Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
File:                     30EC341CC59263F48799F70A95490826E78E6E11.cer (raw, json)
Hash identifier:          IWDFSe621ziA8fN+ZiaSw6iPNm7AiwqQCivlu2DzS3U=
Subject key identifier:   30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       6CC28B004AA9784699A0991C841339387868FEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 14 Sep 2025 21:30:15 +0000
Certificate not after:    Sun 13 Sep 2026 21:35:15 +0000
Subordinate resources:    IP: 2a14:7581:100:: -- 2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
                          IP: 2a14:7581:1000::/36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c2:8b:00:4a:a9:78:46:99:a0:99:1c:84:13:39:38:78:68:fe:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Sep 14 21:30:15 2025 GMT
            Not After : Sep 13 21:35:15 2026 GMT
        Subject: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:42:b1:cd:bc:22:7a:b5:a3:84:aa:81:53:
                    1b:ad:48:d3:a1:7a:b1:7f:d6:9d:dd:18:03:fb:92:
                    72:7b:f0:1c:ed:6d:4d:c9:d1:e5:02:55:4e:33:91:
                    df:29:e4:b2:60:81:f3:21:d1:55:95:56:80:a4:4e:
                    26:d3:3a:f1:07:3e:e2:b9:d6:7e:42:08:02:e2:4a:
                    4e:37:e4:b2:c3:2a:7b:7a:5d:64:69:7a:77:73:23:
                    09:ea:55:35:ff:4d:04:75:35:94:8c:b8:45:96:ca:
                    cb:1a:95:fb:a9:c2:dc:c4:0b:cc:0a:93:1c:dc:b9:
                    fc:ae:87:64:e2:52:66:43:f0:c7:54:8c:f3:75:8f:
                    2e:34:f8:b2:32:a0:e5:44:92:1d:fe:d9:a2:59:85:
                    da:e3:c8:bc:a4:1c:77:2e:c0:ad:b4:10:c7:a5:5c:
                    22:de:13:7b:9c:8d:bf:e4:77:9b:58:00:7f:aa:c5:
                    d0:a3:44:3e:c8:0b:ed:3b:46:3b:29:f1:bc:1f:ed:
                    41:ed:45:98:5d:8d:05:24:ac:e7:3a:ef:74:1a:c4:
                    29:87:d5:35:f7:f2:46:46:f3:7f:52:e9:db:32:ea:
                    25:04:51:f4:34:07:51:4d:fb:a6:1b:1d:ea:3e:b4:
                    26:e2:0a:3b:bf:f2:a3:7c:34:2a:4f:70:e2:e7:03:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:100::-2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
                  2a14:7581:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:40:1f:bf:02:48:b6:d1:f3:cd:ec:14:d6:1d:7e:7f:73:
         74:f9:df:90:73:da:c0:fc:a7:8b:c5:69:23:ae:7a:ac:0a:06:
         03:35:e1:52:a4:51:4b:d8:01:41:3c:70:85:41:b0:e4:3e:13:
         a8:08:61:9a:9f:2e:4f:3a:ec:37:d6:5b:18:e4:a1:7a:a3:73:
         1e:34:b0:e6:c7:3d:39:dc:a2:8e:6b:fe:1a:79:69:58:28:23:
         1b:ea:d8:c3:7b:7b:ee:17:6e:69:df:0b:36:6b:39:6c:db:62:
         d2:ce:f9:40:62:77:b3:9c:f4:61:66:25:18:e4:29:79:aa:8b:
         a7:b5:43:20:54:cd:51:1a:cc:39:50:bd:ca:9d:36:cc:7e:9b:
         79:4b:15:ea:27:6b:bd:68:9d:94:4b:4e:a7:18:13:81:6c:24:
         6e:6a:f8:be:7c:18:83:7e:d9:33:b0:90:32:5f:d9:c8:ab:58:
         04:76:59:ab:ee:99:0d:c8:61:da:36:42:bb:d0:cc:64:6c:82:
         31:54:bb:08:5b:64:b9:f5:88:3c:d1:3b:e4:89:ed:bd:e5:be:
         26:07:ff:dd:0f:d4:7c:ad:3a:cc:ea:d0:88:fd:c2:57:a3:2a:
         30:b4:8f:6a:ea:bc:5e:e3:2a:3e:8c:1f:26:4a:97:40:8c:a0:
         73:5c:2c:0e
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIUbMKLAEqpeEaZoJkchBM5OHho/qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA5MTQyMTMwMTVaFw0yNjA5MTMyMTM1MTVaMDMxMTAvBgNV
BAMTKDMwRUMzNDFDQzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LUKxzbwierWjhKqBUxutSNOh
erF/1p3dGAP7knJ78BztbU3J0eUCVU4zkd8p5LJggfMh0VWVVoCkTibTOvEHPuK5
1n5CCALiSk435LLDKnt6XWRpendzIwnqVTX/TQR1NZSMuEWWyssalfupwtzEC8wK
kxzcufyuh2TiUmZD8MdUjPN1jy40+LIyoOVEkh3+2aJZhdrjyLykHHcuwK20EMel
XCLeE3ucjb/kd5tYAH+qxdCjRD7IC+07Rjsp8bwf7UHtRZhdjQUkrOc673QaxCmH
1TX38kZG839S6dsy6iUEUfQ0B1FN+6YbHeo+tCbiCju/8qN8NCpPcOLnA+69AgMB
AAGjggL1MIIC8TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQw7DQcxZJj9IeZ
9wqVSQgm545uETAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4NjgzNzQ4LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgv
MS8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5NTQ5MDgyNkU3OEU2RTExLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH
AQcBAf8EJDAiMCAEAgACMBowEAMGACoUdYEBAwYAKhR1gQIDBgQqFHWBEDANBgkq
hkiG9w0BAQsFAAOCAQEAGOxAH78CSLbR883sFNYdfn9zdPnfkHPawPyni8VpI656
rAoGAzXhUqRRS9gBQTxwhUGw5D4TqAhhmp8uTzrsN9ZbGOSheqNzHjSw5sc9Odyi
jmv+GnlpWCgjG+rYw3t77hduad8LNms5bNti0s75QGJ3s5z0YWYlGOQpeaqLp7VD
IFTNURrMOVC9yp02zH6beUsV6idrvWidlEtOpxgTgWwkbmr4vnwYg37ZM7CQMl/Z
yKtYBHZZq+6ZDchh2jZCu9DMZGyCMVS7CFtkufWIPNE75IntveW+Jgf/3Q/UfK06
zOrQiP3CV6MqMLSPauq8XuMqPowfJkqXQIygc1wsDg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:39 2025 by rpki-client