Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FeERvv_Khe6SEPf4syUvxecyisk.cer
File:                     FeERvv_Khe6SEPf4syUvxecyisk.cer (raw, json)
Hash identifier:          3pnas3LDa1uiQFtl370C3uv358W4RiZP3fmMO60gEds=
Subject key identifier:   15:E1:11:BE:FF:CA:85:EE:92:10:F7:F8:B3:25:2F:C5:E7:32:8A:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019EACC79AADA156F32F6A376490D1189AE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/7c3ae9-dac1-4fca-ab75-c0fcbef97daf/1/FeERvv_Khe6SEPf4syUvxecyisk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/7c3ae9-dac1-4fca-ab75-c0fcbef97daf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 14:27:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 219489
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:c7:9a:ad:a1:56:f3:2f:6a:37:64:90:d1:18:9a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  9 14:27:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15e111beffca85ee9210f7f8b3252fc5e7328ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:f5:18:e4:36:ab:0c:b2:77:dc:4c:90:38:
                    29:67:aa:be:83:a4:b6:94:dc:89:a7:23:03:7a:86:
                    2e:d7:c2:50:43:87:55:f4:99:b0:3d:a7:f0:95:6a:
                    c4:1b:26:74:be:92:f1:7b:83:e0:38:82:9e:32:10:
                    3c:28:b4:1c:08:c6:ac:e1:f2:a4:56:d7:54:00:bc:
                    53:4c:94:cb:12:ad:4c:d9:a9:dc:ba:a5:97:16:68:
                    77:5e:75:27:a3:e7:97:1e:6b:16:e7:64:8b:02:c1:
                    6a:01:1b:62:75:f6:40:d5:f9:8e:5c:e9:63:f7:99:
                    28:e6:14:15:a7:8c:ea:0a:9f:31:75:c3:87:06:ce:
                    83:3c:38:7c:23:2b:66:1b:e6:82:76:af:45:3f:2d:
                    a1:33:88:71:ff:9c:13:c8:19:bb:ef:3f:ef:df:1c:
                    87:66:8e:62:9d:62:58:2e:9b:38:1d:09:9b:d1:7b:
                    14:ba:b4:eb:3d:a5:9b:e9:ac:f4:7e:82:d1:5e:e5:
                    f2:15:f5:64:0f:94:16:76:7a:32:4b:7f:fa:e2:cb:
                    b7:b3:69:29:77:e3:c7:fa:05:54:6f:83:2b:e5:39:
                    45:94:88:39:a0:af:81:a9:e2:87:8a:3c:ec:03:f3:
                    9d:d8:14:73:0c:62:07:eb:28:f3:85:f6:cd:18:ab:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E1:11:BE:FF:CA:85:EE:92:10:F7:F8:B3:25:2F:C5:E7:32:8A:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7c3ae9-dac1-4fca-ab75-c0fcbef97daf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7c3ae9-dac1-4fca-ab75-c0fcbef97daf/1/FeERvv_Khe6SEPf4syUvxecyisk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219489

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:a7:2b:9a:9c:41:ef:35:78:10:40:a5:5c:06:42:b0:40:
         ef:98:c6:9e:9c:2d:4d:f2:ad:e5:2d:62:cd:33:33:7c:dd:6d:
         a8:e9:af:5e:9b:fa:e8:cd:d0:e7:7e:d4:9f:ea:29:14:3c:e6:
         37:fa:3d:61:c9:f8:2f:9b:26:92:a6:48:2a:9d:d5:6c:9f:2d:
         a2:db:f6:55:ff:36:53:80:58:97:49:cc:01:f0:be:ea:b1:33:
         0c:e8:c6:68:39:4f:58:76:3e:22:a1:dc:f0:73:25:25:61:31:
         44:70:e5:84:69:00:88:f2:de:04:3d:25:12:a3:55:26:ea:25:
         82:60:09:30:e4:97:46:b3:66:7e:22:41:3e:f8:d1:bf:ed:a2:
         88:d4:49:65:41:5e:78:d9:02:48:5a:36:b1:c4:bc:cd:13:47:
         20:6c:61:cc:c9:13:b5:bf:c5:6a:da:f6:18:6a:31:c8:ba:4f:
         26:fd:19:a2:45:e6:ed:0c:e0:68:5b:34:64:99:9f:3b:bf:e8:
         1b:9b:36:c5:c4:da:12:e9:4c:9e:17:d9:42:15:b6:79:20:11:
         de:94:45:9a:56:e7:0c:b1:db:97:03:41:3d:3c:af:4c:c2:fe:
         4f:03:85:62:00:53:e1:37:f5:32:38:26:5b:dd:3e:e5:4e:81:
         7a:be:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:13 2026 by rpki-client