Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
File:                     ec334d0f3a18be0021b7b8e842287641acb1731a.cer (raw, json)
Hash identifier:          MhqQb22hI8B8FGVA1TXxnDwZ7q8o/YuvYBv9c3PLFv0=
Subject key identifier:   EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer:       /CN=ripe-ncc-ta
Certificate serial:       012B
Authority info access:    rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Manifest:                 rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
caRepository:             rsync://rpki.ripe.net/repository/aca/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 16 Sep 2026 13:31:22 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Dec 2026 13:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Sep 16 13:31:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:05:27:f6:b3:0b:9b:77:14:ed:09:f4:8d:
                    ce:0a:3d:d2:d4:83:9b:b0:05:08:86:32:84:e5:68:
                    a8:58:9e:6a:a9:47:c1:2f:22:48:eb:83:2a:40:e7:
                    38:5c:5a:6a:9a:cd:e8:61:cb:e8:a8:33:be:3f:5d:
                    90:29:cf:e9:4f:c9:6f:00:5c:93:d3:5e:a7:b7:0b:
                    3b:f1:41:17:ea:9d:51:e0:da:4f:a5:d2:97:ee:05:
                    49:42:42:3f:9f:db:fd:1e:8b:6f:16:a9:8b:dd:03:
                    e2:df:75:c9:e6:99:7b:ad:9c:32:6c:bc:da:50:8c:
                    a7:c4:d4:2e:c1:ff:b9:0e:0c:f8:cc:cd:3e:05:d7:
                    67:b0:77:b8:6b:d5:1e:52:22:64:95:19:42:b9:45:
                    6e:09:52:9e:b7:b1:28:e0:5f:f9:72:90:aa:be:68:
                    31:68:1e:f5:2e:08:5c:e0:0b:fa:af:3d:a3:eb:3a:
                    8b:1d:7f:65:65:19:67:a8:8f:8f:ae:0c:a8:f8:46:
                    05:ea:bb:b5:f4:73:62:d5:ce:e9:84:89:98:28:0c:
                    a9:12:84:d7:42:41:08:cb:9f:dd:68:cc:df:6e:af:
                    5b:20:38:96:51:e8:f0:23:42:05:88:dd:d9:de:cd:
                    ae:0c:76:89:2a:8f:4c:34:a4:44:4b:aa:7c:27:1d:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
            X509v3 Authority Key Identifier:
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/aca/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:94:d1:bb:a7:f2:ab:20:1f:e4:41:cf:48:de:26:2f:5b:
         d1:d1:47:4c:b5:79:7e:b6:6b:5d:63:17:75:5f:d1:83:04:b5:
         81:92:ff:47:8a:1c:59:b4:1d:97:88:83:a7:64:9c:c8:f7:02:
         3b:8f:25:bf:03:4f:8c:2c:48:ab:52:66:9a:e5:5a:bb:4e:d9:
         af:fd:25:5d:f3:91:1a:0f:8f:8e:16:30:f6:f3:34:9e:cb:f4:
         c5:34:68:15:5e:09:77:01:a9:34:e0:f9:05:34:58:9a:2e:d3:
         c7:80:88:cd:3f:04:55:3c:6c:2f:f5:62:7d:a4:90:cb:22:94:
         db:ee:1b:5b:8e:8c:c1:e4:e1:6e:6a:d4:67:ec:17:9d:e4:e1:
         ce:5b:fb:00:cb:0f:55:50:65:d4:2a:73:b9:cb:4f:1d:d1:87:
         7b:22:f0:46:3d:04:73:00:26:22:fe:78:e1:dd:a9:fb:c6:72:
         08:7c:45:4a:a0:4d:81:d9:99:53:da:bd:25:de:38:c8:7d:f4:
         f3:63:d5:20:88:4a:e5:cc:62:51:c5:f5:de:a9:70:03:d4:94:
         67:0f:c5:76:a1:ed:3c:9a:44:c9:b1:3f:37:ab:e8:61:e6:30:
         c3:7f:c3:27:a6:cb:dc:a2:9e:1c:10:be:46:55:16:ca:ce:7f:
         11:7b:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----