Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
File:                     kjGbzZsJqYSwcOLvWI_8-otzyKI.cer (raw, json)
Hash identifier:          mWSLof5A09vrQiFCp9IDDmE8/GtT2gb/LMDK9gTIttw=
Subject key identifier:   92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56EDB1C5EC3F3E805CAA5D61D7BECC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:30:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.103.32.0/22
                          IP: 2a00:edc0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:db:1c:5e:c3:f3:e8:05:ca:a5:d6:1d:7b:ec:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:30:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:c3:57:15:87:05:85:f8:16:ba:10:ac:16:
                    9b:d2:cf:cc:06:76:62:ce:0e:c1:84:79:ff:db:55:
                    12:f4:cf:ba:25:11:cb:e7:c3:cd:4e:20:05:99:b4:
                    0e:4e:e0:31:28:52:1c:d5:ad:49:5a:a9:be:e2:b4:
                    a1:a9:fb:60:e9:4b:30:00:b3:4d:ef:dc:9e:f5:32:
                    6e:cf:4b:3d:18:6c:2f:09:60:33:89:9e:80:53:17:
                    5e:62:a5:ff:d7:3a:ec:30:9c:b3:f4:f7:be:ac:f0:
                    3f:2e:cb:4c:4e:c4:64:e3:5b:aa:15:e9:36:e5:f3:
                    e4:42:f3:49:31:6c:1f:91:54:ae:1b:d9:0e:cb:a2:
                    23:2c:00:64:5b:e4:fa:7b:dc:1d:38:aa:86:f5:60:
                    f2:38:1f:f6:53:fc:80:0f:10:81:dc:b1:7b:ee:eb:
                    6f:df:5b:e8:e7:ff:f4:0e:f9:d2:06:64:66:c4:4d:
                    9e:24:19:ea:9c:06:74:b2:8d:af:42:b6:f2:64:17:
                    cc:1f:c3:bc:aa:84:7a:1a:da:ce:eb:02:f6:0b:ac:
                    da:bb:67:3b:4d:6c:15:f7:76:58:ca:ec:25:0d:d4:
                    bf:6d:39:6c:1c:64:5e:98:fb:cd:bb:f2:35:58:f7:
                    85:ec:5b:68:55:60:e3:8c:60:b2:f4:f3:fe:9b:07:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.32.0/22
                IPv6:
                  2a00:edc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:46:39:87:af:e9:fb:ea:29:42:d1:a2:75:b1:18:80:37:
         83:64:9d:c6:62:ae:8a:08:72:90:ff:82:06:37:d8:a9:03:76:
         ca:dd:ec:19:2c:33:0d:c9:4d:13:a6:aa:93:24:89:a4:64:72:
         61:51:15:4d:ce:27:c0:33:15:cd:b1:6c:0e:19:bf:1b:90:07:
         0d:07:68:5a:32:1c:d1:e6:2b:ad:df:23:c2:cc:59:bc:f7:ab:
         f4:d9:98:3c:c4:fc:a1:2a:2a:e3:5d:f5:91:e8:ee:20:1b:ed:
         70:4a:b0:6a:c3:de:e8:a6:0a:73:1e:ae:1d:3d:19:1f:47:4e:
         a3:e0:6d:ff:db:60:28:15:17:2c:0f:8b:38:71:6c:97:7e:a7:
         4d:2e:c5:94:ef:b5:c0:ec:4b:8b:5b:80:5d:f3:0f:32:64:c0:
         fb:3e:91:de:fe:f3:1f:c2:87:46:a5:fe:17:f5:b3:39:a1:16:
         eb:3f:20:10:54:ba:d7:1e:8f:eb:62:20:88:3a:b6:52:9d:07:
         11:51:7c:7c:a1:b1:ff:07:ef:ce:8f:fe:e6:4c:1c:2d:1f:a9:
         ff:8c:7b:91:38:18:29:57:ec:a7:9e:34:ae:53:01:c6:0c:ed:
         87:23:cc:a1:3d:d5:b5:71:a9:ea:ec:9c:b7:ce:ae:b7:19:41:
         97:20:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----