Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
File:                     qnNO9a4hwOiX-hhkRxhOya1K4p0.cer (raw, json)
Hash identifier:          hoCjUImtx3AGEYxETxg/lNXFD8gbc/gzhWOnIS+oIo0=
Subject key identifier:   AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DFAA8AA66453107B978C391BC3CC90EEB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 15:36:14 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208853
                          IP: 2a0e:6ac0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:fa:a8:aa:66:45:31:07:b9:78:c3:91:bc:3c:c9:0e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  1 15:36:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:e6:1b:53:af:a6:eb:c4:0e:14:da:d7:f6:
                    bc:cb:40:33:1c:8c:0d:ca:2d:a1:c1:f0:4d:57:44:
                    83:ee:27:48:4b:d1:ab:42:2c:25:00:b5:68:5c:84:
                    19:4d:40:10:02:ef:95:a8:58:bd:f7:a1:a9:62:b6:
                    af:5a:6a:e4:9f:c7:5c:f6:93:33:bb:6f:8e:89:df:
                    59:90:5e:af:d3:dd:cb:e6:01:28:8e:a2:b3:27:28:
                    58:71:b5:28:0e:59:ed:66:f4:52:65:3c:4d:bf:46:
                    8a:62:7a:1c:75:28:83:0f:72:b2:e0:58:0d:fa:ef:
                    4c:20:1d:2d:9b:df:01:91:93:98:2b:cd:4f:98:5d:
                    0f:1f:5f:1f:bf:7d:66:98:47:54:cf:98:7b:ef:32:
                    6a:e1:e8:7e:90:8f:fa:38:0d:4f:c0:57:11:b6:15:
                    77:c3:24:9e:4e:67:b3:15:51:ec:ef:02:69:33:4b:
                    e7:d3:d3:8a:ca:3e:09:1f:67:ac:83:f7:3d:cd:d2:
                    86:4c:ee:df:08:86:c4:e6:23:f6:66:4b:e5:42:13:
                    ed:26:a2:30:41:2e:65:34:da:48:22:91:fe:9e:cd:
                    23:68:76:0d:fd:22:5f:45:8a:f2:7b:f4:7c:9c:fb:
                    1c:7b:00:ba:f2:9b:2e:61:0d:b3:bf:7d:0e:4c:31:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208853

    Signature Algorithm: sha256WithRSAEncryption
         af:1b:7f:b8:de:fb:d0:73:a8:66:2c:33:c8:60:26:52:66:c4:
         70:c1:2f:e9:4e:01:6a:c1:7c:3a:63:a1:6c:ad:fe:d6:2e:8e:
         a5:88:23:60:57:3d:e3:74:7f:e5:48:6d:4c:96:cd:78:7a:aa:
         10:55:88:9c:7b:47:99:a5:d9:ea:39:f8:b5:00:25:65:62:3f:
         ca:64:83:77:a1:62:ba:15:90:97:36:84:ab:48:25:e7:fc:44:
         dc:91:91:ec:b9:76:92:e1:88:fd:c8:5a:93:ac:ac:2d:c4:95:
         c4:47:a4:a8:1b:a0:86:4d:c3:1b:44:6c:f6:08:83:1b:6d:bc:
         d9:dc:c5:78:2e:55:a0:46:f5:b9:7a:0b:30:e1:40:35:f0:02:
         49:70:48:55:c5:19:e8:f2:da:13:7c:89:34:51:ed:43:da:a9:
         75:30:51:e7:00:37:95:e1:ea:cf:ff:8a:d2:8b:dd:1a:f1:5e:
         02:93:26:db:a8:f8:b1:4f:3a:c5:41:ae:a2:9d:01:ee:17:4d:
         ee:3d:dc:14:f8:dc:60:aa:96:ea:d0:7f:85:ee:90:da:00:da:
         1f:34:ea:ac:0e:f2:dd:c6:2c:46:4c:9f:b8:a5:0e:d7:2e:e6:
         5f:fc:62:b6:27:92:6c:a3:a9:b3:3b:1e:a8:04:93:da:02:ee:
         17:c7:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----