Certificate

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
File:                     EE62537B84730FEF19A4F83414308039BC848047.cer (raw, json)
Hash identifier:          37FbESbRxYYIldwtbAu1T9NIomzhG1zTKxBpfM0nRCI=
Subject key identifier:   EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       2EDE6076237424969199F60802BE0BA41DB732E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 05 Oct 2026 06:01:35 +0000
Certificate not after:    Mon 04 Oct 2027 06:06:35 +0000
Subordinate resources:    IP: 79.176.0.0/16
                          IP: 79.180.0.0/16
                          IP: 79.182.0.0/15
                          IP: 109.64.0.0 -- 109.66.255.255
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:de:60:76:23:74:24:96:91:99:f6:08:02:be:0b:a4:1d:b7:32:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  5 06:01:35 2026 GMT
            Not After : Oct  4 06:06:35 2027 GMT
        Subject: CN=EE62537B84730FEF19A4F83414308039BC848047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:83:c0:13:dd:8f:66:d5:68:8e:34:b4:90:
                    78:8b:4a:60:66:2a:08:02:93:18:a6:09:52:47:9b:
                    d0:0d:a6:e4:8f:9b:5e:a7:c4:da:60:3f:0e:13:d4:
                    2e:4e:5c:ae:95:2d:d1:7e:5e:e9:5d:f5:ec:1d:30:
                    74:e9:21:a2:da:2b:f5:4d:63:b7:95:3b:4f:23:38:
                    79:14:61:26:03:e7:0b:6d:40:4f:dc:8a:3b:fe:4b:
                    f2:1b:e1:db:c4:d4:53:70:e4:44:bd:cf:d3:6d:03:
                    78:86:ad:9f:45:0e:33:95:47:3f:5e:b0:dc:21:88:
                    7a:a4:f2:d4:bb:c2:57:0e:6b:63:ed:9a:94:a3:42:
                    a1:30:7c:17:36:89:f9:48:e2:e0:2e:f8:7d:8d:f5:
                    ab:0a:86:a1:4e:f9:f9:58:12:c6:4b:c2:a1:c2:9a:
                    e0:8e:f7:dd:89:c0:86:4b:d7:50:bf:b1:61:1e:66:
                    86:f0:97:34:4b:2b:95:1f:64:82:f2:6c:9e:a8:89:
                    15:ac:58:01:3b:c0:84:2b:3b:e0:c5:d8:9c:e4:15:
                    10:5b:a6:31:69:fd:11:9d:ee:b7:2e:c8:52:2f:5e:
                    0c:b7:e3:21:b4:ab:a4:8a:09:74:b2:c3:39:d3:b1:
                    9d:93:a7:0f:3c:2f:98:2c:da:b4:b4:eb:b5:93:d7:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.0.0/16
                  79.180.0.0/16
                  79.182.0.0/15
                  109.64.0.0-109.66.255.255

    Signature Algorithm: sha256WithRSAEncryption
         44:91:df:d3:05:ac:db:53:7b:74:6e:75:2c:15:77:d3:ff:b2:
         c1:b5:50:30:31:c0:31:0c:4a:4d:53:d0:76:32:02:33:98:67:
         96:a7:a4:f8:a6:5d:71:e7:7f:23:fa:a1:e8:3c:5a:7d:33:e8:
         d5:fa:20:9d:f8:6b:c2:db:ea:66:d0:6d:0b:6e:9f:9e:29:8a:
         7f:61:1d:2a:ab:d1:0d:56:17:a6:33:1e:a5:0a:58:43:4a:0a:
         5d:2a:48:00:7a:bf:2a:c3:e8:b6:f2:67:ef:57:72:c8:27:fc:
         46:70:e5:ae:a0:0a:1a:5c:f7:da:10:51:cb:5f:76:43:7e:49:
         66:30:4f:99:4e:96:48:4b:d2:d1:87:c1:73:01:89:07:f1:b4:
         cf:4a:b5:b1:4a:fe:28:56:77:a3:0e:00:49:3d:6b:82:83:17:
         ed:eb:f9:f9:96:00:d3:31:08:33:99:d4:c1:cb:17:da:b0:20:
         74:98:57:69:ba:84:a7:c7:26:e3:89:6a:b8:e0:d8:1c:c3:bd:
         21:88:9a:03:d5:e0:89:41:5f:e8:2d:0a:7a:4e:3e:e6:2c:48:
         10:76:2f:91:f6:48:99:0c:69:a8:80:01:9c:73:94:9c:a8:a8:
         5b:0f:30:a4:ef:4d:9b:b6:4c:00:7a:a4:91:f7:ad:bc:9d:8c:
         42:60:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:48:15 2026 by rpki-client