Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
File:                     30EC341CC59263F48799F70A95490826E78E6E11.cer (raw, json)
Hash identifier:          6pO0rbOgTOqXDnq7wG1dOwC9AyITDZz0QuQo3uHdRPk=
Subject key identifier:   30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       5B7642A5EC87E2757B0954BA8A4ECF548CDBD4D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 10 Mar 2024 16:56:01 +0000
Certificate not after:    Sun 09 Mar 2025 17:01:01 +0000
Subordinate resources:    IP: 2a14:7581:100:: -- 2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
                          IP: 2a14:7581:1000:: -- 2a14:7581:2fff:ffff:ffff:ffff:ffff:ffff

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:76:42:a5:ec:87:e2:75:7b:09:54:ba:8a:4e:cf:54:8c:db:d4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Mar 10 16:56:01 2024 GMT
            Not After : Mar  9 17:01:01 2025 GMT
        Subject: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:42:b1:cd:bc:22:7a:b5:a3:84:aa:81:53:
                    1b:ad:48:d3:a1:7a:b1:7f:d6:9d:dd:18:03:fb:92:
                    72:7b:f0:1c:ed:6d:4d:c9:d1:e5:02:55:4e:33:91:
                    df:29:e4:b2:60:81:f3:21:d1:55:95:56:80:a4:4e:
                    26:d3:3a:f1:07:3e:e2:b9:d6:7e:42:08:02:e2:4a:
                    4e:37:e4:b2:c3:2a:7b:7a:5d:64:69:7a:77:73:23:
                    09:ea:55:35:ff:4d:04:75:35:94:8c:b8:45:96:ca:
                    cb:1a:95:fb:a9:c2:dc:c4:0b:cc:0a:93:1c:dc:b9:
                    fc:ae:87:64:e2:52:66:43:f0:c7:54:8c:f3:75:8f:
                    2e:34:f8:b2:32:a0:e5:44:92:1d:fe:d9:a2:59:85:
                    da:e3:c8:bc:a4:1c:77:2e:c0:ad:b4:10:c7:a5:5c:
                    22:de:13:7b:9c:8d:bf:e4:77:9b:58:00:7f:aa:c5:
                    d0:a3:44:3e:c8:0b:ed:3b:46:3b:29:f1:bc:1f:ed:
                    41:ed:45:98:5d:8d:05:24:ac:e7:3a:ef:74:1a:c4:
                    29:87:d5:35:f7:f2:46:46:f3:7f:52:e9:db:32:ea:
                    25:04:51:f4:34:07:51:4d:fb:a6:1b:1d:ea:3e:b4:
                    26:e2:0a:3b:bf:f2:a3:7c:34:2a:4f:70:e2:e7:03:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:100::-2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
                  2a14:7581:1000::-2a14:7581:2fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:90:f6:d1:d2:67:ed:f9:cd:79:17:cf:45:20:72:51:cb:
         33:e6:56:9e:16:29:b6:05:01:76:f3:65:d9:75:a7:67:36:fd:
         9e:b2:93:9c:5c:57:79:83:20:cc:6f:91:c8:5a:ac:b0:79:b5:
         81:40:9e:92:d5:ff:94:67:3d:30:67:d6:85:ba:dd:07:cf:0b:
         77:26:16:e1:8e:e9:74:28:4a:3b:7a:31:cb:05:fb:3f:a1:f9:
         84:dd:25:90:9c:87:c7:d2:46:4c:e9:54:7d:63:1d:fb:54:0c:
         1f:f8:e6:57:55:f8:a7:16:04:89:90:92:a2:0f:0c:8f:93:3a:
         c9:f5:f7:49:2f:af:55:c6:12:eb:0a:52:39:0f:76:fa:cc:05:
         1c:d3:13:fe:27:c5:b3:5e:e1:73:55:a3:73:72:43:ab:69:56:
         b4:21:16:70:ae:9d:54:59:5c:ec:fb:8b:d9:77:49:2a:95:0e:
         92:70:07:95:20:11:b3:22:a0:37:30:fb:3c:e4:54:97:15:b1:
         20:a4:0a:6f:24:b5:94:21:9b:7c:28:43:0a:0c:b1:85:c1:e8:
         89:44:c7:5c:93:1a:1b:30:8b:85:49:65:1e:0e:bd:60:72:33:
         9d:fd:24:45:4c:23:ba:7d:01:e8:b2:b4:d9:7b:cd:ee:c6:1e:
         3a:20:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:19:25 2024 by rpki-client on console-fra.rpki-client.org