Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
File:                     ee6oG28z9ptgubAduZrUbZDT1zs.cer (raw, json)
Hash identifier:          hyDOZ4J+a8lPiMOa/A0ko1z71/navylzhYuHIpu2mmg=
Subject key identifier:   79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019D72FB4CFAC544B6D182F73E0C6EE14C93
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 09 Apr 2026 16:02:45 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 2a05:1640::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:72:fb:4c:fa:c5:44:b6:d1:82:f7:3e:0c:6e:e1:4c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 16:02:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:a5:dd:bb:c6:00:60:cc:c8:8e:a8:05:53:
                    39:77:c0:d8:8d:d8:b7:03:c7:a1:d8:74:f2:bc:1b:
                    6c:c4:41:e2:65:b9:a1:1e:e5:79:d3:e8:ec:f7:fd:
                    5d:37:cf:98:43:fa:57:01:81:1f:c9:c0:be:e6:bc:
                    07:36:ac:c8:e6:de:0c:cc:03:84:ab:64:00:a8:39:
                    8d:e4:62:87:ce:b4:5e:e3:f1:b2:a6:65:e5:46:e1:
                    31:2d:3f:e7:f3:6c:d7:3d:5e:3f:0f:d9:7b:24:b4:
                    9b:d1:f0:e8:09:d8:19:97:85:28:65:69:1a:6c:25:
                    38:e5:16:26:86:47:be:63:5c:6e:58:b0:8b:40:38:
                    38:7b:e7:5b:ce:c3:cc:ea:5f:36:42:7d:d8:0d:1c:
                    22:b6:59:c9:28:61:91:8d:7e:0d:46:7e:28:a0:26:
                    00:50:d6:12:f0:6d:d7:bd:d1:95:a4:63:3a:93:4c:
                    0c:3f:6c:88:1a:9b:11:1e:4d:5b:f0:41:ab:00:fc:
                    8c:c6:18:87:2d:93:4d:97:ba:37:a0:b1:d9:ea:4d:
                    5b:ce:dd:fe:20:39:d8:d4:89:aa:35:47:b8:2e:4f:
                    b6:5f:4e:eb:5e:6e:5b:3f:ad:8a:d2:75:df:9c:99:
                    43:7f:df:e0:e6:5c:cd:42:3d:e1:3c:02:d0:63:c1:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1640::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:b0:89:f5:d9:10:81:70:f1:1d:45:ea:32:84:ef:be:fc:
         09:9e:25:91:6c:f0:28:f7:1f:b1:84:fb:86:9d:8d:1e:14:94:
         3b:37:d5:a7:08:db:20:5f:73:0f:fa:72:af:82:42:81:6b:86:
         e2:8a:e5:39:ff:49:99:07:1b:ce:e1:b3:f9:16:77:11:52:b9:
         08:84:19:91:ff:4c:6a:19:d4:72:22:46:9a:5a:dd:5c:a6:94:
         69:c8:c0:4b:26:e7:72:ed:65:c1:14:af:83:0a:ec:68:3f:62:
         89:68:be:21:99:f4:1f:55:23:f7:aa:d5:6b:e2:a1:a7:5e:4b:
         7a:d3:ce:3d:a0:1a:ca:dc:14:a4:3c:ef:72:7f:04:e6:d5:e0:
         75:d4:12:11:fd:fb:96:85:6d:c3:ec:66:9e:6e:27:da:fd:dd:
         39:09:f3:6b:36:5f:b3:b9:dd:5b:86:2b:ad:6f:a5:f3:48:66:
         c4:f9:6e:ee:ba:72:0a:d4:5b:9a:14:be:d0:70:ac:3b:9e:10:
         be:57:46:5e:44:fa:6b:9e:2a:a7:33:52:74:67:10:a3:3e:8f:
         88:e0:68:f0:4d:66:87:89:72:0c:88:8b:38:21:bc:6e:54:0e:
         da:82:d2:3b:1a:c3:d8:f4:0c:c2:04:67:27:7a:04:00:29:0f:
         ec:94:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 02:34:08 2026 by rpki-client