Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
File:                     xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer (raw, json)
Hash identifier:          zMzbMjeJUtCj0sxPo6s99OqxCZPon/iTV01kNcAYc+s=
Subject key identifier:   C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01924F3931E5A86A7F634B0D7C041FF73202
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 02 Oct 2024 21:53:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214123
                          IP: 2001:67c:f20::/48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:4f:39:31:e5:a8:6a:7f:63:4b:0d:7c:04:1f:f7:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  2 21:53:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:43:c5:ab:d8:bf:55:24:41:a8:86:69:c6:
                    d3:70:b2:f1:a4:67:03:f6:a5:8d:75:99:1e:46:14:
                    1a:b4:d5:2d:ad:38:c9:e9:cf:5d:2b:6c:1a:94:db:
                    bc:a6:59:6d:0f:74:ce:8a:87:48:c9:58:57:c6:32:
                    4c:73:0e:c2:86:e6:4e:13:0c:95:57:7a:49:20:7b:
                    5a:1b:27:3b:f6:e2:57:89:e5:c3:7e:fa:bb:5d:51:
                    14:69:84:e2:cf:65:31:f9:4d:32:c8:94:54:69:3a:
                    41:50:ee:5f:22:aa:da:d2:2d:8c:5e:a3:6b:a8:30:
                    ec:94:0f:d4:41:cf:f0:b2:49:cf:b8:d7:1e:45:96:
                    df:c1:b7:99:1b:bf:7a:05:a9:1a:ce:41:88:01:04:
                    85:db:7f:25:e7:b5:8c:97:7d:11:da:19:ec:68:d4:
                    fb:9f:b9:34:10:89:c1:37:1c:60:68:10:85:e0:e4:
                    47:10:e5:ab:92:fa:f9:31:44:31:2c:2e:21:5d:39:
                    8b:d8:c2:3b:bd:aa:c6:e2:78:cc:d3:33:12:f2:f9:
                    07:ec:32:21:76:96:84:a1:bc:8f:c7:42:fe:95:a1:
                    69:2b:62:11:fd:d6:0a:1d:1f:fb:6b:c4:87:33:f8:
                    18:62:0a:5c:31:ff:64:c2:ff:37:d4:8f:a3:d4:4c:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f20::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214123

    Signature Algorithm: sha256WithRSAEncryption
         96:54:f7:20:c6:7e:e2:b8:8f:94:d7:1a:54:03:f9:79:5b:c5:
         e3:ae:de:3d:a3:66:f1:35:3d:45:ea:6f:3f:8e:a1:80:d1:7e:
         cb:19:bf:eb:d5:03:8b:ce:29:71:6d:b7:9d:7a:06:90:63:2c:
         61:58:bf:5c:de:ad:f8:97:d9:0c:34:85:84:36:ea:06:27:92:
         4b:59:f0:0e:3c:5b:d8:b4:31:b7:3e:b2:42:ce:3f:88:d5:5d:
         2d:d2:7f:af:58:16:61:2d:58:bd:52:48:a9:af:86:47:33:51:
         dc:4b:f0:90:7f:d4:15:ac:39:70:c5:96:5c:a1:79:d6:9b:7e:
         08:16:f9:b2:69:63:60:60:4c:7a:80:81:8d:50:61:23:d4:04:
         3f:55:5b:52:4e:af:6c:ac:9e:e3:14:72:7e:89:a1:6c:6e:3e:
         6d:fb:24:31:e8:04:09:17:fd:3d:5e:71:9c:cb:2b:9a:82:5a:
         77:b5:55:a1:ad:b9:26:5d:4b:ae:73:83:79:dd:18:d5:2c:a2:
         49:5e:27:69:e2:7e:9b:80:38:05:b5:14:5a:15:81:df:58:fc:
         ca:68:48:4e:3f:4c:4d:ea:2f:81:e3:ce:2b:95:4f:b2:61:bf:
         cc:3d:b7:da:af:d7:cd:20:19:ef:62:fd:76:7b:7e:c5:eb:85:
         28:62:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----