Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
File:                     vJldFVAngKzfe25qGGXttaDn3Es.cer (raw, json)
Hash identifier:          3tH7igPbVUdZ8mfj88PBrNrua0NM3/wMZvLyQev7PIw=
Subject key identifier:   BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019122AD2B2644C5A47BFEC3CB31D901744E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 05 Aug 2024 13:14:19 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a14:71c0::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:22:ad:2b:26:44:c5:a4:7b:fe:c3:cb:31:d9:01:74:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  5 13:14:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:f0:7a:6b:83:ac:08:6a:9e:ce:4f:3c:97:
                    39:3e:e0:49:69:56:60:73:57:3a:48:43:f7:29:04:
                    81:7a:70:ba:cb:6d:ff:d0:c0:03:59:24:fa:dd:c3:
                    d1:f0:2e:1c:69:8a:fd:8a:d0:ad:f5:f0:39:df:b8:
                    04:5e:79:61:71:04:0b:88:c2:18:f0:89:a5:ae:d7:
                    3e:7a:a4:cf:17:35:88:75:d4:6b:cd:c5:f8:d9:ad:
                    97:88:e4:b9:36:49:8c:f1:8b:cf:3a:5a:9b:74:3d:
                    32:93:9b:f0:48:c0:0f:8e:fd:84:3f:3a:3d:b5:85:
                    ef:9e:45:07:c8:6b:6a:0c:e4:2d:35:fb:34:65:22:
                    32:8e:71:de:dc:56:43:2b:89:fb:5a:01:d9:eb:be:
                    b1:e3:0a:49:b1:f1:9b:3e:51:6c:48:66:11:33:ce:
                    4f:c1:41:2b:7e:68:53:56:b7:1f:86:f0:0c:6a:aa:
                    64:99:a8:26:d3:9b:e8:e6:d3:ba:13:b6:e4:12:ce:
                    2c:fd:e2:79:14:f5:60:7a:e1:bc:0a:d8:67:b1:06:
                    be:49:25:aa:62:4e:3a:1c:56:45:bd:20:46:a4:ae:
                    25:41:ee:a7:80:44:f3:b7:fb:60:a1:be:ab:dc:86:
                    9a:60:a0:10:3d:3b:78:10:93:c6:1c:f6:18:5e:0d:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:71c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:23:3b:6c:a1:bb:63:4c:51:fe:92:d2:e0:df:9f:aa:32:
         84:f0:a4:e1:0a:60:ae:b5:5b:5e:ab:fa:cf:23:36:78:49:9b:
         c6:8a:20:03:9e:a5:bc:10:60:f4:82:43:ac:16:e2:95:10:d8:
         ea:6b:02:47:d4:33:f9:08:c9:cd:1d:a2:73:96:e5:e0:7a:dc:
         b7:b7:55:93:b1:cd:d4:ca:83:f3:d1:8a:a0:e8:ce:7e:92:69:
         bd:95:35:fa:0e:56:e8:d9:0a:33:f1:d0:e5:8b:61:b0:79:26:
         bf:11:76:52:54:da:a4:46:01:34:ff:cb:1c:50:43:94:17:7b:
         70:6a:da:bd:61:7a:de:44:f7:46:a6:9a:ec:4c:38:b3:20:3c:
         ae:d6:d8:0a:65:9f:2f:e4:24:5e:a8:db:b2:d9:44:8a:08:10:
         86:4d:55:b2:e0:fd:42:03:16:51:c1:78:08:84:1e:91:14:de:
         74:b2:f6:39:61:cd:36:e1:fa:de:b1:31:53:42:cb:b5:38:0a:
         0e:fc:36:03:8c:02:0a:9b:6b:1c:dd:2d:f3:a6:b9:3d:9c:4a:
         d9:f2:e4:18:97:3d:67:38:69:be:8c:1e:b8:73:91:d0:1f:5c:
         20:39:d5:09:63:57:e4:5e:da:39:37:84:56:eb:4e:05:3a:1f:
         0c:16:0b:5a
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZEirSsmRMWke/7DyzHZAXROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODA1MTMxNDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzk5NWQxNTUwMjc4MGFjZGY3YjZlNmExODY1ZWRiNWEwZTdkYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvXwemuDrAhqns5PPJc5PuBJaVZg
c1c6SEP3KQSBenC6y23/0MADWST63cPR8C4caYr9itCt9fA537gEXnlhcQQLiMIY
8Imlrtc+eqTPFzWIddRrzcX42a2XiOS5NkmM8YvPOlqbdD0yk5vwSMAPjv2EPzo9
tYXvnkUHyGtqDOQtNfs0ZSIyjnHe3FZDK4n7WgHZ676x4wpJsfGbPlFsSGYRM85P
wUErfmhTVrcfhvAMaqpkmagm05vo5tO6E7bkEs4s/eJ5FPVgeuG8CthnsQa+SSWq
Yk46HFZFvSBGpK4lQe6ngETzt/tgob6r3IaaYKAQPTt4EJPGHPYYXg2pNQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFLyZXRVQJ4Cs33tuahhl7bWg59xLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzA0NDM1
MC04Y2M5LTQ4NmQtODdjOS01NzJjNGUxMjlkMzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMDQ0MzUw
LThjYzktNDg2ZC04N2M5LTU3MmM0ZTEyOWQzMi8xL3ZKbGRGVkFuZ0t6ZmUyNXFH
R1h0dGFEbjNFcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKhRxwDANBgkqhkiG9w0BAQsFAAOCAQEAPLgj
O2yhu2NMUf6S0uDfn6oyhPCk4QpgrrVbXqv6zyM2eEmbxoogA56lvBBg9IJDrBbi
lRDY6msCR9Qz+QjJzR2ic5bl4Hrct7dVk7HN1MqD89GKoOjOfpJpvZU1+g5W6NkK
M/HQ5YthsHkmvxF2UlTapEYBNP/LHFBDlBd7cGravWF63kT3Rqaa7Ew4syA8rtbY
CmWfL+QkXqjbstlEiggQhk1VsuD9QgMWUcF4CIQekRTedLL2OWHNNuH63rExU0LL
tTgKDvw2A4wCCptrHN0t86a5PZxK2fLkGJc9ZzhpvoweuHOR0B9cIDnVCWNX5F7a
OTeEVutOBTofDBYLWg==
-----END CERTIFICATE-----