Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
File:                     m_RXG73K1sGXqwWraa_s_yq0M94.cer (raw, json)
Hash identifier:          YwFx/a2YMtDV1R8b12x2hdlwaSX7L7NgQImNhSHAK7U=
Subject key identifier:   9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019FE1E885762148408EA4F704916AAB9C1A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 08 Aug 2026 15:05:39 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 47509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e1:e8:85:76:21:48:40:8e:a4:f7:04:91:6a:ab:9c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  8 15:05:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:50:7b:ae:49:3b:e6:7e:47:21:31:18:c0:
                    d5:4a:0c:85:87:32:84:ce:49:a8:37:53:64:f3:97:
                    f1:fd:c2:2b:54:a3:d1:fd:78:85:e5:c4:63:ba:0a:
                    e2:d0:c0:33:87:2b:b2:de:cf:6e:53:eb:01:af:cb:
                    fc:b9:0e:62:1e:8b:3f:2e:eb:55:48:29:1c:31:73:
                    21:d7:29:1a:9b:16:7c:39:40:73:c6:25:23:76:18:
                    9e:12:c8:46:01:c4:27:56:47:1e:5f:c2:d2:da:1a:
                    98:b9:8e:e2:e2:3e:36:88:19:77:ed:bd:bb:9c:0f:
                    5f:a5:3b:c5:4f:a8:34:da:ed:93:29:ad:90:18:25:
                    ae:0f:90:19:29:31:bf:99:56:45:35:18:11:4b:d9:
                    e8:58:ad:54:e6:39:9d:86:87:83:45:5c:e3:3f:ea:
                    e7:a2:78:54:9c:2d:85:fb:e9:c2:4d:ef:34:cf:57:
                    34:5f:3c:2e:4f:3b:7b:a4:47:96:3b:e8:16:0a:6d:
                    2d:3e:6b:19:42:e3:33:b3:1b:aa:52:d4:54:2a:5e:
                    ca:8e:85:ee:89:ad:bb:2e:1e:69:a4:6c:90:05:bb:
                    14:eb:bb:ac:e9:c0:17:a4:5c:a0:5e:36:f2:2e:1d:
                    79:97:80:4f:66:b3:f6:39:af:da:4d:90:37:d5:1c:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47509

    Signature Algorithm: sha256WithRSAEncryption
         34:ac:10:b0:b5:3f:1f:8c:a3:9f:1e:35:3c:d8:58:15:b9:93:
         64:34:1d:b1:87:14:d2:20:aa:c3:85:48:97:c0:bf:ac:d0:41:
         15:21:bd:7e:d5:96:97:82:d5:68:0d:89:8d:5d:a2:09:ac:82:
         44:1f:a9:99:2f:23:0c:99:c2:d6:a6:61:54:f4:d4:30:67:ad:
         db:b4:ef:49:a0:b8:95:6c:85:d0:fe:91:fd:b8:8c:67:59:c4:
         92:f1:50:aa:3f:ae:b1:bc:b2:bb:31:36:63:7d:15:fa:63:5d:
         11:d1:50:3c:48:76:8d:f6:22:9f:2d:f9:8f:9d:4e:fd:6a:51:
         c0:6e:36:9e:16:1b:4e:83:d7:a0:ac:ae:fc:d1:88:15:7c:06:
         ba:f0:f1:df:4e:9c:69:db:92:15:ed:ba:45:c3:ca:15:e1:34:
         d1:11:9b:a8:6a:60:81:1e:74:fc:b1:96:16:37:df:1d:b1:33:
         df:43:cb:79:b5:46:57:f2:7c:0e:53:43:6f:2b:b9:fa:0a:43:
         ed:47:39:59:5a:f5:41:28:14:6c:96:f4:03:fd:62:43:9f:6b:
         31:be:5d:d9:64:f1:85:6d:36:46:60:86:e3:3b:bc:4d:31:96:
         62:55:53:ab:be:2a:1d:13:78:75:f6:86:3d:d7:7d:a6:0a:16:
         79:dc:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:42:59 2026 by rpki-client