Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.cer
File:                     C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.cer (raw, json)
Hash identifier:          Vn2BumpCVJtQ71jAPHbhOdo/sf/KUm1HSsAvO1l3a8o=
Subject key identifier:   C7:4B:DD:25:58:EB:2C:D5:97:58:DC:BF:C8:30:A7:C7:0D:19:7F:8C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       6DFFDB6AFC6345D9CB7927DD1C525ABD3D2A9062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.mft
caRepository:             rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/
Notify URL:               https://rpki.net.baiyuexiao.cn/rrdp/notification.xml
Certificate not before:   Thu 23 Jul 2026 15:41:20 +0000
Certificate not after:    Thu 22 Jul 2027 15:46:20 +0000
Subordinate resources:    IP: 2a14:7580:f400::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ff:db:6a:fc:63:45:d9:cb:79:27:dd:1c:52:5a:bd:3d:2a:90:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Jul 23 15:41:20 2026 GMT
            Not After : Jul 22 15:46:20 2027 GMT
        Subject: CN=C74BDD2558EB2CD59758DCBFC830A7C70D197F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:9f:8b:80:5c:6b:51:f3:91:c1:4d:a4:b3:
                    85:22:65:9c:a7:b4:a4:14:e1:4d:48:2d:d9:b0:4c:
                    a3:94:d7:b2:0e:5b:91:86:b4:bd:cd:08:95:06:78:
                    98:81:39:ee:a2:8f:88:d3:a6:6d:70:35:62:d2:9c:
                    c4:4a:0a:76:f1:2e:7a:4d:e5:9f:6b:ee:cd:bb:eb:
                    ef:c5:97:85:ed:8d:79:2a:be:c9:39:d5:e9:3b:ce:
                    bb:66:b8:60:e9:5e:3a:15:0e:47:0b:31:37:4e:44:
                    02:14:a1:6a:eb:ef:31:64:9b:9a:05:e2:44:5b:cf:
                    19:36:0f:94:23:a3:5c:0e:3c:1b:73:f1:85:fa:85:
                    bd:a6:79:c4:07:bd:66:6a:01:df:a8:e7:01:e4:51:
                    bf:32:48:43:a9:51:48:82:0c:0f:67:a9:92:2c:e5:
                    9b:c2:e5:5c:1d:20:19:45:65:cd:f2:51:5d:30:89:
                    d3:27:d7:75:1e:fa:1d:84:de:44:d3:52:61:ba:d4:
                    d0:ad:95:ca:c9:2f:a8:77:68:c9:af:4d:8b:3f:cf:
                    56:4c:f5:f4:10:a4:5f:8f:4c:81:24:c3:f4:69:51:
                    e0:e5:0e:85:fa:dc:03:8c:d6:34:57:d6:16:94:3a:
                    cb:42:7e:f4:7c:a2:08:6e:da:5e:3e:84:5f:62:e4:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:4B:DD:25:58:EB:2C:D5:97:58:DC:BF:C8:30:A7:C7:0D:19:7F:8C
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/
                RPKI Manifest - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.mft
                RPKI Notify - URI:https://rpki.net.baiyuexiao.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:3d:63:4e:12:8f:a8:18:64:e7:c7:63:88:e7:6e:a1:db:
         07:e0:67:86:41:e9:f5:75:f3:8e:fa:55:15:2a:12:cc:8d:b5:
         9b:4d:20:2a:77:09:41:89:ea:1b:96:1e:49:ee:a2:55:c7:42:
         f3:33:0b:92:69:22:97:a2:27:f6:b1:ed:d3:5c:4e:88:ad:6d:
         ad:72:29:3d:50:a5:81:26:04:de:1c:24:d2:26:67:db:7e:dc:
         86:14:4f:23:06:84:5f:a1:63:33:49:8d:90:58:dd:9d:12:2a:
         d3:17:bb:4b:71:1d:03:19:d5:6e:bb:7b:c0:82:d3:52:7b:ac:
         ed:50:59:ef:43:2a:74:2a:e5:03:47:23:4f:5d:27:77:9c:c9:
         bf:a0:6c:1a:ac:4b:b4:b0:84:93:18:85:82:e2:58:c0:36:de:
         02:59:9c:ea:14:c9:b8:30:9c:74:4b:db:c1:13:e6:48:08:34:
         ed:e0:42:a8:dc:f8:7f:1c:5c:ef:bc:4f:ba:a3:b0:e9:40:6d:
         32:d5:2f:c6:33:01:b9:5b:24:58:d4:f0:db:17:a6:5f:d9:5d:
         3b:ff:81:f2:74:68:67:fe:a9:94:24:9d:9d:57:67:9d:4b:62:
         12:27:90:88:8e:f2:3f:02:96:9b:45:1a:ab:cf:c8:e4:54:93:
         ad:61:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:32 2026 by rpki-client