Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
File:                     808DAC70271F8080A22C1AEE42EFAF98E1776954.cer (raw, json)
Hash identifier:          6VG/2EpIl3tRQAkTz+ozXMzASSbD+VSuK4LShycZDmo=
Subject key identifier:   80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer:       /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial:       30DBB2D60F903AC7067F5854947322B481D0A5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest:                 rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
caRepository:             rsync://rpki.axivora.net/repo/Axivora-Net/3/
Notify URL:               https://rpki.axivora.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jun 2026 12:13:29 +0000
Certificate not after:    Tue 01 Jun 2027 12:18:29 +0000
Subordinate resources:    IP: 2a0f:1cc5:e00::/40
                          IP: 2a0f:1cc5:ffff::/48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 14:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:b2:d6:0f:90:3a:c7:06:7f:58:54:94:73:22:b4:81:d0:a5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
        Validity
            Not Before: Jun  2 12:13:29 2026 GMT
            Not After : Jun  1 12:18:29 2027 GMT
        Subject: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:55:e0:23:ac:e8:24:78:90:9e:bc:0c:0f:
                    96:97:a8:73:6c:c8:58:4f:d0:c0:ea:18:50:cb:28:
                    1b:85:e7:38:f3:d7:ba:d7:a4:83:51:ee:1e:49:05:
                    73:22:03:c2:f4:1c:de:e8:08:d4:b3:f0:e9:9a:07:
                    3f:20:14:44:b5:8a:c5:25:42:ea:33:85:1b:fd:73:
                    18:43:9a:44:4f:3e:1c:3e:97:35:b6:05:f1:11:b1:
                    0e:da:e8:56:a3:14:8c:96:0f:db:4d:c0:06:a9:92:
                    72:b4:04:a6:cc:d7:15:a0:91:45:39:51:87:b4:55:
                    2b:05:c8:a1:c0:3b:b6:5f:9d:bf:4d:56:e2:fc:db:
                    85:8e:98:73:76:5c:04:36:5c:89:ac:12:39:9a:78:
                    c8:a5:bb:2a:c5:11:04:b9:22:85:02:51:e8:3f:d9:
                    94:35:09:92:a0:e7:d6:13:11:cd:c6:8b:df:25:f8:
                    bb:86:8f:f3:8d:f8:29:28:ff:8c:61:6c:d9:83:29:
                    0c:87:47:6f:3a:9a:d2:51:bd:01:17:cd:38:1f:2a:
                    28:76:31:ac:8a:66:b0:b7:05:8c:cf:b0:68:47:2a:
                    c9:4d:1a:69:31:fd:78:b6:53:ee:b2:ac:02:90:eb:
                    56:8b:8b:90:81:57:04:ca:40:6b:cf:5f:10:2c:85:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
            X509v3 Authority Key Identifier:
                keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/
                RPKI Manifest - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                RPKI Notify - URI:https://rpki.axivora.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:e00::/40
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:03:aa:1d:9b:2e:69:aa:61:08:15:e8:84:1e:d8:70:ac:
         9f:4f:d2:d7:19:97:a2:5c:d2:c5:ff:e2:69:28:b0:45:93:d2:
         ae:69:17:2c:51:2a:e8:9b:48:5b:f9:fd:7d:a8:60:93:5b:2f:
         c2:02:74:96:e3:dc:f8:e6:29:b9:4c:20:d4:6c:dd:02:ee:51:
         ab:0a:6a:35:08:2f:bb:80:f0:29:56:9e:a4:d0:2a:ea:45:2e:
         f1:c4:6c:af:d4:b6:e3:9b:56:ee:c4:e1:ba:b9:ff:7e:ec:ef:
         eb:1e:6e:4d:85:dc:c3:20:9a:02:9c:d6:88:40:10:a3:38:8d:
         c1:0d:83:c6:1c:6b:00:e7:2d:95:f8:d0:18:ac:f1:90:d6:18:
         37:f5:7c:a5:c6:e2:18:9b:b3:58:0e:6c:e4:83:76:14:22:ec:
         40:3b:9c:86:a3:13:96:5f:4e:3b:8d:f6:3a:8c:63:16:78:f1:
         d0:7a:2a:fb:a4:96:87:d1:17:d2:59:5e:e6:e7:0f:2a:51:d1:
         28:ea:89:cf:f2:45:a9:9b:a4:d1:a2:d6:c0:8d:88:1e:8b:18:
         0f:69:b9:1c:14:1e:0f:61:23:44:d8:bf:27:30:67:20:2f:f2:
         36:f8:5c:66:70:72:ad:cf:96:87:10:c7:1a:74:03:e6:7c:fe:
         d7:e5:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:41 2026 by rpki-client