Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer (raw, json)
Hash identifier:          MHo6cUbPGFG5yLEmLLc5ewyhRnGu7+d04V/KXfOCWYU=
Subject key identifier:   CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348B4B01E41390DDCA33253F0471D31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.4.4.0/22
                          IP: 2a02:5e40::/32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:b4:b0:1e:41:39:0d:dc:a3:32:53:f0:47:1d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:9a:e7:e0:be:3d:cb:db:f5:e7:0e:7c:80:
                    d2:a6:c6:51:0e:9b:96:a1:e9:ee:78:c6:a2:fe:00:
                    39:23:dc:17:75:46:4c:b7:83:a9:19:c5:f4:61:91:
                    2c:b0:dc:c9:b4:c2:50:3e:8b:9b:e3:b5:5f:12:38:
                    27:d7:0c:ee:df:81:04:f8:cf:ec:6e:85:de:59:bd:
                    44:33:55:06:3d:e8:78:47:05:43:27:a8:ae:da:b9:
                    6a:ff:bd:c9:f9:d2:8d:0d:ab:12:1a:c7:18:ec:7c:
                    f1:96:8b:b0:bd:16:5a:9c:a5:dc:df:59:d4:1d:a5:
                    38:5b:d6:2f:6a:ac:ad:6d:02:83:f7:d7:cb:92:ae:
                    1e:8c:4c:32:b3:3c:88:21:01:be:b7:38:7f:f3:de:
                    e1:25:5c:46:ff:91:6c:77:28:58:06:9e:ce:74:4a:
                    dc:28:2a:f0:39:6a:f2:89:93:b3:51:56:86:64:5e:
                    c5:7d:d8:d8:07:ac:db:ce:0b:4d:57:31:93:63:ea:
                    31:89:94:15:d8:14:1c:2d:4e:cd:61:04:67:b5:8d:
                    32:33:af:27:c5:09:fd:cb:ec:02:b6:46:a8:6e:1d:
                    b3:e3:78:79:3e:79:85:20:82:cd:c1:11:66:15:5c:
                    54:c7:5c:67:26:2a:9c:4e:25:0b:6b:3a:40:4a:65:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.4.0/22
                IPv6:
                  2a02:5e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:4e:01:78:b4:d5:5e:fc:01:92:6b:af:73:b4:db:d1:bd:
         52:49:f2:97:c6:3d:98:73:8e:21:2d:c0:63:43:ac:8d:34:41:
         a7:ac:32:65:c9:3c:42:c6:85:69:26:aa:1c:66:88:16:a1:82:
         26:0c:ef:b4:b5:66:df:84:7f:34:cd:f6:27:cf:89:8a:50:8b:
         48:4b:9d:30:19:62:ad:da:af:f3:38:52:e9:3f:58:eb:8a:18:
         24:ae:49:19:16:10:d5:42:79:d0:de:c9:83:4e:e1:fe:a8:42:
         ad:10:ac:4a:e2:74:57:af:48:7a:d4:35:d5:91:01:c9:d2:90:
         b8:e6:5a:b7:dc:b7:26:21:8c:b4:c7:d1:d1:3f:68:52:ff:98:
         ba:e2:95:8e:37:45:ee:87:48:b7:b6:83:1c:6c:03:9b:f3:0c:
         65:db:0b:46:8f:09:95:2c:17:cc:83:6a:df:be:99:14:d7:e8:
         e5:47:45:11:b5:62:d6:2b:e8:9e:0b:29:16:5e:d1:60:30:70:
         c4:76:93:0d:79:87:fb:6f:5f:55:97:37:7a:75:29:fe:2c:fc:
         c7:3c:e3:84:23:40:94:78:cd:89:4a:10:39:16:73:59:0d:01:
         bb:58:df:42:15:d8:da:ed:52:8d:51:de:5c:77:94:f8:09:2b:
         0b:9a:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----