Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
File:                     eJMzeVlLis4GnZO_CICksp7ShnM.cer (raw, json)
Hash identifier:          JIazgJJXp7g9iM4SreTz13qh/QFd6i05gUljigKV0O4=
Subject key identifier:   78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0192B807A381DC073B4C9C1E44C19F1598DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 06:19:21 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 44710

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b8:07:a3:81:dc:07:3b:4c:9c:1e:44:c1:9f:15:98:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 23 06:19:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=78933379594b8ace069d93bf0880a4b29ed28673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:7a:91:a7:82:61:80:47:c7:f5:6a:2b:dd:
                    18:ec:85:b3:a5:5d:1f:20:94:eb:de:62:84:7f:a0:
                    15:d3:9c:84:bc:6d:d4:c8:c4:af:3a:f6:18:89:02:
                    b4:ac:64:31:3a:4b:16:66:a9:29:f6:87:f7:f2:48:
                    7a:a1:ee:cc:93:01:d1:6c:1a:d1:22:1f:a5:2a:76:
                    ab:6d:c2:ae:a8:9e:c8:e7:3d:19:8b:e9:6b:91:d3:
                    b4:b6:fe:d2:31:58:ad:f1:1d:a0:71:4c:89:b8:68:
                    49:b5:eb:4a:cf:a6:2d:e0:61:9a:23:3b:48:41:c9:
                    04:ff:7a:fe:f0:22:f5:ba:20:e5:66:04:f1:94:1f:
                    32:59:18:e5:70:cd:b6:ed:e2:0a:5b:38:b3:85:e4:
                    56:5e:64:96:8d:13:aa:ad:e3:a3:d2:8f:d2:f6:94:
                    32:8f:3b:4a:e3:d2:29:b1:1f:44:28:36:a3:d1:00:
                    6d:f4:f7:01:2d:a3:f0:40:7c:0a:85:3f:bc:ed:a0:
                    77:31:51:97:d4:e7:b7:d9:70:98:01:5e:7c:03:05:
                    b0:0b:2c:d6:21:96:81:1e:16:77:89:8f:03:af:df:
                    8a:7e:92:88:11:48:02:dc:7a:4b:e8:92:81:93:7f:
                    02:e6:be:3c:b1:2d:fa:2f:6f:37:cd:e1:7f:7d:1f:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44710

    Signature Algorithm: sha256WithRSAEncryption
         37:3e:1f:87:13:8e:c9:be:cb:88:38:40:e9:e9:b8:4a:37:84:
         a5:ea:2b:cc:62:42:f5:cd:27:7c:39:df:fb:e6:a1:90:bb:70:
         20:0d:96:36:31:b1:dd:a6:7e:b9:1a:1c:7d:eb:b3:f2:39:6f:
         ae:32:fa:b6:52:12:e6:65:2a:41:2f:0d:af:36:66:82:8b:28:
         e6:e2:21:73:83:99:b0:46:5e:e6:a0:3e:da:41:9d:a0:f0:ea:
         01:06:c6:89:5a:4d:db:d8:e3:bd:11:fb:a7:f0:93:5a:cf:ec:
         19:e5:3d:c3:f6:8d:5f:09:9b:17:28:56:dc:4d:40:62:25:bf:
         44:f7:b3:51:56:dd:f5:d4:89:63:ff:d0:f8:36:af:b4:f8:66:
         62:8c:c6:af:2b:28:85:f7:ee:94:af:93:5e:36:7f:d0:56:73:
         fc:15:93:d0:71:86:60:89:be:c3:4c:ea:97:f1:c2:54:55:4e:
         b6:ad:61:44:c8:bc:e3:6e:97:6e:9e:69:eb:15:2b:88:c9:29:
         d0:65:71:42:d6:8c:f2:5f:1f:0a:ca:85:9c:af:c7:4d:0c:df:
         b4:65:6b:e4:4c:88:b4:3a:f8:53:be:17:18:18:7f:3d:79:de:
         c1:38:28:13:c0:64:e9:53:40:a3:60:4b:c4:40:83:ac:5f:14:
         1f:43:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:11 2024 by rpki-client on console-fra.rpki-client.org