Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer
File:                     WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer (raw, json)
Hash identifier:          CDZfNZyybJJY8q/UecIgZG2HoQZPknqn1uYf3mI19Tc=
Subject key identifier:   5A:97:97:65:14:6F:E5:0B:FF:95:5F:A4:9A:E0:5B:62:A9:62:F6:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F7F238A739C9E45C842DEFD9764BAC62E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 10:47:43 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 200457
                          IP: 185.106.172.0/22
                          IP: 2a06:3d40::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7f:23:8a:73:9c:9e:45:c8:42:de:fd:97:64:ba:c6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 20 10:47:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a979765146fe50bff955fa49ae05b62a962f66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:46:1d:6c:ef:a1:e0:45:79:bc:c6:46:9d:
                    84:4b:de:4e:fc:1c:d4:67:51:4c:8e:cd:ef:d7:14:
                    6b:9b:07:4a:e0:ff:0e:08:0b:9e:7a:ae:82:d3:d5:
                    d4:c5:9b:09:62:21:cd:7c:96:f1:d3:4f:8e:43:11:
                    64:cb:86:8d:d3:ca:a0:56:d9:39:19:ce:bd:83:72:
                    1b:6a:dd:ae:23:3d:7f:b1:76:c9:91:e7:d1:b7:89:
                    c2:d8:30:6f:2e:a1:0f:d2:31:80:93:6f:a1:95:5c:
                    a7:3f:b2:93:95:5d:56:d8:9b:c4:a1:f1:b3:e0:bc:
                    28:b7:c0:8a:7e:40:13:f6:2a:66:e1:3a:92:17:63:
                    e8:1f:bc:7e:f3:83:86:f9:07:16:a7:e7:52:ea:43:
                    7e:b9:b1:ed:4f:6b:e8:43:7f:a7:9d:cf:0e:8c:01:
                    e9:83:c9:bc:52:25:12:8a:83:e6:44:ab:01:52:db:
                    e0:31:6a:2c:fc:2d:1d:b9:63:7e:b0:ec:d8:75:c8:
                    25:1d:08:0b:5c:41:2b:1d:f6:95:1d:ed:e7:fb:32:
                    be:34:32:40:31:b4:5b:7b:57:ab:c0:f8:70:2f:ba:
                    26:ac:9a:ab:d2:da:eb:cb:ff:5a:1f:d3:15:27:fb:
                    1b:64:b0:ee:3e:d2:b4:a2:08:b5:ca:0a:56:75:68:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:97:65:14:6F:E5:0B:FF:95:5F:A4:9A:E0:5B:62:A9:62:F6:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.172.0/22
                IPv6:
                  2a06:3d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200457

    Signature Algorithm: sha256WithRSAEncryption
         91:d1:a9:a6:f5:24:1d:84:84:63:11:cd:03:d9:70:61:83:cf:
         3c:76:ba:18:f9:89:b7:4a:ea:4f:26:88:d9:61:eb:4e:11:6a:
         63:51:e1:59:0c:06:60:99:25:7a:d6:a7:ba:34:31:c2:f7:de:
         1f:1b:c6:b7:43:cf:ff:b2:2d:e1:26:b4:7c:7e:b9:61:86:00:
         3b:1f:9d:aa:0b:62:2e:5b:65:0f:96:eb:22:d2:71:5d:3b:01:
         35:28:e0:50:bb:ad:99:57:13:ff:bf:cd:b5:33:24:2d:8c:08:
         bd:7c:3d:41:fe:33:8a:0b:3b:78:71:28:ad:6a:1a:78:af:86:
         e8:29:4a:51:59:0d:1e:35:ae:10:cf:a8:7f:51:6c:17:d1:7b:
         da:9d:29:3b:a9:2b:24:62:fc:f1:8b:a3:8c:b5:79:c1:2e:d4:
         53:ec:67:7d:27:08:77:6e:bd:c0:e2:16:40:c9:66:2f:8b:cb:
         8b:23:ed:e3:b3:92:f9:83:7b:b8:43:fd:c2:a3:1f:1b:c4:07:
         b6:6b:3e:6c:a7:f1:c6:bb:1b:22:82:b6:84:9b:d5:39:7d:3e:
         93:aa:c9:21:4d:1d:7e:22:9e:2c:68:23:06:7e:16:d8:88:79:
         e3:4a:a3:ae:28:a9:02:43:b9:84:8d:5e:3c:c1:eb:16:c0:91:
         3e:fc:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:16 2026 by rpki-client