Certificate

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
File:                     ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer (raw, json)
Hash identifier:          nOoV5BoE7SbgvYVJp4IHZYOZYo7B8/jHHvRoIDT83N0=
Subject key identifier:   65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Certificate issuer:       /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial:       01EB6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Manifest:                 rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
caRepository:             rsync://krill.rg.net/repo/rpki-beacons-ca/0/
Notify URL:               https://krill.rg.net/rrdp/notification.xml
Certificate not before:   Fri 03 Jul 2026 13:42:08 +0000
Certificate not after:    Sat 03 Jul 2027 09:24:28 +0000
Subordinate resources:    IP: 45.132.188.0/22
                          IP: 147.28.10.0/23
Validation:               OK
Signature path:           rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 05:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125806 (0x1eb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Jul  3 13:42:08 2026 GMT
            Not After : Jul  3 09:24:28 2027 GMT
        Subject: CN=656E4422ABF129649200EB019A815F2B12236E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:ff:bc:05:cb:cc:5c:56:04:71:12:51:75:
                    e0:47:5d:64:4b:29:02:1f:1f:56:b9:7f:83:45:70:
                    db:37:95:d9:c0:6a:6a:f7:e7:f3:c9:e0:b3:b6:1d:
                    e8:ad:78:c1:70:fd:fd:11:78:92:ab:57:d2:69:1f:
                    7e:b4:de:6f:cf:23:85:7e:52:5a:9c:a5:04:26:fd:
                    5f:60:22:8e:6c:db:b7:c2:a4:b9:18:8f:f3:45:d9:
                    33:c9:24:e1:fc:47:d5:fd:c8:1e:e1:a6:07:cf:fc:
                    3a:f6:24:6a:cd:6d:2f:f7:04:ac:66:cd:5f:95:f4:
                    51:e7:7c:b3:84:ca:9f:1b:1f:87:7a:5f:ad:ca:c9:
                    43:0d:cd:0b:e9:4a:a8:a4:7e:44:57:04:70:75:92:
                    b7:98:20:5b:91:5c:5d:5f:03:b0:69:98:7c:8a:ac:
                    90:60:95:af:c2:95:9c:13:fc:61:69:04:db:2e:58:
                    72:54:d9:bb:11:9e:5d:51:7d:28:55:33:1f:87:10:
                    aa:92:5c:b3:b6:9c:c0:cc:a4:65:86:fa:d0:15:21:
                    08:ca:d4:68:3c:4b:f1:86:b0:ac:72:82:a5:65:02:
                    7b:64:33:00:81:1c:6e:71:68:42:69:51:b7:6b:34:
                    fa:3e:22:7f:ce:90:be:a4:15:a1:16:69:83:78:ce:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
            X509v3 Authority Key Identifier:
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/
                RPKI Manifest - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
                RPKI Notify - URI:https://krill.rg.net/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.188.0/22
                  147.28.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:ad:31:67:51:49:36:06:cf:57:6c:da:0d:6a:46:73:71:bf:
         ef:e4:e3:39:42:b2:3c:bb:f0:ec:32:1c:ac:5a:42:78:b8:db:
         bc:7d:19:d4:29:a2:53:51:18:e5:11:3b:52:11:1e:5a:bc:7b:
         7e:89:5c:81:b0:ec:06:89:e5:f3:fb:1e:ac:f0:61:72:bd:fe:
         21:67:8a:f9:d6:08:31:1a:f8:50:9f:8a:a7:c1:07:6f:bf:3b:
         4f:ab:3f:d9:d5:df:7f:cb:d5:71:82:e7:f4:93:af:d9:07:3c:
         0c:42:3c:43:a8:51:2f:ef:53:27:b1:a9:37:10:c6:bd:57:d4:
         1e:a2:da:2c:3d:64:9b:17:9e:a9:e4:2a:95:f6:dc:d4:e7:6f:
         12:6b:1e:2e:00:4b:53:24:12:19:e7:67:74:81:b6:a0:35:3a:
         e8:80:9b:70:ef:80:05:4d:0f:16:7b:4d:11:f9:56:18:f9:f0:
         2f:b2:1d:38:71:a0:fa:4e:88:cd:f5:65:b7:99:3d:ca:56:fb:
         27:98:4e:85:83:aa:75:f3:70:cb:21:71:4e:6a:e3:5d:93:9e:
         41:ad:71:fe:c2:6b:94:f6:fe:5d:83:78:9a:a3:2d:ea:b9:97:
         26:60:12:9d:c5:82:71:05:3a:4f:0a:8b:dd:03:8a:b9:c3:85:
         b6:29:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:05:21 2026 by rpki-client