Certificate

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
File:                     F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer (raw, json)
Hash identifier:          sTynBU12W/PRGelsU5YDwbVLE0V6cupwyvpgBdiqNDA=
Subject key identifier:   F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       481D2E3DC99C3FDED5CC26F7590202A435DB3A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
caRepository:             rsync://rpki.axivora.net/repo/Axivora-Net/2/
Notify URL:               https://rpki.axivora.net/rrdp/notification.xml
Certificate not before:   Mon 14 Sep 2026 13:09:42 +0000
Certificate not after:    Mon 13 Sep 2027 13:14:42 +0000
Subordinate resources:    IP: 2a14:7580:700::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1d:2e:3d:c9:9c:3f:de:d5:cc:26:f7:59:02:02:a4:35:db:3a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Sep 14 13:09:42 2026 GMT
            Not After : Sep 13 13:14:42 2027 GMT
        Subject: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:e4:73:4a:0f:70:ac:ac:94:dd:ee:7d:70:
                    ad:16:b6:b7:d4:0a:f2:2d:68:ec:15:b4:c7:8e:14:
                    a5:3e:81:42:b2:62:48:e3:eb:0e:4d:8a:76:07:1b:
                    f4:cc:22:38:3c:04:40:ef:aa:69:eb:69:9b:4e:00:
                    eb:5b:ee:6b:1e:3e:b2:9c:7c:75:70:39:9b:07:54:
                    78:d4:0a:ec:91:39:ed:fc:d7:4c:b1:08:16:07:93:
                    a2:31:29:3d:af:dd:51:de:4e:34:51:f8:16:66:9b:
                    74:6c:77:c2:3e:36:13:1a:bd:14:6b:c1:02:20:c9:
                    e6:85:d3:5d:52:35:8a:a8:20:75:18:58:8a:40:55:
                    5f:42:d6:6a:a9:bc:d2:26:7f:ed:97:0f:50:97:bb:
                    e6:e1:e7:11:aa:90:6e:55:4e:5d:74:3a:71:b7:22:
                    2a:d4:03:97:42:9f:a2:80:14:ce:f3:88:49:b3:0b:
                    e0:7f:9c:cd:80:10:8c:a8:c0:ca:34:ef:23:04:12:
                    f5:f8:de:db:88:ab:c2:96:45:80:ef:0b:fa:22:01:
                    30:44:da:35:76:02:5f:67:a6:4d:59:eb:4e:be:c3:
                    1e:67:ef:c0:a8:8e:29:2f:7b:b4:b6:a0:0a:86:32:
                    95:91:9b:59:e8:eb:6a:ca:d8:79:0c:65:66:5b:65:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/
                RPKI Manifest - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                RPKI Notify - URI:https://rpki.axivora.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:e6:8f:2e:8d:a1:f3:b0:01:7b:70:c9:76:97:2e:6f:40:
         40:b2:a1:b2:31:76:ca:12:55:24:05:47:42:1a:00:24:25:51:
         17:a7:1a:ca:e2:7e:63:ae:c5:8d:1e:32:6c:6d:11:a0:4e:c8:
         f6:fd:d8:f2:0f:5a:4d:06:ac:01:cb:fc:ee:3f:2d:8d:b1:c2:
         1b:86:23:07:cf:ed:f5:24:fe:9e:2b:e2:93:16:74:51:97:58:
         22:90:4e:65:ca:e1:a9:1b:a2:31:8d:b4:8a:05:e6:73:1c:e0:
         42:be:94:43:06:b7:ea:dd:78:4f:88:c2:b5:58:f1:88:dc:14:
         2d:38:6a:1f:94:20:63:f2:f9:36:d4:93:69:0b:9e:15:a3:f4:
         c1:81:0c:92:01:d2:c8:3a:c9:0c:e0:8c:32:e9:4c:c1:a5:37:
         a4:b6:a8:48:e9:ba:86:8a:5d:c6:fb:fb:91:fa:92:39:38:f9:
         f6:7b:2d:c5:ef:5c:34:c6:74:fe:94:27:d7:df:76:8b:e3:34:
         03:e3:96:6d:f8:b3:2a:b4:0f:7e:5e:72:4e:e7:24:68:45:ef:
         25:45:e8:36:93:98:ab:73:4f:54:3a:83:15:6c:22:f0:03:85:
         cf:0a:da:b6:c8:cb:94:a9:30:e5:53:7d:1b:4c:34:c3:00:ca:
         4d:25:0b:6d
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUSB0uPcmcP97VzCb3WQICpDXbOpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MTQxMzA5NDJaFw0yNzA5MTMxMzE0NDJaMDMxMTAvBgNV
BAMTKEY2REU2RkM3QUM0NjdGMTBCNTcwNUU2MEI4RkREQTAyRkZGRDczNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqORzSg9wrKyU3e59cK0WtrfU
CvItaOwVtMeOFKU+gUKyYkjj6w5NinYHG/TMIjg8BEDvqmnraZtOAOtb7msePrKc
fHVwOZsHVHjUCuyROe3810yxCBYHk6IxKT2v3VHeTjRR+BZmm3Rsd8I+NhMavRRr
wQIgyeaF011SNYqoIHUYWIpAVV9C1mqpvNImf+2XD1CXu+bh5xGqkG5VTl10OnG3
IirUA5dCn6KAFM7ziEmzC+B/nM2AEIyowMo07yMEEvX43tuIq8KWRYDvC/oiATBE
2jV2Al9npk1Z606+wx5n78Cojikve7S2oAqGMpWRm1no62rK2HkMZWZbZTJ5AgMB
AAGjggKPMIICizAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT23m/HrEZ/ELVw
XmC4/doC//1zeDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCB7AYIKwYBBQUHAQsEgd8wgdwwOAYI
KwYBBQUHMAWGLHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZvcmEt
TmV0LzIvMGQGCCsGAQUFBzAKhlhyc3luYzovL3Jwa2kuYXhpdm9yYS5uZXQvcmVw
by9BeGl2b3JhLU5ldC8yL0Y2REU2RkM3QUM0NjdGMTBCNTcwNUU2MEI4RkREQTAy
RkZGRDczNzgubWZ0MDoGCCsGAQUFBzANhi5odHRwczovL3Jwa2kuYXhpdm9yYS5u
ZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFHWABzANBgkqhkiG9w0B
AQsFAAOCAQEAW6Pmjy6NofOwAXtwyXaXLm9AQLKhsjF2yhJVJAVHQhoAJCVRF6ca
yuJ+Y67FjR4ybG0RoE7I9v3Y8g9aTQasAcv87j8tjbHCG4YjB8/t9ST+nivikxZ0
UZdYIpBOZcrhqRuiMY20igXmcxzgQr6UQwa36t14T4jCtVjxiNwULThqH5QgY/L5
NtSTaQueFaP0wYEMkgHSyDrJDOCMMulMwaU3pLaoSOm6hopdxvv7kfqSOTj59nst
xe9cNMZ0/pQn1992i+M0A+OWbfizKrQPfl5yTuckaEXvJUXoNpOYq3NPVDqDFWwi
8AOFzwratsjLlKkw5VN9G0w0wwDKTSULbQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:14:01 2026 by rpki-client