Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
File:                     SlW-JEUcNjrtD78lsV-0XRjrhbs.cer (raw, json)
Hash identifier:          R4h2w6pkRyMRDWBcdwa2RdMH55idnFCYKES9/18EM5Q=
Subject key identifier:   4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01A09269CFDAA9FF9DA9F005B0107F56F341
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 11 Sep 2026 21:40:03 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 202615
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:92:69:cf:da:a9:ff:9d:a9:f0:05:b0:10:7f:56:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 11 21:40:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:a7:94:a2:02:ab:d8:09:4f:9e:26:9b:e9:
                    69:05:ec:5a:b0:d9:f5:23:ce:0c:77:41:77:9a:21:
                    a2:bc:01:8c:98:d0:77:3c:3a:77:02:b2:1c:70:a1:
                    cc:de:17:bf:4b:f5:04:54:ad:58:5d:ea:b7:94:ee:
                    71:cd:45:f4:3a:7c:5b:84:ef:e4:51:80:e6:01:33:
                    c0:9b:97:7d:26:04:89:d7:e2:59:fc:dd:ce:ba:dc:
                    69:33:ed:3f:31:f5:fa:e3:ad:32:ce:d7:d7:36:c8:
                    bf:b2:fe:9d:66:51:e8:f4:2a:2f:01:fc:6e:f3:ed:
                    1e:8f:39:23:5e:d5:bf:80:03:09:38:1d:f4:e4:dc:
                    f3:e1:6c:81:7b:e8:36:57:70:35:bd:c0:27:23:0b:
                    7f:3e:42:d2:c3:43:30:78:10:86:bc:e7:22:d9:aa:
                    a6:9a:7f:3e:e3:5f:a5:7b:87:a7:a9:7c:01:74:79:
                    55:e1:4f:19:62:c7:dd:1b:17:ed:e8:b3:a4:c2:d1:
                    94:e5:21:61:05:43:4e:d5:53:86:47:76:19:53:7a:
                    4f:0e:1f:bd:b5:2a:11:49:72:0b:d0:54:8b:5f:e0:
                    9d:ad:7f:13:82:c2:b6:fe:66:a5:fb:c7:fb:44:f9:
                    8c:02:4e:ba:80:c6:9b:02:3d:a7:36:31:1e:8c:11:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202615

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:cf:f3:98:88:ed:9a:47:64:49:d2:3b:06:34:fc:2f:d2:
         cb:64:31:0b:b4:83:d3:79:b1:2e:58:c3:11:4a:1c:ee:93:1a:
         e8:9c:35:2e:ba:8e:8d:d1:99:03:dc:2e:82:f0:89:65:ec:09:
         ef:96:f4:39:85:3b:7c:3c:45:e0:4c:b6:f0:41:34:33:cb:f7:
         c8:b9:d1:25:69:6c:11:04:e4:72:ac:6b:a3:c0:36:92:5f:2e:
         e9:26:d1:08:3e:ea:34:33:6b:c0:5b:8f:f2:ed:7e:c1:f6:b2:
         4f:26:3e:f3:e5:ea:0c:9b:60:8a:93:eb:ba:77:5f:f0:ea:39:
         8f:43:eb:e8:ca:47:7e:81:23:4b:96:9e:91:c2:ab:1c:58:8e:
         bc:5c:48:da:52:54:9a:73:11:60:10:da:59:bb:b2:3b:0b:74:
         e7:b2:3c:ed:9a:3c:20:af:31:e4:00:9f:7d:32:47:c7:74:33:
         cf:24:8b:05:ae:02:55:13:2b:9d:e6:35:d4:fc:02:b7:80:e7:
         4f:a9:36:94:6e:f5:c3:5c:2b:3d:84:de:df:9e:2d:70:5c:b4:
         bb:03:75:d0:37:ae:26:7a:98:d6:9f:26:80:8f:c7:67:f6:f5:
         73:7b:5e:b3:cd:16:db:ce:c7:a0:84:b6:33:56:82:6d:d6:bb:
         bd:77:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:03 2026 by rpki-client