Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6gYYKsxq1GcoC4E9L0AOvibTYnE.cer
File:                     6gYYKsxq1GcoC4E9L0AOvibTYnE.cer (raw, json)
Hash identifier:          I3MzFZdhrZsobfHMaxxbl+1MQ1hgnNbsuBcPjVROatk=
Subject key identifier:   EA:06:18:2A:CC:6A:D4:67:28:0B:81:3D:2F:40:0E:BE:26:D3:62:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01A01924433BC102F3C51C14595C1B239D23
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 19 Aug 2026 08:30:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213930
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:19:24:43:3b:c1:02:f3:c5:1c:14:59:5c:1b:23:9d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 19 08:30:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea06182acc6ad467280b813d2f400ebe26d36271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:5a:3a:37:8a:0c:03:c5:4e:2b:54:2e:79:
                    5a:ad:4c:4d:36:bd:05:d5:bf:ae:d2:92:05:1f:80:
                    bf:fa:e2:b9:3c:2a:c4:43:d6:c9:9a:24:f2:e6:68:
                    1d:b5:78:3c:c4:20:cb:d4:f3:8c:e1:10:58:bb:07:
                    54:ed:94:25:4a:0d:95:f4:7f:ed:19:b9:c9:d0:ef:
                    bb:a8:7d:b0:4b:0c:10:b8:42:06:cb:7d:9c:ff:a3:
                    4f:f4:c5:84:3a:a0:9e:dc:33:6c:e8:ff:fd:27:bf:
                    0e:4a:8d:44:3b:0e:bd:6c:f2:8f:7d:17:ce:fe:c8:
                    52:4c:9d:05:15:48:97:e2:1d:53:50:c6:41:34:63:
                    a0:ec:57:68:67:f1:11:8b:47:36:f6:00:cc:f5:79:
                    f8:ba:94:18:69:a4:fd:0e:a4:b5:3f:33:a2:db:5f:
                    e7:9a:ba:63:92:c9:dc:83:15:89:9c:8b:05:70:55:
                    ae:2b:ba:d1:a9:71:7c:ec:79:e3:ef:10:29:32:9d:
                    c5:b7:2c:ba:5b:80:cb:b1:20:9b:01:ce:77:0e:3d:
                    c6:bb:e1:6a:4c:00:64:33:e6:9d:09:c1:08:29:bf:
                    63:be:cf:c6:31:11:e3:db:95:c3:53:5b:2f:fe:cf:
                    84:bb:fb:cc:ae:07:67:98:ce:05:83:09:c2:f0:b5:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:06:18:2A:CC:6A:D4:67:28:0B:81:3D:2F:40:0E:BE:26:D3:62:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213930

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:dc:ca:f9:c5:db:ac:16:e2:1d:a2:68:78:c1:73:bf:8b:
         92:62:cf:6e:10:37:b6:3e:cd:76:47:ab:cf:37:ff:fb:ca:c4:
         e7:30:a1:9c:5d:60:3b:b7:c6:3b:36:fa:11:d5:1f:93:a9:4d:
         69:f9:89:17:11:25:fd:60:eb:90:c5:32:04:91:07:ca:74:5b:
         ce:91:00:e2:80:aa:a4:75:fb:76:03:b2:57:27:73:bf:87:f4:
         a8:72:62:2c:37:88:70:ae:bc:20:e8:6a:e0:10:c9:71:8f:df:
         69:8d:a2:a0:3b:98:f6:a7:44:ff:29:3f:37:04:35:33:97:28:
         f4:c8:68:a3:85:f2:1c:e7:17:49:cb:15:85:d7:ae:44:8d:97:
         87:f0:84:ce:b2:6b:a1:e8:45:a0:d4:0d:5b:08:fe:c6:7d:67:
         88:a4:91:ea:92:cc:bf:99:01:99:a9:0e:a2:73:51:de:39:14:
         9f:8a:97:9c:93:b9:ef:30:b6:9d:d9:07:40:3e:ff:ca:93:de:
         a3:1b:ed:2f:fc:a1:45:09:c9:35:c7:0b:27:60:4b:ae:2d:d8:
         f7:d5:90:60:91:8a:50:ec:04:46:d0:f6:5a:11:96:ed:3c:ab:
         92:4d:01:71:ae:a7:7f:ec:8d:2a:c5:e5:72:b0:b0:29:1e:60:
         89:7d:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:51:55 2026 by rpki-client