Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.cer (raw, json)
Hash identifier:          8HrXDalKlBKANfPTQKghfJGX8tgL2pWiZB2WgDyA5EE=
Subject key identifier:   44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       77E2D621978DD7C5853B996EFA76B0866C7551E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 14:45:25 +0000
Certificate not after:    Mon 10 May 2027 14:50:25 +0000
Subordinate resources:    IP: 2a11:f2c0:fe00::/40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e2:d6:21:97:8d:d7:c5:85:3b:99:6e:fa:76:b0:86:6c:75:51:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: May 11 14:45:25 2026 GMT
            Not After : May 10 14:50:25 2027 GMT
        Subject: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:38:0e:56:5a:81:99:08:d3:e1:98:07:9a:
                    dd:d1:cb:cf:ca:f5:55:b8:b4:5c:d4:2b:ed:31:5b:
                    01:de:80:ce:86:81:8b:79:8c:b0:d3:c4:f7:70:38:
                    49:a7:bc:cf:b6:9c:cf:fd:da:5d:38:fc:bb:82:07:
                    17:35:bd:4d:31:12:62:d7:e0:c3:3f:bc:90:58:e0:
                    3a:1d:af:02:f4:a9:68:0b:61:79:15:37:94:da:cd:
                    78:6c:91:86:33:ee:9a:ca:46:3d:d4:19:ea:b6:10:
                    c4:32:b6:da:24:76:ff:0e:df:b4:27:b5:de:3e:95:
                    01:a6:09:e6:99:08:f6:f8:0c:69:6f:d6:1d:c0:4c:
                    5b:7b:58:fd:ba:9b:64:5c:f6:10:5e:2c:1b:69:41:
                    9b:43:31:24:3b:ce:34:10:32:67:01:32:b9:dc:03:
                    5f:c9:40:39:71:c1:8d:66:80:a9:52:af:23:fc:b0:
                    07:1d:49:fb:4f:e2:14:be:bd:25:41:61:9c:16:3c:
                    1d:ea:dc:7b:23:65:01:c6:82:93:a5:a0:1d:cb:39:
                    e2:aa:53:c6:87:0f:97:f7:a9:01:b7:a9:df:2d:15:
                    cc:19:87:00:7f:62:1a:59:88:ad:29:f3:64:86:67:
                    af:1a:c3:26:05:4a:af:02:8f:8d:55:0a:38:a3:5e:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:2b:22:5f:40:10:8f:09:b8:28:3f:90:66:49:e2:f5:3f:
         36:77:76:b4:15:da:f2:27:b0:73:9a:13:30:90:7e:18:5a:83:
         2f:55:07:87:a0:e2:a5:31:6a:fd:8e:bb:70:25:cf:0f:82:17:
         cd:d3:56:55:aa:a2:6e:e6:11:d5:4c:8e:7f:1a:1d:a1:cb:c2:
         2d:3c:5f:0b:ee:86:b6:17:d7:43:e1:b2:17:6b:7e:e2:93:37:
         76:ed:7c:32:5d:40:8b:03:82:8a:c1:c7:81:44:7e:98:16:6c:
         0c:8f:aa:d2:38:06:0f:46:3a:ee:c0:91:f7:e0:1b:a4:76:a7:
         3b:12:73:d5:cf:be:0b:29:00:e7:d7:4e:05:c2:03:2a:31:5c:
         06:4c:39:95:8b:d8:31:f9:a0:76:d0:68:b2:c5:e4:22:86:74:
         39:e3:63:54:96:8f:cb:af:f5:80:56:66:6a:aa:97:2c:5a:b7:
         ee:01:be:52:a4:c6:d1:bb:9d:ad:15:33:dc:f6:a6:1e:25:36:
         e7:a6:64:83:31:58:f2:63:94:bb:6b:43:22:a1:e9:ef:87:13:
         6f:a9:f6:97:1d:0a:e3:3c:39:f8:04:c0:cb:e3:35:ac:b3:cf:
         cd:c0:40:9d:eb:93:51:3a:6d:f0:72:3f:d3:5d:c1:64:90:89:
         38:a2:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:08 2026 by rpki-client