Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
File:                     9nBodmrYwI61UovBquRS_UAQt28.cer (raw, json)
Hash identifier:          CDtsZC/wGQx1uAUd3AWPrrRAiqj00vTTgMcLFw5Y36g=
Subject key identifier:   F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18EE1E2160837F42AE261828171C3E95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:28:06 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213266
                          IP: 193.46.78.0/23
                          IP: 193.46.222.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:ee:1e:21:60:83:7f:42:ae:26:18:28:17:1c:3e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:28:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:69:36:86:76:66:41:79:33:19:98:54:97:
                    25:65:c6:3e:91:ff:5f:7d:64:f7:18:16:4b:54:6b:
                    7c:04:c8:b6:c4:a8:57:ba:8d:a2:95:4c:30:cf:46:
                    b8:6a:54:4c:45:6d:2f:5e:58:ff:6a:7c:2a:a4:12:
                    1d:8e:a7:76:33:cf:bd:46:b3:7a:b3:f0:20:7b:dd:
                    ed:64:ef:f6:16:af:e5:59:a9:d5:7c:2e:87:9c:8f:
                    99:76:d7:8b:8f:ac:06:57:bc:3f:41:2b:0b:14:2a:
                    97:92:34:7e:a5:e7:65:34:05:00:ac:f2:1e:45:28:
                    c9:12:16:97:49:f6:64:81:5c:53:fa:b4:c0:48:26:
                    ba:03:91:b5:e6:94:5a:68:ba:a2:1a:28:ec:1d:81:
                    10:10:cc:06:f5:36:80:a0:b5:d3:64:96:51:d5:66:
                    4c:07:9d:05:de:b8:3f:5a:4a:82:52:da:b3:71:54:
                    6a:c3:a7:7e:c7:9d:0a:7c:d6:4c:a5:c6:91:b8:03:
                    7d:ad:c9:00:10:bc:7d:e7:2d:f3:7d:bb:43:4b:83:
                    ef:86:9a:69:24:48:a2:05:63:db:86:f2:dd:ba:36:
                    64:92:a8:14:94:38:b7:6d:b3:cb:4c:e6:0f:12:b2:
                    1b:d0:30:e1:f6:d4:1d:b2:f7:c0:86:47:2e:16:19:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.78.0/23
                  193.46.222.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213266

    Signature Algorithm: sha256WithRSAEncryption
         62:5f:79:fe:03:22:cd:86:e8:d7:c7:91:7f:66:93:3c:b2:d9:
         fe:10:8c:7c:57:5d:f6:9f:80:42:6e:2c:4f:88:31:0f:86:c4:
         05:70:f6:52:ad:5a:9c:ae:83:fe:b9:2d:d3:80:b2:01:3c:89:
         87:47:26:4d:72:9a:ac:e4:ce:3f:16:a9:64:db:fb:3c:a8:91:
         f8:27:84:35:ac:95:5f:88:1a:58:93:33:ca:69:2f:cd:1a:60:
         b0:05:c0:8f:d7:87:a3:a2:cd:69:b8:42:21:4b:77:28:5b:02:
         ae:f5:1c:7b:c0:6e:8c:71:22:bb:c2:9b:4d:4c:29:22:1a:f6:
         ef:ce:a0:f1:ec:9a:9a:02:12:ff:46:7c:08:e8:41:58:07:ad:
         8f:4b:eb:81:d3:71:2c:73:fc:e4:03:ad:d4:a2:25:fd:1a:e3:
         1d:6b:d4:6d:87:12:82:f6:bb:75:aa:ef:2d:65:e5:4a:1b:17:
         9c:d2:bf:ff:93:59:9c:31:2d:eb:ac:c8:46:6b:4a:b2:ba:78:
         ab:22:5e:03:5d:47:c2:ac:cc:4a:9f:23:21:c4:c1:8d:80:ef:
         b7:0c:c0:da:8b:e9:5e:d3:9a:5e:41:48:ee:15:b0:bc:4e:cf:
         0d:a8:26:92:9a:af:f1:91:92:bc:f4:b4:a6:8f:51:04:c2:8d:
         8d:e7:78:2d
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZ8Y7h4hYIN/Qq4mGCgXHD6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQyODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjcwNjg3NjZhZDhjMDhlYjU1MjhiYzFhYWU0NTJmZDQwMTBiNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OJpNoZ2ZkF5MxmYVJclZcY+kf9f
fWT3GBZLVGt8BMi2xKhXuo2ilUwwz0a4alRMRW0vXlj/anwqpBIdjqd2M8+9RrN6
s/Age93tZO/2Fq/lWanVfC6HnI+ZdteLj6wGV7w/QSsLFCqXkjR+pedlNAUArPIe
RSjJEhaXSfZkgVxT+rTASCa6A5G15pRaaLqiGijsHYEQEMwG9TaAoLXTZJZR1WZM
B50F3rg/WkqCUtqzcVRqw6d+x50KfNZMpcaRuAN9rckAELx95y3zfbtDS4Pvhppp
JEiiBWPbhvLdujZkkqgUlDi3bbPLTOYPErIb0DDh9tQdsvfAhkcuFhn+ZQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFPZwaHZq2MCOtVKLwarkUv1AELdvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2U2NzU1
Zi00YTFhLTRlMTAtYWUzNS1mNDk3ODRjNDc4OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZTY3NTVm
LTRhMWEtNGUxMC1hZTM1LWY0OTc4NGM0Nzg5My8xLzluQm9kbXJZd0k2MVVvdkJx
dVJTX1VBUXQyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwS5OAwQBwS7eMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwNBEjANBgkqhkiG9w0BAQsFAAOCAQEAYl95/gMizYbo18eRf2aTPLLZ
/hCMfFdd9p+AQm4sT4gxD4bEBXD2Uq1anK6D/rkt04CyATyJh0cmTXKarOTOPxap
ZNv7PKiR+CeENayVX4gaWJMzymkvzRpgsAXAj9eHo6LNabhCIUt3KFsCrvUce8Bu
jHEiu8KbTUwpIhr2786g8eyamgIS/0Z8COhBWAetj0vrgdNxLHP85AOt1KIl/Rrj
HWvUbYcSgva7darvLWXlShsXnNK//5NZnDEt66zIRmtKsrp4qyJeA11HwqzMSp8j
IcTBjYDvtwzA2ovpXtOaXkFI7hWwvE7PDagmkpqv8ZGSvPS0po9RBMKNjed4LQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:54 2026 by rpki-client