Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
File:                     m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer (raw, json)
Hash identifier:          hLpiwmzh4BwooS49UXlbblZ61+pRQePJHMdcJGv/1KE=
Subject key identifier:   9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2BAD16863B0BF53ABD18BEDD761580
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:35:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198501
                          IP: 2001:67c:112c::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:ad:16:86:3b:0b:f5:3a:bd:18:be:dd:76:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:35:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:c0:71:49:d4:5b:7e:e5:61:f8:b2:1f:03:
                    42:83:96:e6:e5:53:bc:55:86:ba:3f:86:2e:1e:fd:
                    1e:3d:bd:ed:87:5c:9f:85:9e:cd:f9:74:95:83:7d:
                    fa:b4:b7:74:41:69:64:fc:e7:66:47:95:bf:3a:92:
                    a8:20:d1:4f:13:84:4c:c2:c5:e7:87:23:18:89:40:
                    eb:9f:7a:14:b5:28:9e:90:f4:4f:7a:1c:d6:04:ec:
                    55:a4:f0:b4:03:2c:f5:87:d4:b1:b5:e5:f1:68:e7:
                    87:7d:79:7b:b5:76:9d:f4:da:4a:c0:71:6d:95:e3:
                    2a:c0:b9:95:a3:19:6e:63:f1:47:31:a2:ba:86:3b:
                    45:0e:7f:15:97:b9:f9:cd:c3:3b:7b:bb:6f:55:86:
                    31:d7:01:0d:41:a4:40:c2:0d:3d:a8:6b:a2:77:e7:
                    91:53:2b:62:e7:c9:bf:48:a6:5d:a6:99:85:12:69:
                    2a:6d:69:b1:ed:54:ad:cd:92:73:f3:83:f6:2c:85:
                    fd:ba:62:c9:bf:f0:1f:58:74:e9:70:5b:05:6f:63:
                    75:e1:0d:42:26:ef:b1:1b:e4:ec:9d:8c:09:41:27:
                    1c:50:d6:62:02:3f:04:c5:29:4e:d6:e9:89:be:26:
                    da:9a:6d:88:bb:03:40:e1:0e:25:8c:a2:9c:a3:3f:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:112c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198501

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:1b:f0:eb:00:55:71:7f:ce:1d:5f:3c:3c:c9:f6:ff:a1:
         53:e2:6b:51:e3:12:ab:24:0c:03:be:09:2e:c9:07:3e:43:ee:
         5d:ee:04:7c:ad:ab:2a:50:eb:9d:3e:c1:ae:28:56:2d:57:3e:
         6f:c9:18:6d:c4:62:cb:1e:36:80:bb:e8:5d:30:40:11:3a:ef:
         65:c6:7f:9e:de:32:bf:12:a8:1d:e4:b3:85:98:c1:61:d7:15:
         65:4e:4d:0a:46:02:61:69:37:3b:b3:8c:86:0c:d5:8b:c5:6d:
         30:4b:01:f3:9a:db:98:11:64:64:98:df:d4:e3:e9:85:25:8a:
         37:e8:df:cd:86:e5:09:1d:e3:f6:74:95:60:59:dd:ef:dd:5b:
         ba:b3:ee:62:1f:09:8c:c7:c9:50:3e:d4:19:5d:1a:c4:c0:93:
         ff:71:15:25:ad:6a:3c:82:aa:40:2f:86:7d:ad:01:e5:6a:cc:
         5c:d5:0f:c4:21:d3:00:1d:97:ad:37:2f:fa:6f:c5:10:3a:a5:
         dc:df:b6:27:98:5c:b8:03:00:00:f2:10:88:67:14:22:2d:f0:
         77:a7:98:7c:84:ea:88:f7:ad:fc:75:d2:94:d3:6e:aa:fa:dc:
         98:7a:fd:ea:c1:d6:e1:85:f5:c9:6e:f9:d2:45:ab:6e:ca:a3:
         47:ae:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----