Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
File:                     8dBXL-cpkb0yhUuscWZ269rSKs4.cer (raw, json)
Hash identifier:          F8eVedXDDhM6PpXNZGWr36Mg8uoyXLN1hBR+ta4InP4=
Subject key identifier:   F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0199C86F6D3F8D9A55303FBD91808799ECA5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 09 Oct 2025 10:06:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48280
                          IP: 91.207.13.0/24
                          IP: 2a13:9640::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c8:6f:6d:3f:8d:9a:55:30:3f:bd:91:80:87:99:ec:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  9 10:06:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1d0572fe72991bd32854bac716676ebdad22ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:7f:d1:8e:19:39:9e:7b:c4:68:de:24:a3:
                    a0:ef:80:1b:1c:fd:14:50:ee:0b:ae:e9:d5:3c:47:
                    81:6b:18:75:2d:03:86:21:8b:43:4d:51:7c:f9:9f:
                    90:68:28:b3:fa:3d:d9:34:78:a4:fe:a9:bd:62:2d:
                    04:de:39:b5:5d:0c:5e:41:d7:76:d6:d7:55:fa:96:
                    1d:1b:1f:8a:02:b2:b7:7c:71:ca:78:75:1d:b0:2d:
                    ad:74:e9:ac:05:00:65:af:15:98:7c:90:f0:a5:a7:
                    6f:33:ea:b8:de:c3:4d:a0:a0:3f:d1:ee:66:99:08:
                    45:21:96:ec:54:5c:17:97:b7:63:e3:2d:0f:83:a7:
                    cb:7b:ea:1e:6a:1e:e6:5d:e2:17:1b:a1:48:4d:65:
                    5e:07:75:eb:83:ff:43:2d:72:76:87:21:45:54:38:
                    a3:cb:f8:8b:63:f5:d2:b1:cd:dc:3d:13:25:87:54:
                    70:d5:05:e5:ef:52:17:05:29:ed:58:7f:2c:9d:db:
                    fd:d3:78:ff:3c:1f:d4:fe:32:e0:47:4c:02:5e:00:
                    9c:85:49:01:2e:db:47:2a:76:63:d6:71:d8:b6:9f:
                    81:3a:b2:7b:b3:53:2f:bb:c0:ca:cb:b1:a4:4d:0b:
                    21:92:e8:ad:c3:71:c3:73:f3:bb:7e:2f:bd:04:25:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.13.0/24
                IPv6:
                  2a13:9640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48280

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:7b:6c:e9:ba:d3:88:d9:25:68:c3:db:ee:4c:93:fa:fe:
         16:13:7d:5e:80:00:14:e8:e5:12:4c:94:c2:5d:53:a3:74:8d:
         2f:cb:60:25:3d:1f:a2:3c:09:89:7d:a0:1b:00:f7:f0:80:a7:
         fb:8b:07:13:ef:0e:15:15:51:0d:23:d2:04:a7:59:04:ce:e8:
         bc:63:10:c9:ca:3c:b9:6b:bf:8c:b6:dd:d2:2b:a4:31:fe:4e:
         9f:27:6a:b1:2e:d8:4e:18:78:3a:a1:a7:d2:52:28:a3:d4:c7:
         40:ce:35:48:af:63:ab:ad:44:dc:36:3e:75:8f:c7:2b:4b:78:
         c5:44:1c:02:8d:24:36:82:72:a8:d0:4b:ee:ad:5a:f5:75:0f:
         1f:06:be:ac:85:46:b2:0e:c0:56:a9:71:de:01:7d:b5:1a:99:
         55:cf:e8:89:ec:f5:de:6d:c8:67:30:55:82:e5:27:3a:27:aa:
         58:dd:a1:19:a8:20:7b:9d:22:29:15:1e:78:c9:76:db:dc:2c:
         6b:33:c1:7d:81:a0:29:64:76:1a:4d:10:ab:01:e1:b0:e3:64:
         65:d4:b4:fe:e8:3a:2d:4e:c3:a5:e0:31:b9:b5:8f:d0:8e:36:
         75:82:75:ab:45:ee:16:2c:d4:b1:0e:63:13:76:37:0f:86:39:
         b1:e9:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:44:39 2025 by rpki-client