Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
File:                     7m9I_I5rX9kh3jgFehSgwJioJjs.cer (raw, json)
Hash identifier:          8asEE/l7w76sqOodu0PcbMGGvDvoe0XJnjLezB5n7JY=
Subject key identifier:   EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019FD6416B8F51C13CFFE08A802914809860
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 06 Aug 2026 08:47:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 194.15.218.0/24
                          IP: 194.127.157.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:41:6b:8f:51:c1:3c:ff:e0:8a:80:29:14:80:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  6 08:47:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:0c:76:39:10:a9:93:11:4c:1b:5e:62:98:
                    45:47:39:23:cc:14:64:76:c1:4a:f0:60:12:0c:e0:
                    9c:61:48:50:e0:1b:1a:be:40:99:d5:1e:40:c3:f3:
                    34:d8:49:99:74:2c:e5:a1:a2:ad:00:2d:44:3a:05:
                    de:b8:54:58:95:5e:7b:b3:b4:e6:97:c9:eb:0c:c1:
                    cb:77:30:16:ec:1f:39:0f:02:5e:17:fc:7d:32:08:
                    86:0d:ed:89:98:44:9d:fd:fe:89:5b:dc:b0:2a:a2:
                    0e:91:60:3a:cf:ed:95:ab:33:df:4c:48:cd:5e:05:
                    60:0f:4e:f0:7a:94:1a:c6:88:25:c0:30:33:8c:a7:
                    15:09:32:5d:69:ef:ec:8e:3c:27:3f:87:bf:cc:76:
                    f5:0d:b7:fb:2e:9f:b3:bb:7f:8e:fe:a8:1f:f4:f0:
                    e4:44:88:1e:c1:96:96:06:c9:58:b6:c8:00:eb:50:
                    a0:a8:1f:c8:cf:71:6e:0a:9e:c0:a6:2f:9f:5a:2d:
                    4b:3e:91:b6:57:25:26:cd:60:e0:fc:f5:9f:91:d5:
                    69:a6:09:c1:2b:a2:30:09:40:5b:e6:ae:e1:19:9d:
                    94:ef:6c:39:b0:21:af:92:4c:d6:99:4e:8d:d8:19:
                    ad:b5:b9:3b:8a:07:82:7a:13:31:ea:70:7b:2e:0f:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.218.0/24
                  194.127.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:38:d5:02:25:c6:6a:a3:c2:6d:b2:26:49:a5:f7:d6:61:f5:
         73:de:b8:2c:49:b1:ae:37:42:01:02:de:7b:ce:b0:c6:6b:56:
         5e:73:3a:e5:45:b7:1f:2d:02:55:9d:66:a2:f1:69:2c:e5:90:
         02:78:9a:ec:29:1f:f6:a0:ce:5b:bd:47:29:30:78:e8:f7:f6:
         c9:26:c2:42:d8:8a:f0:00:58:b9:83:44:d3:f3:fd:a7:81:df:
         16:ef:6a:06:ff:fc:7f:38:14:48:dc:0b:e7:78:6a:43:e8:51:
         32:e1:aa:ae:68:db:a8:76:d8:48:38:17:cc:27:39:52:e6:e8:
         f2:8c:68:88:94:1b:3a:b0:67:ee:d2:f7:eb:c4:b7:5c:1b:92:
         4b:7b:5e:b4:58:0a:88:2e:3a:fa:9a:a3:dc:1d:8d:c2:b2:25:
         8f:45:aa:6d:45:9f:cd:d4:62:94:d1:d3:d0:b9:e8:1e:8c:54:
         df:19:79:a9:91:6e:55:c3:c3:1d:f1:de:a7:c1:2e:7e:37:32:
         c5:b2:80:da:78:c5:31:9b:3b:bc:bf:16:7e:a5:39:92:0b:1e:
         53:80:14:93:2a:b9:24:28:d2:13:9f:34:cd:8f:6e:d3:40:f9:
         11:ae:02:79:81:e9:1d:67:9c:d6:fc:ac:1a:53:30:71:dc:70:
         5e:a9:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:46 2026 by rpki-client