Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer (raw, json)
Hash identifier:          +8MDAzC7466ME/FS4DZiQO0nJihKU1EMDcuOVkyKfYA=
Subject key identifier:   92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3ED6501AAD73EEBEED21FBE00BEA7B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 8283
                          IP: 94.142.240.0/21
                          IP: 185.52.224.0/22
                          IP: 2a02:898::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jul 2023 14:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3e:d6:50:1a:ad:73:ee:be:ed:21:fb:e0:0b:ea:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:d9:92:0e:34:c7:89:29:2a:25:ee:b3:07:
                    5b:7d:0a:fb:1b:48:12:c8:ab:79:1f:9f:d5:a4:f0:
                    25:e1:a8:97:9d:2a:a6:c6:19:ad:ce:e8:a3:89:a3:
                    7f:62:42:73:a6:13:35:c0:67:5b:85:84:5a:ff:c4:
                    72:77:46:92:91:07:c6:0a:65:20:54:19:3d:90:d1:
                    20:91:73:2f:56:41:5c:ea:8c:54:a0:ed:50:84:03:
                    31:28:ff:bc:46:b5:be:6b:63:34:48:f9:de:cd:99:
                    b2:42:1a:90:25:40:89:1e:d5:59:42:83:e8:67:a5:
                    53:86:3e:ed:0f:01:12:17:51:75:fe:8b:d5:d8:14:
                    6e:97:8e:21:9b:69:f1:53:8f:25:9a:1a:b4:4d:c7:
                    33:1a:52:66:66:18:67:62:ed:83:6e:72:96:7c:62:
                    74:ca:69:9b:94:7e:5d:8b:b1:6e:b4:29:08:eb:d6:
                    a4:8c:32:94:8d:eb:f8:a4:68:2e:2e:7d:81:d8:bf:
                    95:c9:17:d4:ca:98:14:47:8b:a8:54:1e:49:17:46:
                    b9:7f:ec:ed:48:2f:0b:1b:25:74:a1:88:02:96:4f:
                    9a:7c:b0:8e:32:29:13:e1:a4:43:e7:ff:ae:5f:7d:
                    e5:9f:c0:6e:c0:0e:05:5c:e5:b8:a1:27:7d:4f:79:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.240.0/21
                  185.52.224.0/22
                IPv6:
                  2a02:898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8283

    Signature Algorithm: sha256WithRSAEncryption
         9f:8a:4d:66:5c:3b:bd:df:fb:64:09:6f:71:73:50:cd:7e:37:
         28:aa:06:89:22:c3:93:13:c5:90:9d:de:a2:3e:c1:71:ce:b1:
         97:fe:6f:bd:9e:5d:22:32:36:f5:50:54:dd:67:92:85:82:d6:
         fc:f4:c5:02:57:61:0a:ec:34:e9:02:86:2d:a7:dc:e4:f6:37:
         44:e2:72:8b:44:96:3e:e6:33:b9:07:f0:4f:52:6b:15:ce:b4:
         04:59:c2:e3:66:80:bc:4e:08:eb:8d:bb:8d:e3:9c:b6:61:e7:
         78:f7:56:3d:48:42:28:d6:81:f0:6b:e0:e9:91:52:cc:d8:e8:
         98:9e:f8:af:cf:64:75:fe:80:8f:af:ea:3f:de:a0:b1:87:2c:
         83:9a:82:b4:03:55:8e:7b:55:00:43:45:0d:15:45:1c:a6:61:
         48:ec:34:0b:40:4b:3b:19:89:62:12:03:1a:97:21:b7:48:ee:
         1d:37:0d:fc:41:f8:9d:49:09:9a:13:1a:87:e0:7d:a5:36:58:
         9f:d0:d0:6b:16:58:d6:a5:2a:b2:41:d0:94:b2:5c:c0:43:f7:
         fd:52:66:af:7e:b7:40:d8:38:a1:27:51:d6:ba:73:a0:9c:90:
         79:52:2d:c6:bb:98:e5:b0:a3:4b:4d:84:59:4b:74:5f:03:9f:
         3c:dd:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:09:24 2023 by rpki-client on console-fra.rpki-client.org