Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sla46tf_GxEqkrVej62y71W-dJE.cer
File:                     sla46tf_GxEqkrVej62y71W-dJE.cer (raw, json)
Hash identifier:          ChOELc7bj8fTzs4rzwTswWW/3xhfyRhJIoTVp9/Rwzc=
Subject key identifier:   B2:56:B8:EA:D7:FF:1B:11:2A:92:B5:5E:8F:AD:B2:EF:55:BE:74:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F18FA02187BDAE060E198EDB6E298A904
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/sla46tf_GxEqkrVej62y71W-dJE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:41:05 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 57757
                          IP: 91.213.19.0/24
                          IP: 2001:67c:fe8::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:fa:02:18:7b:da:e0:60:e1:98:ed:b6:e2:98:a9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 14:41:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b256b8ead7ff1b112a92b55e8fadb2ef55be7491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:88:b8:ad:65:d7:99:a6:ad:d9:c3:49:4d:
                    50:b9:37:85:c2:ba:e8:83:8d:41:e2:aa:37:04:02:
                    fb:62:2b:82:42:9b:bd:41:e5:e8:6a:4a:44:df:a9:
                    9e:18:11:e6:02:2e:ed:70:a8:23:28:ca:66:e0:4e:
                    29:48:c7:f5:37:58:31:b1:db:21:f6:8e:3e:96:cd:
                    2b:43:73:16:f9:2c:a4:02:9c:05:38:8d:9f:5a:5a:
                    ec:27:88:02:ac:84:b0:b6:f5:74:7c:75:46:55:e1:
                    33:70:89:4f:78:dc:09:32:3f:8c:ca:09:c4:d5:99:
                    d0:91:6c:c1:64:11:95:12:93:7f:98:e9:cf:fd:76:
                    7c:79:6d:8c:8f:c9:d9:b6:9c:c6:5f:de:09:a6:6b:
                    86:d4:6f:7b:7c:9f:fe:18:e7:9c:a4:c2:70:6e:70:
                    62:c1:2b:25:f6:7c:30:32:7c:e0:d3:43:6c:3d:13:
                    ac:ad:ca:70:c0:0e:2e:e9:5d:84:aa:d1:3f:7f:55:
                    6e:86:02:80:00:6d:33:9a:d3:89:82:09:db:fb:e1:
                    1c:60:ed:c4:9c:5b:7a:ff:e8:20:91:61:ee:86:3a:
                    ab:24:b0:cc:b6:c0:83:83:3f:67:29:e8:1a:eb:19:
                    b6:8c:69:9e:1e:43:df:b5:d6:ba:a7:9f:8e:55:47:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:56:B8:EA:D7:FF:1B:11:2A:92:B5:5E:8F:AD:B2:EF:55:BE:74:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/sla46tf_GxEqkrVej62y71W-dJE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.19.0/24
                IPv6:
                  2001:67c:fe8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57757

    Signature Algorithm: sha256WithRSAEncryption
         66:23:a5:7a:89:e5:cc:2e:00:5d:7d:3b:9b:0a:78:63:b3:b0:
         7f:4c:92:36:fb:68:bc:f5:ff:64:25:de:e0:f9:b0:a5:26:fe:
         f1:c8:72:81:f7:b5:c4:e4:20:92:a4:2d:e0:78:16:09:f5:42:
         7f:30:07:f4:be:3b:05:5b:f4:9b:b0:57:10:76:e5:1d:fa:ef:
         b4:da:b4:63:a2:76:1e:0c:cd:f3:8c:90:43:96:30:4f:dd:16:
         b7:65:22:6c:10:9c:3c:e2:7d:cb:ff:9e:bd:6e:49:9b:b1:78:
         9b:a9:bc:55:3f:f7:3f:8a:fc:45:79:a4:4a:59:8f:33:55:b7:
         8c:aa:93:91:a8:ec:d3:b7:f5:7c:95:aa:45:4b:b8:ed:65:82:
         22:69:88:cb:2d:34:dc:17:61:c9:ed:84:d1:a3:4a:c0:a4:6e:
         68:eb:18:6b:86:be:3b:2a:c1:45:32:51:70:f2:96:f9:cf:d5:
         7e:b0:fc:a7:ab:b9:63:f5:d4:5d:4a:55:37:82:a1:8f:ce:22:
         08:27:d7:a8:32:6f:df:45:90:15:e4:ae:bc:27:00:e9:a7:2a:
         af:00:9a:b6:8d:89:6a:99:78:fd:bd:84:55:6c:08:bf:23:7a:
         1e:3e:5e:7e:e3:06:ca:09:4b:bb:68:92:6a:d5:aa:91:0e:c3:
         20:75:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:08 2026 by rpki-client