Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
File:                     meoF_mActoAa-DeT4GP3njlA8DA.cer (raw, json)
Hash identifier:          v/0w7LoFM81ZCI23v8gB2TN6aZwWJ5A7ukPZR9AB3VY=
Subject key identifier:   99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019092117BF78BEDC2395AABA01DB3247E85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 11:18:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.98.184.0/22
                          IP: 2a00:6ee0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:92:11:7b:f7:8b:ed:c2:39:5a:ab:a0:1d:b3:24:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  8 11:18:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:d6:e3:cf:61:7e:4e:53:9c:a8:ff:03:16:
                    6b:58:23:95:b9:6e:32:78:54:46:7a:d5:71:db:ac:
                    13:0d:a2:02:fa:5d:e2:2c:95:3e:42:bd:98:00:4d:
                    9e:de:cf:cf:eb:02:c7:6b:3a:3a:73:ba:87:41:44:
                    63:3d:31:47:a5:52:57:a9:1b:38:bd:e9:2d:f0:35:
                    49:85:1a:c9:db:4d:d9:8e:27:b4:ec:c5:74:e4:7a:
                    1e:b3:ed:ff:ee:5b:c7:82:7f:6e:0a:ea:4a:e0:48:
                    4c:9a:19:12:2c:55:cd:77:07:d3:31:74:69:83:51:
                    2e:3e:70:a3:c8:b2:ce:51:e1:3b:66:1d:62:25:11:
                    81:2b:59:69:6c:4c:8f:60:06:bc:af:f1:1a:3b:4f:
                    d8:61:74:67:39:db:76:48:fb:40:25:fa:a4:4a:de:
                    e5:4c:54:23:55:48:14:d0:2e:be:a1:29:14:1d:1d:
                    3f:42:b1:ff:e5:fc:6f:c0:28:09:ba:1d:e5:c6:1a:
                    83:6c:24:5c:b4:70:87:fd:12:a8:af:56:df:2b:e2:
                    b8:4a:6a:44:77:58:3e:c0:9d:2e:35:d3:0c:ed:4b:
                    d2:ba:85:b8:b1:ee:38:84:fd:d1:04:aa:8d:55:1e:
                    5e:f9:d2:21:13:6d:61:c6:c9:48:f8:92:fa:81:69:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.184.0/22
                IPv6:
                  2a00:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:ed:a6:26:8a:69:cd:6a:6e:9d:49:54:55:87:e2:a4:aa:
         79:1d:a5:50:4a:bd:92:eb:d9:e9:2f:47:d4:da:ae:27:98:49:
         9b:09:20:8c:09:12:26:bc:f7:ed:b3:02:1b:c1:82:39:16:d7:
         4c:4b:af:71:c7:aa:5a:eb:b3:d7:8b:a6:d1:34:73:2b:81:88:
         5d:65:19:76:49:3d:8e:e4:77:29:32:ad:7f:6d:ad:83:6f:ca:
         96:bf:45:d7:f7:ba:79:4f:43:d0:ff:a5:ac:06:b0:4e:a2:fe:
         7b:73:9c:35:1a:3c:0b:ae:e2:79:36:4c:f6:12:08:8d:6b:50:
         78:ae:08:49:3a:c7:1c:fd:3e:d5:26:77:e5:78:74:62:9a:a8:
         8a:b9:59:2a:55:9b:5f:fa:47:d0:71:8d:40:66:91:92:bb:38:
         c6:20:33:97:2b:95:b7:79:30:08:27:2d:9c:de:1e:9e:91:44:
         e2:65:19:76:b7:c5:e7:97:be:a5:d6:41:41:f1:20:73:0c:9a:
         65:cb:b6:c0:dd:29:80:5d:fb:b2:e5:1a:08:77:ec:bd:d3:3e:
         6c:b0:20:bf:d0:7f:c3:97:f0:cf:28:87:37:9a:0f:4e:a6:6e:
         85:99:b2:8f:06:e3:ba:f0:57:2f:14:27:5f:5c:8e:62:e8:bc:
         21:10:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----