Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
File:                     80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (raw, json)
Hash identifier:          TYsfkHtNOfK76uqy14SYaCemKP3HftisBSZd+5DPrVE=
Subject key identifier:   80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Certificate issuer:       /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial:       66BBD701BBF43BEDFA415582F932C0DC6055AF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 05 Jun 2026 05:18:57 +0000
Certificate not after:    Fri 04 Jun 2027 05:23:57 +0000
Subordinate resources:    IP: 2a0a:d685::/32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bb:d7:01:bb:f4:3b:ed:fa:41:55:82:f9:32:c0:dc:60:55:af:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
        Validity
            Not Before: Jun  5 05:18:57 2026 GMT
            Not After : Jun  4 05:23:57 2027 GMT
        Subject: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:ad:70:12:9b:8f:fb:ab:91:fb:29:69:bc:
                    1f:47:0b:7b:23:f4:4c:28:2c:49:e7:e5:78:cc:e9:
                    3d:47:cf:1c:96:1f:62:4e:a3:d2:94:72:05:03:d8:
                    89:63:7a:04:5e:6e:11:86:c7:54:26:70:f8:f5:44:
                    f9:f6:71:e5:75:b1:a6:93:68:f1:29:e7:90:e7:0e:
                    75:13:6d:b4:ac:27:5f:23:9a:3d:88:3b:c7:a7:38:
                    d9:e1:cc:24:ca:2c:19:dd:41:9a:55:4a:35:bd:fd:
                    ca:03:fb:70:d8:80:df:da:56:b8:76:8e:eb:f9:3e:
                    bc:ca:36:11:94:9f:f9:53:9f:8f:e6:90:eb:46:88:
                    0a:5a:ff:00:48:d8:ad:4c:86:91:e9:d9:da:51:58:
                    fb:f4:2a:1a:a1:bf:e4:60:53:10:06:40:4e:f9:d3:
                    1e:bf:73:6c:13:01:da:c6:4f:38:34:6a:0c:00:eb:
                    13:41:2b:f8:63:6f:68:36:0f:29:8c:26:85:d4:ec:
                    fa:be:57:b9:60:aa:20:6e:67:06:c8:39:06:39:04:
                    bb:08:f0:3b:fc:22:9e:24:4c:2f:be:32:93:4a:95:
                    d1:3f:6b:6c:28:a0:ef:6d:4e:fa:6f:93:19:35:b0:
                    38:64:16:ac:81:9e:8a:8b:b2:9d:65:e0:5b:05:c1:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E
            X509v3 Authority Key Identifier:
                keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:d685::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:63:15:fd:d7:db:c3:c6:91:be:cc:87:f4:f9:a8:52:08:d6:
         5d:2f:4a:f6:c8:5e:7b:15:db:f8:1a:27:a9:c5:d3:81:26:d4:
         6c:10:98:77:ad:ff:bc:ab:ef:46:ac:fa:f4:ec:a2:74:b9:db:
         39:66:f5:55:10:cf:41:ab:81:3b:a2:98:93:5a:82:40:66:28:
         23:13:dd:18:05:fe:d8:46:fe:17:c9:b9:46:bc:72:98:87:17:
         1a:e2:35:5b:86:fa:0f:b1:d3:b5:8b:f5:18:06:b8:3b:23:13:
         fc:a0:86:bb:74:61:32:34:bb:0d:f9:2d:c4:36:6a:50:85:41:
         fc:c8:1f:15:8b:d1:8c:06:c5:6e:9a:fe:ad:96:66:48:79:6b:
         56:d3:0a:e7:88:c2:76:27:7a:f0:8a:d8:22:18:06:ce:d0:67:
         1f:3d:3a:79:c5:1e:c4:dc:42:34:c3:a0:85:2c:33:f5:f6:84:
         ce:68:58:1f:cf:a4:aa:a6:d9:e5:c5:2a:60:d4:51:c5:98:37:
         2b:11:20:2a:45:3d:e9:a5:b9:68:f2:7b:45:46:45:8a:14:82:
         a5:87:fb:de:7e:c8:c6:2c:90:2a:c8:7c:ab:9c:93:af:97:cf:
         85:98:7c:ad:84:9c:7e:8e:25:73:5d:8a:ad:54:e8:d9:1c:2b:
         8d:60:d3:6c
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUZrvXAbv0O+36QVWC+TLA3GBVr3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh
M2MzZTRlYTAeFw0yNjA2MDUwNTE4NTdaFw0yNzA2MDQwNTIzNTdaMDMxMTAvBgNV
BAMTKDgwODM4NjczRUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/d61wEpuP+6uR+ylpvB9HC3sj
9EwoLEnn5XjM6T1HzxyWH2JOo9KUcgUD2IljegRebhGGx1QmcPj1RPn2ceV1saaT
aPEp55DnDnUTbbSsJ18jmj2IO8enONnhzCTKLBndQZpVSjW9/coD+3DYgN/aVrh2
juv5PrzKNhGUn/lTn4/mkOtGiApa/wBI2K1MhpHp2dpRWPv0Khqhv+RgUxAGQE75
0x6/c2wTAdrGTzg0agwA6xNBK/hjb2g2DymMJoXU7Pq+V7lgqiBuZwbIOQY5BLsI
8Dv8Ip4kTC++MpNKldE/a2wooO9tTvpvkxk1sDhkFqyBnoqLsp1l4FsFwRSBAgMB
AAGjggLiMIIC3jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAg4Zz7Skdwaz6
4Dfoj5x6eLcSfjAfBgNVHSMEGDAWgBQOcK4KzQvoPS1FjKIHsdT/o8Pk6jAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh
MzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0NThDQTIw
N0IxRDRGRkEzQzNFNEVBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRG5DdUNz
MEw2RDB0Ull5aUI3SFVfNlBENU9vLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdjZTM5LzUv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkv
NS84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdFODhGOUM3QTc4QjcxMjdFLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAqCtaFMA0GCSqGSIb3DQEBCwUAA4IBAQBXYxX9
19vDxpG+zIf0+ahSCNZdL0r2yF57Fdv4GiepxdOBJtRsEJh3rf+8q+9GrPr07KJ0
uds5ZvVVEM9Bq4E7opiTWoJAZigjE90YBf7YRv4XyblGvHKYhxca4jVbhvoPsdO1
i/UYBrg7IxP8oIa7dGEyNLsN+S3ENmpQhUH8yB8Vi9GMBsVumv6tlmZIeWtW0wrn
iMJ2J3rwitgiGAbO0GcfPTp5xR7E3EI0w6CFLDP19oTOaFgfz6SqptnlxSpg1FHF
mDcrESAqRT3ppblo8ntFRkWKFIKlh/vefsjGLJAqyHyrnJOvl8+FmHythJx+jiVz
XYqtVOjZHCuNYNNs
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:14:22 2026 by rpki-client