Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
File:                     qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer (raw, json)
Hash identifier:          pkec/bhaSIw5euEU12VuOluqqRWMn3e3HtolgDWIjBA=
Subject key identifier:   A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B928A9E738F5430F3A466EEC95F8B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:31:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202327
                          IP: 2001:678:708::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:28:a9:e7:38:f5:43:0f:3a:46:6e:ec:95:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:31:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a86ee450deb3a708aee85b78238fa370f90457f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:7a:56:89:09:4d:74:9a:e5:39:95:53:64:
                    ae:0c:46:88:0a:ed:41:4b:ae:d0:c0:91:58:03:74:
                    79:93:ad:b5:35:2f:30:a9:6a:9d:3f:b6:8e:7f:6d:
                    01:a2:b6:ae:e8:b5:b0:94:74:64:41:98:4e:91:4c:
                    d7:c1:51:c4:83:e1:c6:91:62:f0:9d:50:17:b2:87:
                    aa:1c:48:a0:4a:87:b1:99:15:4e:10:03:70:57:c7:
                    e6:80:83:11:0a:cd:c9:51:c3:94:c0:55:56:de:68:
                    8a:02:18:a6:b0:03:34:55:7c:cc:3a:f9:32:20:91:
                    79:e6:0f:7d:29:10:6a:e6:5c:16:48:44:ca:79:5e:
                    4d:da:92:a1:23:d8:69:92:23:86:09:55:c0:9b:ae:
                    db:c3:64:63:d1:84:27:20:17:c4:6c:07:d3:14:2c:
                    c5:69:2d:0d:ab:19:36:12:11:a8:5d:d9:43:2a:2d:
                    91:14:44:02:16:04:38:2b:47:47:1b:7b:48:22:b4:
                    4f:a7:ab:fd:20:66:a0:d7:52:9f:95:b8:fe:fd:6c:
                    5a:9f:3e:07:1f:53:7b:46:61:f8:7d:36:db:e5:c1:
                    f7:f6:7f:40:6f:2e:60:e9:9a:11:bd:be:97:56:a8:
                    2b:5b:d2:42:7c:59:36:98:62:8b:d8:95:2f:a8:d1:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:708::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202327

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:ad:6a:cb:33:fc:b1:27:30:99:32:d5:76:b7:88:c5:55:
         b9:06:0e:57:6c:c9:bc:8f:0a:17:bf:63:db:04:7e:ec:b9:96:
         de:c9:88:17:67:00:6e:dc:93:74:10:f5:6b:ec:73:e6:72:af:
         16:65:e8:5b:f4:61:9d:66:78:7d:06:6a:c8:e1:d0:e9:07:01:
         e8:78:ed:65:65:9e:6b:e8:04:e3:c4:11:f3:c8:18:53:62:df:
         c2:f9:b4:25:49:f8:5d:be:fc:5f:39:b1:c1:36:a5:20:ec:3f:
         d7:8e:3c:4b:c6:f0:51:6f:1c:32:a0:18:f6:e7:1c:c3:41:c7:
         b0:fd:a9:8f:74:da:ed:89:b0:68:b2:c3:02:0b:69:6b:03:05:
         96:4c:a0:68:a5:85:89:da:1f:36:ac:5a:4c:80:31:68:62:0a:
         32:78:ee:5f:50:0c:6a:f3:1f:f0:ce:64:9d:c2:07:d4:5b:8a:
         8b:f3:45:0b:97:f5:11:3b:00:1d:3f:23:a5:bf:ee:f7:70:63:
         37:ab:d5:68:6b:aa:bf:58:54:35:8e:0f:e6:2d:7a:6d:5f:bd:
         af:a7:58:cb:6c:79:49:17:53:ea:75:b4:c7:36:d2:dc:04:0c:
         be:d6:97:61:0c:07:21:05:d1:23:81:09:ff:d6:ca:d8:67:89:
         48:6c:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----