Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
File:                     YTXB97cUDIcufz_zRitO3GMddnQ.cer (raw, json)
Hash identifier:          IzNck9OJwBbwMHRPd4g8SpDqEj5xdFOkYtBXmucgs5s=
Subject key identifier:   61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0196D45AD73902750CE98ACE0A134B4E1DCD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 May 2025 14:30:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208427
                          IP: 185.231.244.0/22
                          IP: 194.147.114.0/23
                          IP: 194.147.148.0/23
                          IP: 2a0c:9300::/29
                          IP: 2a0f:4240::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:5a:d7:39:02:75:0c:e9:8a:ce:0a:13:4b:4e:1d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 15 14:30:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:51:27:4b:8a:1e:15:ee:cf:e3:2f:d3:b2:
                    24:b7:dc:e0:ea:ff:b8:91:a0:15:67:53:bb:e7:8f:
                    4e:ed:8b:72:d2:21:45:60:70:88:81:5e:b2:83:a8:
                    1d:4e:a7:ea:03:b9:e4:a7:fe:7d:fd:61:50:04:8a:
                    28:09:88:2a:f2:68:08:7c:98:ae:34:fd:03:cb:f1:
                    42:da:85:44:3e:2b:4c:7b:c3:cf:67:eb:0c:9e:3b:
                    4b:26:84:40:ca:b6:19:6c:e1:e8:d7:27:5f:d8:eb:
                    f4:4a:ce:7e:48:3b:df:0a:06:2b:8e:37:e1:e4:61:
                    ff:a9:de:46:f7:02:64:15:46:b8:e6:52:af:fd:4e:
                    c1:2b:45:92:e3:27:59:b3:eb:39:fa:5d:d6:2f:77:
                    81:c0:7e:4d:33:fa:4f:5e:24:bb:36:95:84:8c:d1:
                    0a:5e:f2:c0:52:c6:91:9a:16:23:38:7f:04:eb:69:
                    66:1c:d3:b4:5d:f3:84:ec:61:f6:75:b9:74:aa:1a:
                    1c:47:fe:af:93:06:a9:5f:5e:26:fa:2d:c3:dc:bd:
                    3e:e4:1c:d1:0d:54:dd:c3:53:23:4a:cc:db:23:d1:
                    df:2b:e0:70:e2:07:39:d7:99:b2:c0:ee:17:f3:20:
                    c3:12:14:19:b0:15:24:4a:28:64:c9:7b:5c:71:5b:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.244.0/22
                  194.147.114.0/23
                  194.147.148.0/23
                IPv6:
                  2a0c:9300::/29
                  2a0f:4240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208427

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:21:50:46:7f:38:e4:8b:e4:54:33:c5:8b:7c:87:fd:fc:
         5c:64:87:53:9f:dc:ac:7f:a7:01:91:f6:4b:74:67:6d:63:13:
         9a:4e:37:fe:f1:73:13:4d:dd:3c:40:ac:f6:5e:bf:60:59:69:
         3e:bf:e4:62:17:b0:3f:e5:92:d5:07:85:fb:21:fe:6b:f2:b3:
         4e:cf:1b:91:89:0a:48:0a:65:c0:95:02:83:07:89:91:d4:65:
         04:80:6b:21:8e:73:71:95:c9:79:aa:3c:d7:09:6a:c7:33:52:
         a8:9a:51:ae:83:42:63:8d:92:e0:c4:f4:0e:fc:ae:69:de:1f:
         41:68:2c:c7:36:72:45:4b:aa:21:92:2a:32:52:c2:5a:47:1d:
         78:d0:ae:50:4a:21:a3:98:c0:44:6d:69:0d:d3:8e:84:4f:d9:
         85:d3:33:54:21:b5:0c:6d:36:e9:36:87:24:c7:86:40:90:2f:
         9f:bc:43:d7:d3:bf:1e:86:b6:39:fd:82:64:46:e7:5e:bc:6b:
         01:24:8f:4f:36:db:ce:28:7a:a6:7e:4d:95:76:e6:92:18:5b:
         8c:a8:e6:58:76:18:82:4f:ee:00:7e:02:46:13:0c:b2:c0:6f:
         3a:4b:e2:d2:6e:f3:18:ff:05:af:f1:61:ba:e9:eb:cc:e4:ca:
         ac:45:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:38:49 2025 by rpki-client