Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
File:                     8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer (raw, json)
Hash identifier:          kBShWEg4+Y5FRqR/A3gKMln2eGkM6n8Pmdtjz4CYguQ=
Subject key identifier:   87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Certificate issuer:       /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial:       3A50D8BE1AAE450F6C2728541C9690661B7E7828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Manifest:                 rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
caRepository:             rsync://krill.signalx.cloud/repo/signalx-rpki/3/
Notify URL:               https://krill.signalx.cloud/rrdp/notification.xml
Certificate not before:   Sat 02 Aug 2025 01:08:00 +0000
Certificate not after:    Sat 01 Aug 2026 01:13:00 +0000
Subordinate resources:    IP: 2a11:29c0:3d90::/44
                          IP: 2a11:29c0:4c00::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:50:d8:be:1a:ae:45:0f:6c:27:28:54:1c:96:90:66:1b:7e:78:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
        Validity
            Not Before: Aug  2 01:08:00 2025 GMT
            Not After : Aug  1 01:13:00 2026 GMT
        Subject: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:12:db:5d:17:a6:7d:52:01:20:59:91:23:
                    75:e9:c8:45:43:31:5c:b4:b5:d3:94:46:f4:5d:70:
                    93:75:b6:5b:62:7f:46:cd:5a:9c:a9:f3:f2:f4:7d:
                    ce:92:42:07:e2:fb:29:fe:a0:d0:86:8f:da:dc:b0:
                    6b:d2:47:3d:93:6d:af:03:c1:62:a0:59:99:b7:46:
                    7f:44:2b:78:d7:35:02:09:2d:bd:13:5b:2d:76:46:
                    80:03:44:bb:9d:21:1b:48:4f:e9:a2:f6:3a:53:24:
                    a3:81:4c:21:40:50:8a:dd:dc:60:74:50:85:a3:c4:
                    62:20:8a:29:ad:10:18:46:60:a8:fd:bc:74:11:b7:
                    48:e8:c6:53:f8:5c:82:a5:df:c0:4f:1d:67:df:0b:
                    b7:ba:6a:79:a9:32:4a:ab:84:a0:ee:7d:3a:53:80:
                    98:09:95:ff:5d:fa:89:7b:4a:f4:da:5f:99:57:8e:
                    82:3f:d4:58:43:b6:d1:a0:b2:70:61:b1:41:d6:c8:
                    07:84:8c:87:17:52:35:98:00:c9:20:2c:de:a4:a6:
                    6b:f0:c6:27:a6:40:32:67:b9:ff:3f:6a:d1:e9:62:
                    9a:42:07:d1:a5:20:b0:b2:3a:e3:65:1b:f7:31:a6:
                    dc:2e:e2:5d:58:2f:df:5a:df:85:ae:cd:9e:5b:12:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
            X509v3 Authority Key Identifier:
                keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/
                RPKI Manifest - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
                RPKI Notify - URI:https://krill.signalx.cloud/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d90::/44
                  2a11:29c0:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:b4:52:d1:08:cd:2d:96:ee:aa:78:f9:a1:d4:f9:8c:78:b6:
         0e:e6:4a:05:66:00:35:64:4a:5e:c9:ef:f9:43:51:c0:d1:d2:
         4d:99:70:76:31:a9:da:74:cf:98:74:7b:3c:1b:86:f6:91:4d:
         53:39:2e:2a:fd:69:59:b5:36:70:0e:a7:4f:aa:59:53:6c:eb:
         b2:b0:10:a3:0f:62:81:8f:d6:21:16:7b:e5:25:6f:f7:22:c8:
         8c:0d:93:03:a0:b9:5d:65:ac:6d:0c:91:b3:7d:42:ba:78:9d:
         3a:14:c7:c6:9e:22:43:42:c8:5c:33:1b:49:a4:44:28:21:e6:
         0c:75:92:a0:22:a8:d9:f9:51:05:0f:d4:db:44:46:67:66:cb:
         fc:97:b6:25:1d:09:62:7f:11:5c:39:a7:50:cb:d2:ae:75:38:
         ad:9e:8c:ee:10:18:1a:08:4c:bd:6c:f9:64:f3:b2:ad:83:09:
         52:df:8e:b5:b1:fc:ae:af:64:84:0e:a4:28:d1:ab:02:04:15:
         69:8e:b8:93:e9:d5:ad:be:62:9b:37:13:8e:2e:9a:9d:39:8a:
         26:7a:3f:4e:ae:13:d4:36:f7:eb:4a:56:35:87:cb:0b:bb:bb:
         9b:81:3a:55:9c:e4:58:13:f9:7e:bc:82:ae:01:86:43:06:c4:
         03:a2:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:08 2025 by rpki-client