Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
File:                     B75F3781BC9C2E7301754988659F92686704E570.cer (raw, json)
Hash identifier:          2pvgXGnjcxtuFhFBLCtNRg4ARln7o6peI09RZelSeiw=
Subject key identifier:   B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       541F49B8C44C97192164D0F5B6C15589C0C1CFEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 26 May 2026 06:02:05 +0000
Certificate not after:    Tue 25 May 2027 06:07:05 +0000
Subordinate resources:    IP: 2a14:7583:ef50:: -- 2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1f:49:b8:c4:4c:97:19:21:64:d0:f5:b6:c1:55:89:c0:c1:cf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: May 26 06:02:05 2026 GMT
            Not After : May 25 06:07:05 2027 GMT
        Subject: CN=B75F3781BC9C2E7301754988659F92686704E570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:4a:77:de:1c:07:6c:5d:57:72:73:50:76:
                    19:e2:13:2b:93:4e:61:9d:ad:25:6c:33:de:5d:81:
                    79:ab:df:70:33:de:dc:28:96:78:8c:66:df:5a:07:
                    c9:7b:0a:ec:74:b1:b4:a5:2d:74:0b:69:4a:7d:59:
                    e7:fc:28:26:44:b4:f6:10:d4:f0:d1:ea:ec:68:c7:
                    f7:fa:6b:b1:7c:9a:fc:fb:b1:e9:9a:2c:59:20:32:
                    20:fd:79:ae:eb:47:8e:b5:8a:f0:67:7b:78:32:0d:
                    26:1f:ad:ef:37:25:dc:0d:bf:d6:3e:3a:77:51:be:
                    74:7b:82:be:5a:c4:57:d5:b8:4b:de:21:58:b6:61:
                    07:be:39:3b:5e:9c:fe:be:52:1b:0c:7c:77:9a:fe:
                    14:44:fe:7e:1b:ae:7c:c5:70:83:50:9b:04:3d:1c:
                    02:b4:e6:b1:91:62:ad:f7:a3:bb:27:29:f6:fe:46:
                    fa:1b:3e:83:3f:b4:43:9c:40:6a:8b:35:ba:af:d1:
                    a9:ee:1c:d5:c9:c5:be:ac:41:c9:26:33:7d:24:52:
                    64:4e:0c:02:f6:a9:99:98:fd:71:02:bd:3f:83:df:
                    b6:13:9c:85:b7:f9:5b:e0:78:26:eb:dd:a4:4f:bf:
                    69:1c:41:5f:a6:f7:af:2d:4d:7e:87:0a:9f:ca:bd:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:ef50::-2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         37:52:45:5d:0e:a9:d2:0b:4d:6e:69:5e:5e:10:cb:19:03:7a:
         73:59:e2:dd:ef:5b:ae:fa:10:85:25:9e:eb:0b:4c:0f:59:66:
         7e:b0:c5:7f:5c:1b:f9:f5:e7:de:16:c8:4d:bc:0c:07:ff:96:
         53:67:25:c1:57:2e:5c:c1:d8:95:f4:bb:82:51:72:34:37:62:
         c9:f5:42:fa:db:e9:10:36:2e:0c:c8:b3:08:a9:16:bb:29:74:
         af:ac:20:d4:18:19:67:1d:a4:5b:86:2a:78:1b:3f:c0:d0:8d:
         10:13:16:58:ac:87:14:59:e4:66:2b:e6:4b:fc:a8:bf:0d:8c:
         30:cd:30:c1:47:c7:fd:e9:98:b7:42:d3:9f:e2:b1:da:da:ac:
         43:3a:46:51:98:08:cf:d9:e2:c9:0c:65:c7:d2:9b:9b:31:db:
         7b:83:3c:88:93:10:30:46:42:56:f8:41:40:ff:5b:c0:64:f1:
         59:f0:df:3f:c9:f8:cb:07:3c:aa:4a:5f:5a:80:86:c8:b4:8f:
         4e:6b:52:6a:e1:6d:18:a1:1a:cb:0d:11:9b:af:fa:b1:12:46:
         61:25:9c:67:cf:4e:06:2c:63:67:48:d9:bf:0e:01:4c:b4:e2:
         71:53:cd:6d:7d:a2:82:8e:fe:d6:1d:ad:65:bc:e0:63:0e:be:
         b5:c5:e7:d0
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIUVB9JuMRMlxkhZND1tsFVicDBz+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA1MjYwNjAyMDVaFw0yNzA1MjUwNjA3MDVaMDMxMTAvBgNV
BAMTKEI3NUYzNzgxQkM5QzJFNzMwMTc1NDk4ODY1OUY5MjY4NjcwNEU1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa10p33hwHbF1XcnNQdhniEyuT
TmGdrSVsM95dgXmr33Az3twolniMZt9aB8l7Cux0sbSlLXQLaUp9Wef8KCZEtPYQ
1PDR6uxox/f6a7F8mvz7semaLFkgMiD9ea7rR461ivBne3gyDSYfre83JdwNv9Y+
OndRvnR7gr5axFfVuEveIVi2YQe+OTtenP6+UhsMfHea/hRE/n4brnzFcINQmwQ9
HAK05rGRYq33o7snKfb+RvobPoM/tEOcQGqLNbqv0anuHNXJxb6sQckmM30kUmRO
DAL2qZmY/XECvT+D37YTnIW3+VvgeCbr3aRPv2kcQV+m968tTX6HCp/KvXOPAgMB
AAGjggLvMIIC6zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3XzeBvJwucwF1
SYhln5JoZwTlcDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1NTU2LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8zNzQ2MDUyOS02OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYv
MS9CNzVGMzc4MUJDOUMyRTczMDE3NTQ5ODg2NTlGOTI2ODY3MDRFNTcwLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH
AQcBAf8EHjAcMBoEAgACMBQwEgMHBCoUdYPvUAMHBCoUdYPvYDANBgkqhkiG9w0B
AQsFAAOCAQEAN1JFXQ6p0gtNbmleXhDLGQN6c1ni3e9brvoQhSWe6wtMD1lmfrDF
f1wb+fXn3hbITbwMB/+WU2clwVcuXMHYlfS7glFyNDdiyfVC+tvpEDYuDMizCKkW
uyl0r6wg1BgZZx2kW4YqeBs/wNCNEBMWWKyHFFnkZivmS/yovw2MMM0wwUfH/emY
t0LTn+Kx2tqsQzpGUZgIz9niyQxlx9KbmzHbe4M8iJMQMEZCVvhBQP9bwGTxWfDf
P8n4ywc8qkpfWoCGyLSPTmtSauFtGKEayw0Rm6/6sRJGYSWcZ89OBixjZ0jZvw4B
TLTicVPNbX2igo7+1h2tZbzgYw6+tcXn0A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:50 2026 by rpki-client