Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
File:                     wRruJS43JJTv7FA4vOZ6GtOHhtk.cer (raw, json)
Hash identifier:          zYsl/3Mm7n9odQgaUgq5ENiqs/BYfejkTSvrJPC3sA4=
Subject key identifier:   C1:1A:EE:25:2E:37:24:94:EF:EC:50:38:BC:E6:7A:1A:D3:87:86:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019CE19472EAFEA0FB9208F81D203CB20815
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 12 Mar 2026 10:25:28 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 50192
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:94:72:ea:fe:a0:fb:92:08:f8:1d:20:3c:b2:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 10:25:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c11aee252e372494efec5038bce67a1ad38786d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:e8:a2:5d:3e:f7:44:7e:8e:f2:51:e2:37:
                    99:ab:c4:80:06:2c:8b:49:ad:76:33:96:f3:46:5c:
                    6b:dd:08:6b:55:de:c3:a1:b4:4b:16:0b:8c:a8:ad:
                    cc:09:20:e4:32:99:27:24:8c:d8:d5:04:c8:0c:90:
                    41:0c:c7:b1:c2:ba:2f:92:b3:69:62:5a:f6:c1:81:
                    9d:bd:88:ee:fb:16:a9:94:7a:17:fa:3a:f2:74:d4:
                    53:23:5a:8d:56:df:18:60:8b:3c:eb:89:10:f9:4d:
                    a9:cf:f3:5b:4a:b5:43:27:a4:d5:95:e8:d1:92:71:
                    42:bc:de:dd:08:e9:f6:10:14:7d:85:80:20:cc:8a:
                    20:c8:51:79:cb:f1:03:9a:66:53:34:02:6c:b1:cb:
                    99:68:ea:30:72:dc:c2:15:f3:c0:34:e3:cc:f7:66:
                    da:dd:92:10:ed:f5:68:48:f2:7d:d1:50:c3:22:4a:
                    1a:51:dc:70:5d:01:90:c8:9c:72:f6:84:39:7b:ec:
                    34:c8:cd:88:54:1f:2e:f2:b8:4a:eb:05:4b:8f:cb:
                    b3:9a:a5:0a:e4:d6:8e:01:90:fa:11:b7:69:02:bd:
                    7f:76:7b:f5:6a:66:13:c9:9d:bd:71:22:ea:61:ec:
                    3e:11:3e:8f:c1:f7:4b:2f:90:dc:ab:df:3c:5a:58:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:EE:25:2E:37:24:94:EF:EC:50:38:BC:E6:7A:1A:D3:87:86:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50192

    Signature Algorithm: sha256WithRSAEncryption
         9e:1d:12:3f:56:63:6a:87:8c:45:b8:60:ec:6a:e4:7c:10:27:
         4a:f7:82:e3:93:76:e3:06:13:45:90:fb:1b:8b:7a:c9:dd:f9:
         74:10:cf:f8:9c:10:d4:f1:46:36:65:99:fc:90:58:64:f8:0b:
         cc:c8:52:97:fe:8a:5a:a5:57:4f:32:81:5a:d7:ee:84:49:9a:
         ef:5a:8c:f6:01:e4:9e:6e:1b:42:48:2a:83:63:2d:ac:e4:06:
         77:7b:4b:c7:97:32:24:eb:e3:40:45:35:ec:07:fb:c1:ec:f7:
         cc:1b:1a:24:34:60:b4:ff:57:03:b8:83:c6:bb:8c:d1:f2:da:
         54:7e:b2:15:3c:b2:3a:40:37:39:71:94:d7:2a:e2:72:d2:4e:
         7c:9b:f5:dd:b8:7e:02:1d:07:24:d1:92:75:51:37:29:87:93:
         08:66:a0:7d:72:6e:5a:83:53:cb:cc:21:20:63:22:b0:de:c4:
         ae:b4:e3:36:fb:05:88:d7:8b:f6:a9:f7:58:70:d5:d2:92:ed:
         42:62:18:30:7c:de:c7:65:fc:57:3b:c0:7e:26:82:7c:b2:4d:
         2c:87:1a:d9:2c:5b:94:dc:a8:50:db:cf:49:86:29:66:33:bb:
         9d:c4:78:af:74:0b:16:8f:2f:bd:88:76:d6:d1:56:9d:da:d4:
         5e:b3:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:14:16 2026 by rpki-client