Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.cer (raw, json)
Hash identifier:          dBTxvgUg3PYEQFarp+tKcqMkjz+a0Yy1PRdsBwDz20I=
Subject key identifier:   78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C711943169F6FBC1869AFA4217934D3D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 18 Feb 2026 14:13:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 200938
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:71:19:43:16:9f:6f:bc:18:69:af:a4:21:79:34:d3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 14:13:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:41:23:67:8b:91:27:d0:bd:b9:68:57:85:
                    de:11:b1:76:ee:72:75:00:79:db:dd:9f:40:b4:3e:
                    11:11:9e:ed:6b:e3:f3:42:23:4d:c1:2f:26:a2:0c:
                    5b:c2:a2:4b:e2:e8:fe:cd:85:de:0f:a9:0f:d3:b4:
                    fb:94:f7:11:fd:8d:70:b7:89:18:db:7a:62:8f:da:
                    a6:f8:86:ed:de:6e:7c:ad:4c:24:f7:cd:6a:43:b9:
                    64:5e:a3:66:b3:a4:b3:70:a6:d5:7c:6d:65:45:6d:
                    31:9d:eb:bb:6a:76:ca:e1:ea:35:06:64:32:ae:32:
                    ff:03:f9:c5:bd:77:48:f7:8b:fc:21:f5:f8:c1:a8:
                    47:0e:b7:d7:b9:5d:05:4d:11:54:78:cc:9f:30:38:
                    38:89:92:23:b7:93:90:08:4b:74:80:73:3f:2f:b8:
                    01:a4:d2:b9:5e:81:2a:2e:8c:e6:d7:52:5d:c3:1a:
                    3e:c8:36:1c:fa:8d:93:5c:88:15:e7:f4:47:e5:28:
                    66:52:67:5c:b8:01:f3:55:05:cd:b8:16:90:1a:9d:
                    94:61:65:f8:a9:15:4e:7e:61:c9:7c:3f:40:51:f5:
                    c1:62:d7:7f:05:87:ce:89:58:c1:8d:00:78:2f:d2:
                    f2:94:92:bc:27:73:fb:9b:fe:76:4c:a7:c4:e9:8a:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200938

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:f2:a8:0d:63:b4:5f:1a:93:36:c9:48:0b:99:dc:e9:98:
         fc:31:a5:f4:39:69:bf:bb:2e:bc:c9:cc:d9:b4:37:30:bc:3d:
         d0:d1:90:c4:4b:7a:d9:84:4e:bb:1e:93:54:a4:2b:f4:ae:62:
         27:5c:10:cb:81:09:67:12:1c:98:17:18:99:6f:88:57:76:6d:
         74:b0:28:15:6b:0a:3f:77:b3:e1:97:07:2a:48:64:5a:f1:74:
         78:f0:e8:e2:14:49:30:77:ab:a4:1c:54:20:98:f0:77:a2:af:
         bd:df:20:37:44:63:3c:5b:fc:fd:44:41:8d:dc:d6:9c:a2:ca:
         4a:0b:86:c6:c0:74:55:b5:f0:74:99:43:dd:5c:55:fe:7a:09:
         79:3f:e2:18:6d:e8:f4:c4:49:fb:be:7f:5e:67:41:46:8c:a0:
         26:90:2f:c7:67:21:eb:d4:e0:8a:95:a3:77:12:7f:25:c0:af:
         f0:7e:09:1a:27:c4:05:58:cb:0c:d7:89:c6:a7:59:01:99:d6:
         06:c8:5b:d1:6f:e5:15:0a:30:7e:0d:5f:8f:43:01:57:df:f7:
         ec:f6:db:51:cc:bb:c8:1b:55:09:e9:73:8b:38:e6:0f:2c:4d:
         d9:7f:59:e9:51:24:25:8e:2c:93:fc:62:f4:c2:6c:1d:2e:b7:
         58:6c:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:08 2026 by rpki-client