Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
File:                     V58iewJgDmAu_FEmBensZlrR-C4.cer (raw, json)
Hash identifier:          gEX1GUeT1itQ4Xep0aCXv+5YBUvkBSaxqcGxwYtsfuI=
Subject key identifier:   57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C6C8DD2499072B6443562DF93AEDD34FD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 17 Feb 2026 17:02:39 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214238
                          IP: 193.93.168.0/24
                          IP: 2001:3240::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6c:8d:d2:49:90:72:b6:44:35:62:df:93:ae:dd:34:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 17 17:02:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=579f227b02600e602efc512605e9ec665ad1f82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:dd:9d:61:69:14:33:50:59:a5:5c:b1:d1:
                    ae:ca:3b:59:93:ad:00:72:e0:37:ab:eb:c3:d8:05:
                    25:7e:37:6f:1b:b8:92:0d:4f:98:61:f5:d3:83:95:
                    ad:f4:7c:bb:3c:c0:4b:2f:c1:d9:40:60:e9:d5:ef:
                    08:be:44:98:86:79:2b:40:fc:63:b8:7a:8e:06:82:
                    89:78:24:a9:38:f9:32:28:20:54:ea:7b:41:9d:31:
                    3b:4c:97:d3:98:c3:56:4d:e5:9c:57:3e:c9:b1:4e:
                    ae:53:14:fd:cc:40:24:e6:b3:66:ad:65:f6:2e:80:
                    cd:53:4f:ab:1f:18:ca:c1:61:d4:76:40:ec:61:fb:
                    e6:50:9e:1e:25:62:31:21:82:70:8a:e6:f3:1f:26:
                    3d:4a:83:f8:65:fb:24:39:a5:73:a3:2b:5d:7c:ca:
                    98:a3:c5:fa:cf:32:fb:97:52:ba:33:35:7f:6c:af:
                    6b:84:ce:80:9e:ef:02:06:06:3c:89:c2:c3:7b:7e:
                    e0:ea:5d:63:e6:96:ff:aa:7d:18:6c:ec:a7:d8:50:
                    af:67:5d:14:25:32:c6:e3:ec:a6:5d:bf:5f:11:00:
                    26:1e:ec:b4:c9:ab:7f:f3:9d:f0:e2:b3:72:ef:c2:
                    9b:d7:c0:1f:6d:c2:b1:74:78:16:cc:91:6c:a7:c1:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.168.0/24
                IPv6:
                  2001:3240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214238

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:15:f4:d2:a2:b2:de:ce:b4:4b:30:b1:7c:3d:81:ed:07:
         fc:2c:6c:3a:26:43:38:cb:bc:3f:14:ee:b9:98:71:f9:dc:42:
         b6:3d:f4:cc:3b:17:16:a2:d0:0e:21:37:d7:47:7d:02:34:77:
         c8:b6:ad:e7:1c:8a:3e:aa:b0:97:7c:49:a6:16:ec:50:28:0a:
         7a:08:91:ac:01:9c:92:cb:c4:4c:9b:b3:43:70:5b:15:a8:c5:
         88:88:d0:5b:39:e2:f7:09:d9:40:fb:f3:6f:fb:da:82:1d:e5:
         4d:3b:bb:9f:86:ce:b4:2f:15:9a:77:da:09:ca:2f:28:45:f7:
         ee:bf:73:f6:4a:3f:83:4c:92:a5:87:9c:55:5b:47:14:08:11:
         76:a3:bb:be:cd:40:30:99:b4:98:fe:bb:a7:fe:e2:22:6d:7d:
         15:df:f3:8d:90:38:a4:2c:09:06:71:63:d0:92:ab:c8:c8:08:
         60:d2:9b:e7:46:69:dc:09:98:77:30:9d:6a:5a:10:2b:ee:61:
         e9:61:74:83:70:3f:d3:2b:10:05:c6:20:ab:de:60:15:27:31:
         e8:66:73:b6:88:f1:63:27:17:57:00:ac:de:53:56:00:0f:99:
         83:35:ca:84:50:c8:ee:56:a0:ea:1e:66:37:70:ff:95:8d:e0:
         d7:75:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:14 2026 by rpki-client