Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
File:                     ycbGTWd6yWSqxmbrrLnRf6jIq80.cer (raw, json)
Hash identifier:          +TWWs6SHNryPY9kAbX/R7GzM/yVq228KUxpKu+cQFRw=
Subject key identifier:   C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DF2B05F1E23C6E678E5EE53EDB311E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:31:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206439

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:2b:05:f1:e2:3c:6e:67:8e:5e:e5:3e:db:31:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:31:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:d3:b9:8e:54:26:56:0f:ce:05:39:14:80:
                    41:0f:2f:3c:71:fd:6d:09:4f:5b:c8:8c:15:dc:79:
                    eb:88:28:81:80:61:11:5f:f9:60:ac:91:b3:bd:8f:
                    2d:f8:31:c5:27:a9:aa:99:1c:19:06:ed:5b:ec:76:
                    f8:6c:6b:51:e9:a9:dd:bc:94:e7:19:7a:d0:9d:af:
                    f1:24:9a:84:a8:03:d5:0c:0c:53:ee:ac:27:73:f5:
                    69:6d:dc:7a:1d:d5:34:f3:77:8c:bb:18:d9:e4:0a:
                    69:03:ab:f0:e3:6d:99:27:89:3c:d5:89:b1:66:31:
                    6b:1a:0b:8f:1a:fa:1d:fb:82:67:ef:fa:52:81:08:
                    fc:e5:ff:33:8a:ea:98:95:c3:4f:bb:74:c0:60:c0:
                    92:f5:fd:49:4a:37:51:32:f2:5f:41:24:2f:c1:9b:
                    10:8e:d8:44:62:10:e3:88:a0:cf:e0:7b:1e:2e:eb:
                    9f:a0:b0:e5:37:c6:1d:54:ee:47:b6:fe:7d:b4:ef:
                    75:7d:7f:23:f3:7c:4b:b1:88:ec:80:2a:55:c4:e1:
                    7e:47:d5:3c:89:b7:05:59:0c:b9:67:59:12:b9:33:
                    8d:7a:a6:d9:d7:7c:a8:fd:fd:93:82:c2:a8:8b:48:
                    4c:55:24:ba:5c:8b:fa:b1:85:fd:0a:e9:27:31:34:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206439

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:05:75:e4:e0:69:99:b7:d8:10:bc:50:5e:fd:40:92:76:
         00:bb:e9:27:2f:bf:9f:0d:fd:e3:fa:13:4e:c0:80:12:3b:71:
         c3:7e:c4:55:c6:28:7b:12:c8:12:86:fc:6d:49:dd:76:03:f3:
         76:4d:8d:3d:06:cd:4e:6b:83:9e:65:5d:0c:b5:05:ef:fa:d0:
         ca:bb:69:8e:3e:4c:21:e5:07:df:41:6b:2c:91:2c:e6:32:3c:
         95:81:18:c6:33:56:5d:4c:a0:77:70:c5:54:7b:a3:fb:56:89:
         b8:aa:f6:22:ff:e8:ef:91:4e:0b:f2:91:8e:4f:40:d8:3c:db:
         df:29:ca:6c:29:96:6f:65:6c:d0:16:f1:9c:f8:e5:df:97:00:
         fe:b4:ff:75:89:3e:d8:d1:4a:91:4c:52:8d:76:eb:ec:19:d3:
         88:6c:b7:09:c9:8c:9a:44:0e:c5:76:12:86:e8:40:d1:1c:cd:
         c0:6f:f7:23:63:51:a1:bc:2e:94:25:3a:ab:27:6a:96:44:b6:
         3f:43:bf:9e:ea:49:26:6e:6d:4a:9f:cf:03:2b:93:d4:9c:fb:
         20:df:50:4c:b8:59:f6:00:01:6c:36:e9:32:eb:b1:8f:08:ee:
         71:af:52:ea:10:b3:97:7b:01:ae:ed:68:e4:6d:4f:39:4c:d8:
         5e:df:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----