Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
File:                     xcidUmDLNP27s7wlv0rbr0zcaKA.cer (raw, json)
Hash identifier:          ApEkJI7CiKjy4r539VJ4Oe7zqKeomp3Dw+fxFLl056s=
Subject key identifier:   C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D36047A864A657D1027137F8097D39A41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 23 Jan 2024 11:11:19 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197455

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:36:04:7a:86:4a:65:7d:10:27:13:7f:80:97:d3:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 11:11:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:c1:e1:d8:9d:ad:31:3c:31:0a:a7:a4:cc:
                    07:34:3e:55:93:63:e6:db:af:04:d9:c6:7a:bd:59:
                    99:ed:21:6a:b7:5f:28:ea:67:c3:5b:a3:03:4e:63:
                    c0:2a:35:39:9f:bf:2e:51:23:3d:51:41:da:53:03:
                    c6:92:57:62:c4:c1:d1:28:a2:a1:62:67:01:26:73:
                    43:e1:6f:c0:73:50:8b:a3:38:e2:42:05:90:7c:77:
                    5d:00:08:ee:4a:cb:3a:5e:62:ad:64:b2:1f:95:71:
                    16:9e:c1:a5:81:be:67:05:f7:78:e1:6b:87:0a:6c:
                    a7:42:c5:6b:b0:aa:d1:23:88:4d:da:74:d5:b3:a6:
                    6d:32:2a:c5:7c:71:d7:3a:08:6e:90:af:a6:db:16:
                    5d:07:75:e7:35:f7:9d:87:45:6e:d3:e7:e5:01:f7:
                    e2:97:4e:11:20:2d:e7:34:14:c7:fb:2e:9f:48:40:
                    dc:41:3d:6c:3c:75:ea:78:d4:c7:24:9b:b9:73:d5:
                    df:22:e8:41:d3:e4:68:d8:9e:a0:2e:65:49:0e:da:
                    b1:ec:22:b3:5a:82:c1:7b:e7:55:9b:7a:67:ed:0e:
                    62:13:42:09:55:a5:b0:99:1b:15:04:a4:91:24:c0:
                    1d:a9:3c:68:a2:e3:d2:fb:1b:1d:e9:09:c1:9d:e8:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197455

    Signature Algorithm: sha256WithRSAEncryption
         68:36:e4:55:66:b4:e8:6c:84:e2:71:8b:98:f7:ef:59:cb:10:
         45:a9:ce:a4:e3:36:ac:a6:6a:8d:ab:1b:fd:74:d2:b3:18:18:
         ae:6b:a9:25:30:30:9b:f0:63:40:4a:31:df:0f:59:b2:17:c6:
         98:75:89:9e:75:43:c5:58:90:30:72:18:ea:42:db:c4:6e:d3:
         06:35:a2:74:9b:a9:dc:1e:6c:37:d8:5a:e7:31:44:51:dd:e5:
         52:83:fe:a2:52:34:de:16:c7:c8:e2:da:b0:db:fe:9e:6c:f6:
         c7:a0:1f:85:6b:70:e3:e5:3a:17:07:30:b6:70:a0:c6:25:e0:
         68:3e:77:19:d2:1d:d6:84:2d:e8:97:aa:95:43:a9:13:e6:54:
         10:03:b3:08:30:50:b2:c4:3a:1c:5c:cc:55:64:d4:a3:b1:44:
         be:63:c3:1b:69:d2:f5:3e:29:65:a8:be:5c:d6:2b:73:35:bf:
         8b:05:a8:32:0a:72:66:73:23:f9:84:ff:33:f5:e8:fd:f0:33:
         a3:77:48:a7:01:4c:6e:16:10:0b:70:48:b6:0a:ca:77:07:8f:
         06:71:7e:b2:43:9b:bb:30:ac:b9:43:f4:7d:d6:be:40:1d:a3:
         dc:a3:9e:f1:19:e3:5b:c5:88:c2:de:0e:ba:ce:bc:53:97:6d:
         76:84:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----