Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
File:                     F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer (raw, json)
Hash identifier:          wXbtf+sq5BoH6YFJ/1lrKGX5i9E+4nYIhmVNPKWSCxc=
Subject key identifier:   F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       591DCB6AF768008FD3F6321447E1EB90DE0FB66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
caRepository:             rsync://rpki.axivora.net/repo/Axivora-Net/2/
Notify URL:               https://rpki.axivora.net/rrdp/notification.xml
Certificate not before:   Sat 30 Aug 2025 09:26:00 +0000
Certificate not after:    Sat 29 Aug 2026 09:31:00 +0000
Subordinate resources:    IP: 2a14:7580:700::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 13:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1d:cb:6a:f7:68:00:8f:d3:f6:32:14:47:e1:eb:90:de:0f:b6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Aug 30 09:26:00 2025 GMT
            Not After : Aug 29 09:31:00 2026 GMT
        Subject: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:e4:73:4a:0f:70:ac:ac:94:dd:ee:7d:70:
                    ad:16:b6:b7:d4:0a:f2:2d:68:ec:15:b4:c7:8e:14:
                    a5:3e:81:42:b2:62:48:e3:eb:0e:4d:8a:76:07:1b:
                    f4:cc:22:38:3c:04:40:ef:aa:69:eb:69:9b:4e:00:
                    eb:5b:ee:6b:1e:3e:b2:9c:7c:75:70:39:9b:07:54:
                    78:d4:0a:ec:91:39:ed:fc:d7:4c:b1:08:16:07:93:
                    a2:31:29:3d:af:dd:51:de:4e:34:51:f8:16:66:9b:
                    74:6c:77:c2:3e:36:13:1a:bd:14:6b:c1:02:20:c9:
                    e6:85:d3:5d:52:35:8a:a8:20:75:18:58:8a:40:55:
                    5f:42:d6:6a:a9:bc:d2:26:7f:ed:97:0f:50:97:bb:
                    e6:e1:e7:11:aa:90:6e:55:4e:5d:74:3a:71:b7:22:
                    2a:d4:03:97:42:9f:a2:80:14:ce:f3:88:49:b3:0b:
                    e0:7f:9c:cd:80:10:8c:a8:c0:ca:34:ef:23:04:12:
                    f5:f8:de:db:88:ab:c2:96:45:80:ef:0b:fa:22:01:
                    30:44:da:35:76:02:5f:67:a6:4d:59:eb:4e:be:c3:
                    1e:67:ef:c0:a8:8e:29:2f:7b:b4:b6:a0:0a:86:32:
                    95:91:9b:59:e8:eb:6a:ca:d8:79:0c:65:66:5b:65:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/
                RPKI Manifest - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                RPKI Notify - URI:https://rpki.axivora.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:ff:a4:f3:17:76:a7:d1:ba:09:ef:0b:de:11:ff:cf:d0:
         cf:f1:ec:6a:40:d1:b9:ee:1f:a9:25:e8:aa:46:77:28:e6:aa:
         54:4e:01:88:a6:7c:0b:04:55:6b:c9:d8:8e:43:09:c4:be:f1:
         e8:01:5a:36:4c:21:25:db:c2:b3:cb:2e:2e:75:3a:c6:7e:d2:
         48:20:89:49:4c:eb:7b:b3:8d:b7:11:04:6c:60:9e:21:c9:2c:
         7e:7a:74:cb:fa:9d:5e:04:e7:83:da:ec:5e:93:f9:40:de:2b:
         48:95:f1:b0:8a:66:75:b0:4b:da:b1:6e:ab:f9:1a:7c:d1:c3:
         53:ff:35:95:9c:8f:75:16:15:f5:bc:2c:5f:f6:39:27:7e:43:
         8d:51:e2:ac:9a:37:e8:d1:9c:a4:d0:4a:54:c5:04:f7:f0:bf:
         2a:51:bd:bf:60:e1:53:71:6f:42:18:f0:e9:c3:3b:9d:40:de:
         ac:8a:fa:76:f1:f4:2a:37:9a:46:ec:6d:f9:ed:f8:0a:72:cc:
         3f:bb:55:0e:e8:03:83:4e:55:3f:cf:29:24:11:ff:c7:ac:6c:
         a5:2b:3d:1c:5e:b4:ea:9c:9a:29:3b:b8:db:30:85:b4:10:f8:
         ae:76:cd:6c:61:e2:dc:68:14:c3:31:36:30:d5:78:21:99:f8:
         4f:7b:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:20:36 2025 by rpki-client