Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
File:                     zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer (raw, json)
Hash identifier:          DM+TtLITIne0UopCU9cEwxndIgs2OIzFmY+aUpoTl7M=
Subject key identifier:   CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18F9CE1312B2A1200EA055F29605CF53
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:40:52 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 47602
                          IP: 103.110.160.0/22
                          IP: 103.113.29.0/24
                          IP: 103.195.144.0/22
                          IP: 103.219.212.0/23
                          IP: 185.72.240.0/22
                          IP: 2a04:2b80::/29
                          IP: 2a09:4200::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:f9:ce:13:12:b2:a1:20:0e:a0:55:f2:96:05:cf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:40:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:64:95:cb:e5:82:2d:16:3b:08:df:23:a0:
                    10:54:71:b6:e5:45:98:c0:7d:e0:eb:72:6e:85:93:
                    aa:e6:2b:d6:9e:72:d0:ac:ab:40:93:cc:5e:6b:65:
                    98:fd:f8:a5:ef:25:d1:10:29:22:35:52:30:b5:b1:
                    0f:96:76:d4:ec:dd:ef:0b:cb:18:5a:e8:9c:cf:c7:
                    a7:90:bd:72:38:43:b0:c6:72:c3:3c:ae:48:96:2b:
                    38:8e:78:ad:8e:4b:1c:39:70:cb:e8:56:8d:3e:e0:
                    55:3f:1c:5a:ad:dc:d3:4a:d9:91:ad:72:8e:79:57:
                    e6:87:d7:9f:72:be:a9:16:50:5d:d5:c4:11:29:eb:
                    a3:df:92:42:d5:11:2f:fa:88:fb:c9:da:e9:27:03:
                    86:5e:0a:0b:ec:25:e4:35:6e:95:9b:86:17:c8:44:
                    b9:af:a9:d3:a2:5b:97:5c:49:6a:7e:60:bb:44:9e:
                    fc:ab:d5:f8:a1:5e:fa:45:91:6b:16:41:1a:05:12:
                    07:46:a0:5d:e7:b5:35:1d:7e:9a:26:ac:d5:9c:da:
                    64:99:a2:96:dd:6e:77:23:9e:dd:fa:b1:4c:61:04:
                    7a:29:93:9f:f3:a2:20:c6:7e:83:96:9d:f1:b4:ae:
                    2b:b7:2e:c2:dd:a8:6d:e8:fa:6a:7e:13:a0:ea:a4:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.160.0/22
                  103.113.29.0/24
                  103.195.144.0/22
                  103.219.212.0/23
                  185.72.240.0/22
                IPv6:
                  2a04:2b80::/29
                  2a09:4200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47602

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:56:b6:e7:b9:f2:93:6c:1b:89:db:ff:e6:8b:8b:f8:1f:
         0d:b6:96:cc:a7:96:d4:fb:b6:a1:59:99:ff:05:8b:72:fe:87:
         74:3b:3e:aa:30:5d:d8:64:9b:2a:12:92:81:85:89:0c:f4:70:
         c5:32:58:92:60:72:70:51:7d:81:25:dd:0e:05:ae:3e:ce:47:
         67:c0:c4:a9:67:b7:13:05:e5:0e:60:fe:c3:d7:65:ea:d9:10:
         9b:a7:27:82:13:88:6e:68:2f:22:57:66:5c:00:ff:fd:bb:e9:
         83:d4:93:b0:64:17:c8:c8:90:61:26:43:3d:75:d4:74:6a:42:
         c5:8e:cb:67:fb:42:c9:c3:b0:b0:64:0a:66:c0:0f:fc:c1:cd:
         68:ea:e8:13:a1:40:b4:01:fa:5f:be:cf:e3:01:cb:2c:88:45:
         96:9e:45:ca:34:c5:60:72:10:55:0c:9b:90:6d:3f:57:21:87:
         cb:34:f3:ff:ed:9c:dd:23:7f:d8:9d:bc:da:0c:97:af:fe:e9:
         b4:a6:c9:38:c2:66:41:c7:aa:20:cb:16:49:16:41:d9:75:14:
         b0:00:fd:7b:8d:74:58:6f:db:dd:56:a1:c9:42:43:e3:44:d9:
         2f:76:84:62:90:90:29:83:73:d6:28:52:f6:b7:67:f2:a1:2c:
         80:05:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:10:31 2026 by rpki-client