Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.cer (raw, json)
Hash identifier:          +AzIev72QR5s9biYoYGlZ4Z2Rlt5nl9ZJ5E5VkUw/t0=
Subject key identifier:   11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8714F1667B97B2D7DB6E618065B684F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:31:58 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 50357
                          IP: 193.106.124.0/22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:71:4f:16:67:b9:7b:2d:7d:b6:e6:18:06:5b:68:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:31:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:46:11:d5:0b:cf:35:a0:0c:78:5a:65:a6:
                    e2:bb:04:55:a5:e6:a6:86:b8:b0:55:a8:06:a3:7a:
                    68:68:52:30:da:c0:e5:c7:ae:0d:ce:8d:1a:5d:1e:
                    a7:63:a7:c7:ce:a5:df:95:b9:d6:72:3d:38:6d:4a:
                    30:32:78:96:4a:4b:da:47:f7:65:e6:04:83:18:10:
                    98:a4:e4:bf:cc:18:0c:1c:a1:c1:03:b9:ff:e5:65:
                    8d:3c:1a:a2:f7:41:d2:ee:de:58:4c:5a:bb:c0:de:
                    22:c1:32:fe:c0:f4:47:5b:9f:a9:e0:df:ed:54:ee:
                    8a:52:9a:7d:05:21:27:17:ab:66:33:0b:10:a3:bb:
                    21:ef:db:a3:5c:73:01:a0:7f:6d:3d:c2:68:d2:f4:
                    d6:0f:55:00:b3:12:de:eb:73:11:88:19:31:62:2a:
                    93:e8:b8:da:69:7c:8a:bf:e8:14:ed:74:a7:c2:d2:
                    fd:ea:b8:8f:00:8a:f8:25:b0:da:7e:fb:a8:82:6c:
                    d2:5c:ad:af:ca:23:e4:f5:23:bc:f8:fe:38:43:ed:
                    1b:71:0a:6f:f9:56:2a:5c:81:dd:0c:63:6a:b5:7a:
                    e5:25:6e:f9:34:3f:17:55:7a:ef:3e:6a:d7:ae:0c:
                    1c:bd:2e:e3:dc:53:24:0a:15:78:06:b9:52:01:67:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.124.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50357

    Signature Algorithm: sha256WithRSAEncryption
         40:36:29:1a:c8:29:53:ac:7a:3c:f6:39:6d:c5:3e:4f:dc:83:
         67:7a:47:a0:68:7f:f3:03:c4:4a:d1:c6:45:b4:7c:5a:78:7c:
         70:8f:06:50:07:b6:05:fe:0b:48:b7:7c:8d:de:9b:89:68:bc:
         5c:a2:d7:e6:fa:c5:2f:ce:e1:34:75:ca:e2:9a:45:18:d1:d1:
         84:1b:f2:94:c4:7a:4e:c8:a7:ca:29:8c:bd:0c:59:e9:b2:44:
         21:6c:da:78:cb:36:69:84:ca:8b:bf:a1:7e:48:59:51:87:f3:
         1a:65:b9:91:b4:57:5a:13:ff:c2:d0:1e:06:cb:09:c1:98:7f:
         1e:a1:ff:e9:6f:c1:08:e0:ca:b6:89:6b:72:f5:98:8a:ee:64:
         2c:30:42:1b:c5:de:16:06:da:44:2c:0d:dc:e2:98:1d:63:90:
         ea:89:f8:bb:3e:46:b9:fd:66:5d:59:6f:bb:6d:d4:2e:4a:ae:
         4f:80:56:02:ec:4c:ae:88:bb:38:e6:38:10:d7:1a:45:95:73:
         cd:fa:1a:61:17:8e:54:03:a5:4b:e8:13:5e:df:5c:c3:ef:7e:
         20:32:05:e9:e1:16:b5:0d:32:91:03:79:fd:2d:2f:09:89:1a:
         f9:3d:89:33:9b:7c:6d:41:77:ec:4d:b0:02:53:57:b1:fe:b2:
         0b:cf:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:11 2024 by rpki-client on console-ams.rpki-client.org