Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
File:                     SGeaItDbyYDV1ZszNnn5ObmuPyU.cer (raw, json)
Hash identifier:          uExqTtdac+NWMgPXmm7wSeyrM7roLPmAPDB+9fpLF90=
Subject key identifier:   48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B79101193454FFEF356ACE384367AA49E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 10:17:34 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 50156
                          IP: 195.200.224.0/23
                          IP: 2001:67c:344::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:11:93:45:4f:fe:f3:56:ac:e3:84:36:7a:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:d8:15:f5:cd:c9:19:37:ab:a8:bb:ff:3d:
                    35:7a:28:e5:d1:9c:6a:f0:34:c8:df:fe:0c:99:02:
                    a7:55:a6:3d:d5:c9:13:7c:ce:e1:e1:7a:ee:c7:69:
                    43:6e:af:39:92:1c:76:16:0c:93:de:ed:3b:48:cb:
                    76:db:80:10:23:f0:eb:6e:90:4a:5c:6e:1d:aa:f9:
                    8a:29:d5:73:45:98:c7:71:dc:4d:b5:34:fe:74:3a:
                    a0:80:1a:59:e0:93:48:99:c8:bd:fb:99:a5:50:4f:
                    86:96:61:7e:d6:73:6d:f5:a6:95:2e:82:eb:fd:bd:
                    67:54:10:bc:39:3f:21:79:01:5c:8e:93:c6:bc:aa:
                    70:4c:01:44:da:47:24:ff:58:a2:29:32:3c:2a:91:
                    19:97:c3:e8:11:e6:de:3e:b0:9c:7d:d6:0c:2b:7f:
                    d2:0a:85:9b:fa:46:fb:9a:5f:37:58:0c:ab:d3:64:
                    a5:bc:39:95:34:a8:07:59:5a:22:c3:1b:67:b1:f1:
                    f3:7f:df:84:89:93:0d:9b:4e:6c:99:5d:b0:55:43:
                    ad:28:ae:18:f0:ba:8d:cd:b4:ce:34:d8:9e:81:fd:
                    01:31:5b:0e:fb:a5:ea:2d:23:65:e8:e7:cd:ea:24:
                    a9:68:03:86:ab:74:d2:bf:82:30:83:0c:1e:9a:ee:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.200.224.0/23
                IPv6:
                  2001:67c:344::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50156

    Signature Algorithm: sha256WithRSAEncryption
         10:19:32:db:c3:a1:6e:f3:27:20:18:fa:05:f2:ea:05:9d:d5:
         01:2a:be:8b:21:bd:a8:7a:93:fd:df:f5:c6:e0:06:44:39:a8:
         32:75:6a:0b:47:e3:2d:23:ff:68:e3:69:ab:32:8b:b4:0e:30:
         c9:9f:93:97:93:8a:32:3b:4c:f9:4c:fb:d8:fe:0b:99:ec:b8:
         89:78:b1:3b:6c:3c:9f:48:84:d8:f8:69:29:e4:6c:70:08:e9:
         45:00:46:e4:17:aa:6d:5c:c2:1e:e3:a5:16:e9:24:95:4a:d4:
         5a:55:ea:59:2d:95:5f:fb:d9:1e:cd:5a:1c:1e:9e:10:d2:94:
         3b:e2:93:66:16:53:96:a2:c7:87:e2:84:ce:1a:26:0e:03:b1:
         e9:97:dc:51:5b:b3:3c:f4:3b:61:ce:23:31:ff:99:2b:e1:8f:
         f6:66:cc:0b:24:9c:b3:74:46:4c:9b:58:03:1b:7d:78:c9:9d:
         5e:6d:4f:b8:a7:f9:33:2d:69:86:56:54:a8:0b:1d:96:33:d6:
         f4:a6:95:36:92:5c:97:85:05:f1:5a:55:10:e0:d6:2a:e9:88:
         1f:f7:a3:53:29:e8:88:18:49:46:eb:99:b8:de:0d:ec:e3:2b:
         09:b0:8e:26:a4:37:81:e9:21:56:44:00:0b:87:99:d6:3f:f5:
         5f:89:1c:8a
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZt5EBGTRU/+81as44Q2eqSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY3OWEyMmQwZGJjOTgwZDVkNTliMzMzNjc5ZjkzOWI5YWUzZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0/YFfXNyRk3q6i7/z01eijl0Zxq
8DTI3/4MmQKnVaY91ckTfM7h4Xrux2lDbq85khx2FgyT3u07SMt224AQI/DrbpBK
XG4dqvmKKdVzRZjHcdxNtTT+dDqggBpZ4JNImci9+5mlUE+GlmF+1nNt9aaVLoLr
/b1nVBC8OT8heQFcjpPGvKpwTAFE2kck/1iiKTI8KpEZl8PoEebePrCcfdYMK3/S
CoWb+kb7ml83WAyr02SlvDmVNKgHWVoiwxtnsfHzf9+EiZMNm05smV2wVUOtKK4Y
8LqNzbTONNiegf0BMVsO+6XqLSNl6OfN6iSpaAOGq3TSv4Iwgwwemu7brQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEhnmiLQ28mA1dWbMzZ5+Tm5rj8lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzdkZmEw
NC03YzJjLTRhYzMtYTY2Yi0wYzE4MGEwODQxYWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvN2RmYTA0
LTdjMmMtNGFjMy1hNjZiLTBjMTgwYTA4NDFhYi8xL1NHZWFJdERieVlEVjFac3pO
bm41T2JtdVB5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBw8jgMA8EAgACMAkDBwAgAQZ8A0QwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMPsMA0GCSqGSIb3DQEBCwUAA4IBAQAQGTLbw6Fu
8ycgGPoF8uoFndUBKr6LIb2oepP93/XG4AZEOagydWoLR+MtI/9o42mrMou0DjDJ
n5OXk4oyO0z5TPvY/guZ7LiJeLE7bDyfSITY+Gkp5GxwCOlFAEbkF6ptXMIe46UW
6SSVStRaVepZLZVf+9kezVocHp4Q0pQ74pNmFlOWoseH4oTOGiYOA7Hpl9xRW7M8
9DthziMx/5kr4Y/2ZswLJJyzdEZMm1gDG314yZ1ebU+4p/kzLWmGVlSoCx2WM9b0
ppU2klyXhQXxWlUQ4NYq6Ygf96NTKeiIGElG65m43g3s4ysJsI4mpDeB6SFWRAAL
h5nWP/VfiRyK
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:18 2026 by rpki-client