Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
File:                     9-S-cMjIabsmSenLWJHpJ_TsiLE.cer (raw, json)
Hash identifier:          Ae5cAWFnArzSbLOairioFbYo7aXP2YXHpEq2/+fUPJw=
Subject key identifier:   F7:E4:BE:70:C8:C8:69:BB:26:49:E9:CB:58:91:E9:27:F4:EC:88:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18F94DF4DB8AC81A98558F3F0479AC8A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:40:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 35838
                          IP: 178.255.80.0/21
                          IP: 2a02:1788::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:f9:4d:f4:db:8a:c8:1a:98:55:8f:3f:04:79:ac:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:40:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7e4be70c8c869bb2649e9cb5891e927f4ec88b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:a4:e7:20:91:80:c6:be:e1:ba:7e:07:91:
                    44:e0:04:ac:44:2a:98:6b:72:af:d3:f6:3e:8a:b6:
                    ab:1f:cc:65:95:d6:05:ec:0c:11:ee:b8:f9:3e:98:
                    76:82:a1:ae:19:c5:0e:e5:3b:9f:7a:b4:7a:7b:d4:
                    28:46:94:04:c2:13:20:13:50:e7:58:36:d7:8e:6f:
                    09:45:5e:00:62:f7:83:89:ba:c8:dc:cd:5e:60:a4:
                    2f:f4:ef:45:5c:39:90:5c:69:28:05:ee:4e:40:ec:
                    1d:25:86:56:e3:9d:52:fa:8d:54:f0:61:bb:55:61:
                    bc:10:39:da:75:c4:fc:e7:78:33:94:73:8f:97:98:
                    f7:52:03:06:a9:de:6e:52:46:9b:99:56:be:15:aa:
                    35:e6:27:43:87:45:68:4c:f4:0a:3b:d2:bf:03:26:
                    cb:c8:3b:60:b6:02:9a:bb:1d:f0:d1:cc:4f:78:c7:
                    b9:73:5d:a4:f5:2a:2e:d9:bd:93:83:e9:7d:9f:61:
                    3d:1f:5d:7b:99:e6:79:4c:52:84:69:0c:40:17:7b:
                    d2:ee:cc:89:ae:59:7f:53:16:7f:bf:78:14:6f:16:
                    d0:47:9b:43:04:13:96:60:da:2a:55:44:f9:94:98:
                    ff:d9:1e:c7:d2:f5:92:92:01:50:1d:80:ee:94:a6:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:BE:70:C8:C8:69:BB:26:49:E9:CB:58:91:E9:27:F4:EC:88:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.80.0/21
                IPv6:
                  2a02:1788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35838

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:dc:cf:38:f4:ce:5a:49:d9:91:2f:51:de:39:6f:2e:5c:
         74:5c:92:58:81:d4:8e:c8:df:f0:f1:00:84:92:68:e3:68:dc:
         85:64:fe:e4:52:8e:c3:66:f0:ee:dc:ba:e3:52:4f:51:13:9d:
         3d:6b:b2:79:d3:dd:61:42:ed:36:33:2f:e0:bc:3d:40:14:bb:
         df:68:e5:3b:90:90:69:ab:05:31:58:c7:25:b5:ca:2f:fb:07:
         17:8f:66:fc:06:b5:2b:1c:b7:ce:c9:bd:32:42:f0:dc:2f:0f:
         c9:f2:55:cd:d4:a7:bf:ae:bf:1b:96:14:80:95:b1:a1:b5:16:
         24:b1:9c:df:08:d8:f5:21:e4:dd:78:86:e5:54:fe:d4:7f:50:
         0e:1f:62:42:7f:13:04:64:32:01:8b:62:c0:3d:79:e9:c1:75:
         5b:2f:d9:25:c9:0e:c0:4f:3f:3d:1c:c6:5e:74:25:48:59:b8:
         f5:9b:c2:b7:66:9d:d4:3b:ac:92:d5:f1:91:fe:93:3e:f4:12:
         85:b7:54:d7:32:b2:33:e0:a8:04:c0:a6:f2:a0:4b:bb:ea:f8:
         e8:35:ea:a7:12:ca:75:01:60:5c:21:a0:dd:16:f4:ef:0f:a1:
         2d:99:60:c0:55:6b:39:42:30:0c:d3:86:70:7e:b5:97:36:33:
         13:28:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:00 2026 by rpki-client