Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
File:                     eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer (raw, json)
Hash identifier:          kFG6Ab6KCk7L0sqdmVQbaPjpdcXzccfd3ZODcSNvgog=
Subject key identifier:   78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019DBA56DB1D08436E889DF9ADD60A415B8C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 23 Apr 2026 12:35:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34868
                          AS: 59716
                          IP: 80.83.176.0/20
                          IP: 185.190.228.0/22
                          IP: 2001:4ce8::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ba:56:db:1d:08:43:6e:88:9d:f9:ad:d6:0a:41:5b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 23 12:35:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78d65d4a22df705beed7b3432fbe48a356597724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:a8:29:72:43:fe:42:1e:d2:42:18:a5:93:
                    41:0c:d0:69:40:0d:2c:08:a5:84:50:9a:2e:59:a6:
                    fa:c9:c5:0d:97:5c:8c:a1:e0:08:fe:0a:1d:0d:06:
                    7c:ad:ef:f5:27:35:1a:5e:93:3b:27:fb:6a:6e:90:
                    99:29:b3:1d:1a:55:d0:53:e3:bd:42:c5:eb:5f:c7:
                    db:48:09:10:2d:93:ee:6d:ed:07:0d:b2:ca:9b:4d:
                    2e:9d:4d:b4:1e:97:7d:21:c3:05:47:57:0c:9c:5b:
                    d3:88:4a:74:ad:e1:cb:a4:79:b7:5b:31:ed:e5:21:
                    1c:f1:c6:dd:ac:9f:79:b1:0f:a0:05:1a:fc:b0:6b:
                    e8:4d:75:9f:b8:b5:f3:5c:99:b9:7d:32:4c:a3:9c:
                    9c:c9:44:31:43:ec:cb:64:57:14:22:fe:fd:dd:95:
                    02:e1:fc:61:c3:ca:76:65:4c:67:a3:ba:79:7d:5f:
                    76:76:18:03:d4:21:b1:66:7c:63:a5:64:11:a4:9e:
                    05:e0:30:24:b2:b7:69:36:de:5c:94:96:c1:de:48:
                    ef:2e:f1:9c:81:2b:4a:d8:8f:61:54:58:33:69:9b:
                    de:fc:09:52:50:e0:42:ff:48:ee:3c:e2:05:d3:b2:
                    b5:84:da:68:48:ad:9f:8d:33:8c:13:7f:6d:5c:b5:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.83.176.0/20
                  185.190.228.0/22
                IPv6:
                  2001:4ce8::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34868
                  59716

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:54:ae:33:76:4c:d8:b4:a5:6b:72:2e:50:ec:aa:1e:f5:
         84:bd:44:96:40:fb:6c:6c:88:89:2e:f0:b3:53:30:7c:e0:fb:
         f1:64:68:0e:ff:c9:5e:e5:64:f7:c8:41:e4:bb:ad:43:cc:d9:
         83:cc:13:af:83:a5:d0:36:bd:20:ca:c4:b4:ad:9e:55:25:09:
         47:61:18:92:36:6a:d6:29:2a:2f:67:26:32:e5:71:89:c9:71:
         28:6f:24:f0:fa:b8:48:a4:e0:1f:16:e5:d2:63:0e:f6:21:58:
         0d:73:2d:58:b2:eb:f3:9f:03:f8:da:25:d8:af:21:be:59:f9:
         e1:ce:02:a1:f3:b6:af:16:fe:65:42:01:4d:ce:db:84:a0:59:
         3f:58:15:c1:20:3e:1f:9e:37:c0:05:34:4d:bf:5e:10:86:e2:
         20:b3:e0:f9:f1:a7:a0:13:d0:0f:a1:a9:65:d1:32:12:91:e3:
         f2:35:2c:31:eb:1c:90:33:88:ef:50:9e:6b:ff:4c:58:84:0f:
         8b:6e:c2:70:bf:b2:5f:7d:34:25:d1:0e:b4:68:c8:8c:39:33:
         04:65:62:fe:22:cd:4e:e4:6d:69:1c:38:fd:56:82:ea:32:29:
         a3:42:fd:ab:eb:cd:63:1f:22:ab:18:e6:d0:5d:6c:fd:da:9b:
         4f:3e:2c:3d
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAZ26VtsdCENuiJ35rdYKQVuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDIzMTIzNTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGQ2NWQ0YTIyZGY3MDViZWVkN2IzNDMyZmJlNDhhMzU2NTk3NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1baoKXJD/kIe0kIYpZNBDNBpQA0s
CKWEUJouWab6ycUNl1yMoeAI/godDQZ8re/1JzUaXpM7J/tqbpCZKbMdGlXQU+O9
QsXrX8fbSAkQLZPube0HDbLKm00unU20Hpd9IcMFR1cMnFvTiEp0reHLpHm3WzHt
5SEc8cbdrJ95sQ+gBRr8sGvoTXWfuLXzXJm5fTJMo5ycyUQxQ+zLZFcUIv793ZUC
4fxhw8p2ZUxno7p5fV92dhgD1CGxZnxjpWQRpJ4F4DAksrdpNt5clJbB3kjvLvGc
gStK2I9hVFgzaZve/AlSUOBC/0juPOIF07K1hNpoSK2fjTOME39tXLXDUwIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFHjWXUoi33Bb7tezQy++SKNWWXckMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjVh
ZDE1LWFmMGItNDVjZC1iODgzLTFhMDU4ZmEwZWJhMS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODky
NWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvNzhENjVENEEyMkRG
NzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME
BFBTsAMEArm+5DANBAIAAjAHAwUDIAFM6DAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAiDQCAwDpRDANBgkqhkiG9w0BAQsFAAOCAQEAldFUrjN2TNi0pWtyLlDsqh71
hL1ElkD7bGyIiS7ws1MwfOD78WRoDv/JXuVk98hB5LutQ8zZg8wTr4Ol0Da9IMrE
tK2eVSUJR2EYkjZq1ikqL2cmMuVxiclxKG8k8Pq4SKTgHxbl0mMO9iFYDXMtWLLr
858D+Nol2K8hvln54c4CofO2rxb+ZUIBTc7bhKBZP1gVwSA+H543wAU0Tb9eEIbi
ILPg+fGnoBPQD6GpZdEyEpHj8jUsMesckDOI71Cea/9MWIQPi27CcL+yX300JdEO
tGjIjDkzBGVi/iLNTuRtaRw4/VaC6jIpo0L9q+vNYx8iqxjm0F1s/dqbTz4sPQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:42:05 2026 by rpki-client