$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer File: 82DFDBC2299142D57F36C3896EE6073C080234FF.cer (raw, json) Hash identifier: uBCsQhkjVeCVd0ue8vqIAlo8vQ5pe+GEr5BGZYHFxsM= Subject key identifier: 82:DF:DB:C2:29:91:42:D5:7F:36:C3:89:6E:E6:07:3C:08:02:34:FF Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 4D9B79AB17AD444B12A989C231406FD99BEFE01C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 29 Aug 2025 14:40:01 +0000 Certificate not after: Fri 28 Aug 2026 14:45:01 +0000 Subordinate resources: IP: 2a14:7583:f400::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9b:79:ab:17:ad:44:4b:12:a9:89:c2:31:40:6f:d9:9b:ef:e0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Aug 29 14:40:01 2025 GMT Not After : Aug 28 14:45:01 2026 GMT Subject: CN=82DFDBC2299142D57F36C3896EE6073C080234FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:9a:a0:26:f6:6a:e6:42:f9:db:e8:33:e2: f9:42:9b:6a:37:3b:a7:35:83:08:7c:0f:6d:2f:ae: 8e:ca:e1:7b:36:78:6d:dc:84:b2:1b:f6:72:e2:e3: 36:bb:3d:6a:13:66:38:04:ec:38:fe:14:91:75:e2: a9:d4:09:c5:17:eb:85:6c:bc:a5:98:cc:06:19:11: df:3e:48:85:08:1a:96:fb:47:40:bc:34:57:2b:a9: da:8c:68:a1:d4:3b:3e:18:4a:cc:2e:eb:02:b0:c5: f3:04:74:fa:c3:68:34:cc:38:51:fd:5c:42:c8:12: f7:7b:d4:10:5e:51:48:2d:fd:aa:37:29:75:b7:b8: 5a:00:15:e1:44:3a:4a:bc:69:c3:9e:3d:e6:6e:12: 29:72:70:35:1b:bf:c7:4e:9a:3d:7f:0b:0c:44:32: be:28:57:f4:6d:5c:ad:d6:49:54:95:4f:0a:2c:6a: 4e:24:64:99:a2:0d:a2:58:b8:b0:0b:f3:d7:a4:c8: b8:af:ff:ee:89:8e:a8:32:51:66:91:a1:f1:2b:6f: a1:3b:44:15:3b:bf:34:0e:88:0a:c7:c1:3e:1e:e8: bd:f8:a6:e0:9b:24:45:1a:c5:a0:28:60:9b:c0:4f: b8:95:b4:20:6d:29:dc:56:4f:55:78:d9:9e:d7:29: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:DF:DB:C2:29:91:42:D5:7F:36:C3:89:6E:E6:07:3C:08:02:34:FF X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f400::/44 Signature Algorithm: sha256WithRSAEncryption 6f:04:5d:bf:fa:80:36:50:cb:57:27:50:37:db:8c:2a:d6:ea: e9:2f:5d:b9:39:e3:d3:32:b6:17:43:20:f9:50:38:3f:67:d7: 20:42:79:ba:99:13:ad:cd:21:6f:a7:06:05:bc:d0:76:e6:e4: 56:df:4e:90:42:7b:ba:34:1c:b4:f7:e1:33:e0:87:13:c2:db: 82:c7:2c:8d:9f:2a:46:31:96:af:4b:7a:24:d5:ce:ef:f5:94: bb:68:ae:fe:b3:a7:9c:85:cd:ab:32:f6:d8:0b:05:9b:63:95: b7:3a:a7:f3:1d:da:ad:9a:48:34:e0:8f:8f:32:5a:a3:48:0c: 5a:12:6e:70:a7:36:7e:68:2d:d8:51:70:5c:12:2a:65:87:e1: 9e:0e:74:d5:8a:d4:11:bb:31:49:0c:8e:03:d0:3c:cd:06:ae: e1:fc:28:58:49:8a:4e:e3:c3:f9:38:d2:1b:6e:1f:13:17:84: 63:7b:2a:e8:b2:17:00:9b:f8:c9:44:97:c8:58:a6:7b:05:ad: cf:3a:06:ec:a7:8d:cd:77:27:78:1f:65:d4:6b:12:e8:ca:4d: 15:04:88:9e:73:8b:de:07:2b:23:30:1c:d7:ef:3f:a9:09:da: ca:42:31:9e:c5:c1:ff:bb:09:84:8a:8b:e6:43:69:4e:d2:34: d6:58:b4:ac -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUTZt5qxetREsSqYnCMUBv2Zvv4BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTA4MjkxNDQwMDFaFw0yNjA4MjgxNDQ1MDFaMDMxMTAvBgNV BAMTKDgyREZEQkMyMjk5MTQyRDU3RjM2QzM4OTZFRTYwNzNDMDgwMjM0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvpqgJvZq5kL52+gz4vlCm2o3 O6c1gwh8D20vro7K4Xs2eG3chLIb9nLi4za7PWoTZjgE7Dj+FJF14qnUCcUX64Vs vKWYzAYZEd8+SIUIGpb7R0C8NFcrqdqMaKHUOz4YSswu6wKwxfMEdPrDaDTMOFH9 XELIEvd71BBeUUgt/ao3KXW3uFoAFeFEOkq8acOePeZuEilycDUbv8dOmj1/CwxE Mr4oV/RtXK3WSVSVTwosak4kZJmiDaJYuLAL89ekyLiv/+6JjqgyUWaRofErb6E7 RBU7vzQOiArHwT4e6L34puCbJEUaxaAoYJvAT7iVtCBtKdxWT1V42Z7XKbR/AgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSC39vCKZFC1X82 w4lu5gc8CAI0/zAfBgNVHSMEGDAWgBSxSfI6PpnEdgKX3XEEtADINdhtGTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xNmMyNzUxYi1mOWE1LTRlOWUtYTRiOC02NTgz MTBjZTRhZDMvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE2YzI3NTFiLWY5YTUtNGU5ZS1hNGI4LTY1 ODMxMGNlNGFkMy8xLzgyREZEQkMyMjk5MTQyRDU3RjM2QzM4OTZFRTYwNzNDMDgw MjM0RkYubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYP0ADANBgkqhkiG9w0B AQsFAAOCAQEAbwRdv/qANlDLVydQN9uMKtbq6S9duTnj0zK2F0Mg+VA4P2fXIEJ5 upkTrc0hb6cGBbzQdubkVt9OkEJ7ujQctPfhM+CHE8LbgscsjZ8qRjGWr0t6JNXO 7/WUu2iu/rOnnIXNqzL22AsFm2OVtzqn8x3arZpINOCPjzJao0gMWhJucKc2fmgt 2FFwXBIqZYfhng501YrUEbsxSQyOA9A8zQau4fwoWEmKTuPD+TjSG24fExeEY3sq 6LIXAJv4yUSXyFimewWtzzoG7KeNzXcneB9l1GsS6MpNFQSInnOL3gcrIzAc1+8/ qQnaykIxnsXB/7sJhIqL5kNpTtI01li0rA== -----END CERTIFICATE-----Generated at Mon Sep 8 17:04:39 2025 by rpki-client