Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/UThObEuewL0ay0XTGVG9AEyHwec.cer
File:                     UThObEuewL0ay0XTGVG9AEyHwec.cer (raw, json)
Hash identifier:          fJmnFUig/+MzDEvKl+v8rVDpy0no9iuWEBrG9gOqWW8=
Subject key identifier:   51:38:4E:6C:4B:9E:C0:BD:1A:CB:45:D3:19:51:BD:00:4C:87:C1:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01A0034F6F026A1B32B45D2950B6DDD5B087
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/UThObEuewL0ay0XTGVG9AEyHwec.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 15 Aug 2026 02:45:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 218983
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:4f:6f:02:6a:1b:32:b4:5d:29:50:b6:dd:d5:b0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 15 02:45:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51384e6c4b9ec0bd1acb45d31951bd004c87c1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:4b:10:bb:e9:c9:90:18:50:cc:0d:a2:6d:
                    22:ae:8f:e8:f8:0f:35:88:d6:4c:1c:b3:a6:19:35:
                    2d:af:4d:d1:d7:c0:52:59:4b:81:87:88:16:aa:c2:
                    be:09:ee:b3:62:b0:cf:aa:ed:df:fb:3b:5f:1b:0c:
                    a7:1f:48:80:d0:9f:69:42:ba:e8:81:6f:91:03:20:
                    3b:dc:c8:51:58:a0:d3:e1:c6:2d:17:8d:f7:93:c3:
                    c5:15:c6:3d:c8:56:a7:2d:40:b9:23:1b:80:6d:ee:
                    56:03:e7:55:fd:77:0f:f1:ec:f0:2b:19:1c:1a:ec:
                    a4:28:e2:16:e5:59:21:6b:f5:9e:ee:3a:b1:b1:4d:
                    17:e2:76:8c:61:e4:90:0a:e4:34:a0:d5:70:84:e5:
                    e4:01:e3:9a:f7:c4:25:7d:b9:67:96:cf:2d:34:9c:
                    c6:79:9e:d3:01:7f:ce:f2:fa:6b:c6:6e:a3:b2:f3:
                    78:ca:9a:d6:5f:09:8b:9a:5c:1a:7f:f9:4a:a4:bc:
                    96:a1:e2:8b:c1:dc:ec:cb:21:a6:33:74:79:33:00:
                    b6:22:9b:17:2f:6e:f1:5f:8c:98:a1:c3:f1:af:2c:
                    18:c6:40:6f:2e:b2:eb:9e:61:fb:5f:3c:4d:3e:96:
                    72:c7:cb:4e:9b:3c:a0:2e:bb:21:85:78:9b:0a:80:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:4E:6C:4B:9E:C0:BD:1A:CB:45:D3:19:51:BD:00:4C:87:C1:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/UThObEuewL0ay0XTGVG9AEyHwec.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218983

    Signature Algorithm: sha256WithRSAEncryption
         95:34:af:9c:9f:8c:84:d8:63:d0:d6:ff:f7:cb:a8:77:88:3d:
         70:7a:6d:e0:54:69:9b:b5:70:84:20:a8:f9:97:f2:a8:9a:a6:
         f6:a1:eb:48:11:a8:bd:ca:59:be:3d:47:e8:61:f0:95:44:f9:
         e5:35:ae:1f:11:dd:0f:3e:a1:9b:78:a6:de:33:95:c4:2f:95:
         ba:00:bb:43:3e:c6:37:e6:5d:41:47:f5:f7:ae:c6:7d:6c:98:
         b8:e7:5f:77:81:5e:02:33:d8:67:bd:43:76:97:51:26:37:67:
         18:28:e3:0e:27:73:61:1a:56:05:84:be:05:80:e9:0b:13:0c:
         9d:47:d2:f2:22:f8:19:2b:0c:65:ff:97:5d:0d:77:e2:42:c6:
         9f:e3:25:10:de:80:8a:07:2b:e1:90:31:ef:af:65:2c:b5:23:
         2f:e9:f0:4b:9a:6e:63:ea:c5:a7:56:9b:eb:bc:63:03:80:7d:
         28:74:01:1b:91:7d:66:6e:42:2a:c0:c7:31:00:23:ee:77:08:
         92:b9:bd:51:3a:fe:49:dd:3f:45:5e:23:ae:14:9c:46:e6:30:
         23:83:45:8a:fa:1c:54:68:b9:76:b7:b4:e7:30:75:98:af:1b:
         d1:c0:00:cd:20:c5:46:e7:3a:b3:0f:92:3e:e0:c2:57:4e:7f:
         c9:0f:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:08:40 2026 by rpki-client