Certificate

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
File:                     B75F3781BC9C2E7301754988659F92686704E570.cer (raw, json)
Hash identifier:          B5hwoPqc9EviHoFBHDtQP91hVeylZZ0hHbBPCvv5u2M=
Subject key identifier:   B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       03180D7940EE70D4260C9AB20F493341582B5912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 11 Sep 2026 10:52:36 +0000
Certificate not after:    Fri 10 Sep 2027 10:57:36 +0000
Subordinate resources:    IP: 2a14:7582:3000:: -- 2a14:7582:6fff:ffff:ffff:ffff:ffff:ffff
                          IP: 2a14:7583:4000::/36
                          IP: 2a14:7583:ef50:: -- 2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
                          IP: 2a14:7584:1000::/36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:0d:79:40:ee:70:d4:26:0c:9a:b2:0f:49:33:41:58:2b:59:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Sep 11 10:52:36 2026 GMT
            Not After : Sep 10 10:57:36 2027 GMT
        Subject: CN=B75F3781BC9C2E7301754988659F92686704E570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:4a:77:de:1c:07:6c:5d:57:72:73:50:76:
                    19:e2:13:2b:93:4e:61:9d:ad:25:6c:33:de:5d:81:
                    79:ab:df:70:33:de:dc:28:96:78:8c:66:df:5a:07:
                    c9:7b:0a:ec:74:b1:b4:a5:2d:74:0b:69:4a:7d:59:
                    e7:fc:28:26:44:b4:f6:10:d4:f0:d1:ea:ec:68:c7:
                    f7:fa:6b:b1:7c:9a:fc:fb:b1:e9:9a:2c:59:20:32:
                    20:fd:79:ae:eb:47:8e:b5:8a:f0:67:7b:78:32:0d:
                    26:1f:ad:ef:37:25:dc:0d:bf:d6:3e:3a:77:51:be:
                    74:7b:82:be:5a:c4:57:d5:b8:4b:de:21:58:b6:61:
                    07:be:39:3b:5e:9c:fe:be:52:1b:0c:7c:77:9a:fe:
                    14:44:fe:7e:1b:ae:7c:c5:70:83:50:9b:04:3d:1c:
                    02:b4:e6:b1:91:62:ad:f7:a3:bb:27:29:f6:fe:46:
                    fa:1b:3e:83:3f:b4:43:9c:40:6a:8b:35:ba:af:d1:
                    a9:ee:1c:d5:c9:c5:be:ac:41:c9:26:33:7d:24:52:
                    64:4e:0c:02:f6:a9:99:98:fd:71:02:bd:3f:83:df:
                    b6:13:9c:85:b7:f9:5b:e0:78:26:eb:dd:a4:4f:bf:
                    69:1c:41:5f:a6:f7:af:2d:4d:7e:87:0a:9f:ca:bd:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7582:3000::-2a14:7582:6fff:ffff:ffff:ffff:ffff:ffff
                  2a14:7583:4000::/36
                  2a14:7583:ef50::-2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
                  2a14:7584:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:27:99:d9:3a:7c:16:36:d2:30:41:70:5e:68:9a:bc:b9:
         c2:62:d3:1e:e2:8e:52:b2:8b:e2:60:c7:1f:23:c1:61:a9:56:
         bd:33:89:c7:ab:06:d9:5b:6e:3e:db:55:3b:89:7b:c9:c7:07:
         6d:79:35:db:d0:d4:bf:fe:d6:41:19:ba:01:5f:83:73:e4:97:
         c5:10:f3:8a:6e:4f:18:b9:8f:79:f5:33:e6:9a:c1:db:4f:2c:
         03:4c:67:7e:07:d0:3c:a4:af:f4:c1:3f:77:de:46:7f:63:5f:
         d0:e4:b3:05:ac:4e:6e:49:78:28:b4:ed:70:13:fc:ee:0a:22:
         97:24:fe:6f:fe:f1:56:c6:70:0f:95:b9:cd:55:ba:62:d0:1c:
         28:fc:6a:7b:74:fe:05:1f:7e:08:31:29:a1:3f:b5:09:08:03:
         9a:46:4b:2b:0c:16:56:36:eb:59:48:52:c5:07:a3:91:d2:f2:
         8e:ab:66:ee:03:28:04:54:2e:a4:20:64:a0:1d:e1:bb:9f:3f:
         90:9f:22:9d:9d:58:74:08:ca:86:ef:ab:fc:7a:21:0b:f5:a2:
         bb:6a:b2:83:ce:bb:65:2f:1e:41:3e:c4:8e:84:cc:3f:4c:86:
         30:68:9d:87:82:b0:49:c5:d8:3a:cc:d0:8c:bf:8a:e0:b7:4c:
         78:f8:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:50:19 2026 by rpki-client