifier:   8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BCC349423A90B236D1F20F63DFB0B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:34:00 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213092
                          IP: 2001:678:d90::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:c3:49:42:3a:90:b2:36:d1:f2:0f:63:df:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:34:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:00:58:8a:a6:9f:d2:e2:34:89:10:b4:50:
                    8a:4f:ee:c8:e0:b3:f2:1a:86:1a:61:a3:ef:36:c7:
                    5a:02:2a:17:44:ca:0b:11:0b:9a:50:50:48:f1:33:
                    65:27:51:7b:7b:21:83:d5:01:44:c7:08:78:3a:c6:
                    4a:6a:d8:31:f6:d8:ec:ab:c7:30:4a:3b:96:dd:a9:
                    c3:51:0c:ad:09:cc:95:b0:2d:4d:10:4f:37:aa:8f:
                    f9:b6:fa:81:1b:a3:38:12:1b:3d:bf:1c:cb:4c:70:
                    cf:bf:b2:7d:73:a1:d9:ba:f7:30:d3:14:65:72:5b:
                    9d:92:cd:dd:57:42:91:ac:04:33:96:83:61:ca:fd:
                    31:e4:40:b3:75:90:cf:e3:53:8a:35:ab:f8:71:18:
                    a2:11:6c:21:7e:04:6c:77:28:63:17:81:72:9b:df:
                    d7:0b:ec:c2:65:41:6b:f1:fc:f7:77:a7:f1:bd:19:
                    f6:b7:0e:e2:de:a0:1d:19:b9:c4:b8:9a:41:22:d6:
                    b7:61:45:c4:8c:9a:c6:a3:37:d6:17:dc:a7:87:66:
                    b3:ec:c7:c9:8b:ac:53:41:3c:5e:1a:0b:01:ac:43:
                    77:e1:08:6a:cc:c4:ba:b2:3a:da:fb:58:80:b6:74:
                    f4:f1:2e:d1:4e:e2:9e:a6:f7:95:02:c2:cb:ba:86:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213092

    Signature Algorithm: sha256WithRSAEncryption
         06:82:a7:0c:c4:ad:4e:bb:8c:fe:aa:08:54:bb:b6:29:93:38:
         3d:39:3b:90:ab:19:3a:38:44:2f:9b:59:bd:50:da:dd:af:ff:
         3b:b1:46:b5:99:8e:00:8d:da:ce:9e:1e:1a:25:a3:fc:53:63:
         9d:af:d0:54:5c:c4:39:2d:02:71:57:f0:5c:c8:6c:d6:8c:69:
         5e:74:3e:b1:05:b5:f5:5a:f3:f1:ef:8d:5b:25:7f:2a:7c:7a:
         97:b4:b4:e6:bb:07:fc:dc:e3:c2:3e:6d:db:78:d4:82:c9:9c:
         45:ed:45:f7:e2:f9:f8:30:46:0c:99:e5:17:7e:77:74:f3:c7:
         4d:e2:1d:7e:68:bb:d2:79:0a:ab:ce:c2:b2:5b:55:2d:7f:9d:
         b6:62:ac:88:c3:ee:00:81:dc:d4:cb:0c:29:0c:77:2d:0f:c7:
         50:98:d0:6a:ea:4d:2e:a1:08:7c:82:ce:ea:e6:bf:18:dd:e2:
         9a:f9:08:ca:6b:02:0b:0a:30:05:98:f8:28:88:c1:df:57:72:
         39:4d:91:40:39:2b:a7:e0:15:41:47:34:a2:b2:3c:2b:d9:fd:
         e3:65:83:da:33:ed:99:f7:ea:e1:ed:77:eb:99:36:13:7d:e3:
         3d:09:ce:5c:18:b5:05:64:75:6b:fa:69:97:2e:2f:a1:51:17:
         14:19:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----