Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
File:                     1nADQQTxv2WBRLSqRbQaP1d53A8.cer (raw, json)
Hash identifier:          j1GP9/9/xi17w45RHBHcdfrPwlkMRcgI6FsI8MKGVng=
Subject key identifier:   D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01983C21600FB83428AC35F2D73814CFA681
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Jul 2025 11:11:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210149
                          IP: 192.66.100.0 -- 192.66.115.255
                          IP: 193.163.56.0/21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:21:60:0f:b8:34:28:ac:35:f2:d7:38:14:cf:a6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 24 11:11:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:74:c2:8a:77:63:9f:ac:e4:81:50:6e:20:
                    59:b8:17:2f:e7:87:e7:80:f5:3e:ec:99:52:40:83:
                    84:39:00:fd:7b:42:c1:70:2d:8e:1e:e2:a9:0c:93:
                    df:c6:67:80:55:a9:a0:df:66:82:13:cd:7c:57:0c:
                    61:82:73:b2:05:df:87:01:d7:dc:be:35:86:1c:f3:
                    76:04:b5:ac:54:dd:83:64:20:66:8b:64:15:58:d3:
                    80:e2:99:a9:13:f7:66:1a:2b:92:51:00:54:9e:a8:
                    2a:cf:0a:6a:a4:cc:f3:f4:0a:a4:62:71:bf:f0:16:
                    bb:ce:9d:f1:b7:a7:2a:5b:ed:33:6c:c9:96:fb:33:
                    61:91:5b:2f:ff:d4:d7:c4:43:d3:ce:41:ed:f4:d9:
                    ca:29:18:fd:ea:3d:3f:85:c6:2f:0e:3d:ce:6e:34:
                    07:cc:1c:83:7e:24:67:83:7a:03:6f:f2:a7:b6:e5:
                    76:ae:d7:72:7f:1a:80:fc:76:e0:bd:31:b6:c1:6f:
                    25:eb:08:6e:30:12:43:06:4b:eb:98:99:e9:db:4c:
                    c5:fe:ba:e9:a5:dc:c5:99:58:e2:cc:e4:e7:b7:e1:
                    bb:20:14:c0:e4:04:34:a7:28:88:8b:76:c1:48:77:
                    b1:ff:16:63:64:6f:b5:2b:14:2b:24:a5:7e:ec:03:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.66.100.0-192.66.115.255
                  193.163.56.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210149

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:50:35:bd:b2:02:a0:2c:d3:1e:43:5c:c9:8c:04:9e:4c:
         22:b2:de:d8:36:cf:52:96:90:0e:4e:da:db:56:af:0a:28:bc:
         a3:ed:ab:9e:e1:4f:7c:b5:9f:09:25:b3:89:cc:86:5b:63:fb:
         8f:dd:09:e4:51:f3:6a:d3:b6:48:14:c2:13:d7:05:78:75:30:
         d9:d6:f9:b7:ed:e7:04:de:b5:2f:f9:36:bc:d4:29:f1:9f:78:
         38:31:72:e1:fb:7b:32:ae:66:89:aa:c2:8c:5c:ea:c3:ad:f5:
         1c:7e:1a:a5:93:17:7b:2e:70:fb:d2:71:f8:e4:6b:4b:10:61:
         bf:b6:cf:dd:90:4a:47:dd:9c:c9:07:13:33:0e:fe:fe:3d:1c:
         c6:2c:dc:e0:05:fb:76:76:fa:b9:f6:5b:2f:a6:e5:24:a1:05:
         47:94:f4:40:fc:90:88:04:0a:c5:fb:53:bb:af:b5:50:70:76:
         d2:94:c0:d4:b0:81:dd:53:0f:c4:a0:1f:6b:72:5e:16:65:04:
         1a:b3:5f:e7:b4:56:06:f5:12:d4:2d:30:f8:22:11:a9:80:cd:
         75:a9:b2:25:b2:62:46:5b:5d:3d:47:0b:aa:98:ac:62:72:75:
         d8:43:00:66:a8:29:ee:0c:c9:7f:0d:b3:96:5f:fc:da:c6:43:
         17:22:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:32 2025 by rpki-client