Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
File:                     ee-AdXX1WsX-nfSkqExMh2CPAoU.cer (raw, json)
Hash identifier:          ar96dzFPsO8TAfEl5rQh3jR75Bi8dZkYpQCxhQgSY/c=
Subject key identifier:   79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E80EF1BAECEEB61F7EE51855E1EA5D9EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 27 Mar 2024 17:22:17 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215450

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:80:ef:1b:ae:ce:eb:61:f7:ee:51:85:5e:1e:a5:d9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 17:22:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:10:12:9d:06:52:69:f5:ec:70:61:5e:c4:
                    8c:a9:a0:dd:1a:26:6d:8e:a2:4a:46:d6:e8:8d:30:
                    38:67:cf:bf:d3:12:4e:7e:e3:59:35:39:cc:4d:3f:
                    7c:76:8c:23:d2:c4:f2:c6:80:4d:0f:2c:f2:e4:be:
                    b6:cb:14:f1:76:0d:61:25:71:75:fe:08:20:75:a4:
                    f5:fe:93:28:0c:6f:c0:f2:79:d9:50:9b:81:76:46:
                    59:a4:f6:52:e0:fb:df:d5:e3:d8:df:75:e7:ed:39:
                    51:e7:f1:7a:0e:5f:01:64:51:84:0c:6d:00:16:36:
                    87:b1:5a:5e:a5:97:c9:29:d9:0f:ef:68:af:87:2c:
                    3a:73:4b:39:a8:17:e4:e3:52:ca:5e:4c:00:ac:6d:
                    8c:5d:43:07:53:df:9e:51:78:65:d2:f8:fe:2b:63:
                    2c:1e:01:b0:23:e6:a0:1c:d5:e4:27:e9:0f:31:49:
                    cd:f2:97:a3:e9:a0:31:bc:1b:b9:76:f6:92:68:f6:
                    69:4d:62:c1:e3:b6:09:f4:0d:04:f0:5d:53:58:5d:
                    f9:12:89:24:d4:85:28:4b:62:4b:11:50:63:b3:6d:
                    bd:31:da:ae:de:96:a0:8d:99:d2:51:5d:e4:da:fb:
                    46:9f:3d:f4:2d:04:40:f5:38:55:54:f8:84:57:fe:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215450

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:3d:4c:22:cd:bd:d7:ac:5b:0f:3d:91:34:d7:67:65:7d:
         45:d9:6f:8d:55:70:4d:87:b0:f9:89:91:d4:8f:80:32:cd:80:
         fb:db:fd:1e:ce:86:f1:04:2f:99:3f:92:48:64:d5:ca:4c:de:
         90:39:42:25:ef:0c:66:1b:10:1b:67:34:1e:52:9f:bc:8e:ae:
         98:66:e3:6c:e8:96:c3:f1:ec:cc:5b:c4:a1:5f:8c:ef:a8:19:
         33:b9:46:e7:4e:2e:20:4a:d6:d3:38:9a:aa:94:9a:44:df:10:
         d0:db:39:12:66:20:3b:6c:08:e4:d7:dc:a3:5f:c8:76:f5:98:
         1f:1e:ed:99:a0:67:0f:b0:bd:4c:a9:3b:e9:85:80:f4:58:15:
         c3:96:14:51:fc:ed:32:5b:fe:4d:b3:6d:a9:f5:65:1c:d0:41:
         fa:8e:45:20:f1:7e:4e:d5:63:7d:a5:d1:43:a6:85:58:d0:c5:
         b4:92:59:b6:ab:7b:96:93:fd:4f:19:dc:ab:d3:f1:bd:3c:f7:
         ef:68:ae:a5:71:15:62:a3:ad:4d:61:ba:0d:9a:7a:15:65:0b:
         5b:8c:7d:08:43:79:9b:e2:de:ef:1d:e0:f7:c8:2e:87:eb:3f:
         0d:e0:79:47:7f:5d:33:ce:b9:f0:bd:b8:92:64:11:fa:1b:01:
         43:a2:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:21:09 2024 by rpki-client on console-ams.rpki-client.org