Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
File:                     69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (raw, json)
Hash identifier:          pGE698/lwy35O1BVHJwKnSpWl+FnzrVeAX2opZS61KY=
Subject key identifier:   69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       2ED9BCAC8833EAC99FD0BF03C7410D48D2463678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 14:35:04 +0000
Certificate not after:    Mon 10 May 2027 14:40:04 +0000
Subordinate resources:    IP: 2a11:f2c0:ffcf::/48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d9:bc:ac:88:33:ea:c9:9f:d0:bf:03:c7:41:0d:48:d2:46:36:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: May 11 14:35:04 2026 GMT
            Not After : May 10 14:40:04 2027 GMT
        Subject: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:a6:86:b6:d4:2d:c0:4e:03:e3:2d:36:73:
                    f9:a8:75:2f:eb:c3:1d:27:73:88:54:22:ad:3c:09:
                    ba:46:c4:df:bc:4a:0d:3c:9f:72:72:60:24:c5:d9:
                    a4:af:7d:60:d0:85:91:97:17:45:a5:19:c3:4c:2b:
                    ff:17:34:2a:3b:81:8f:fc:7d:ac:0b:b6:49:d3:75:
                    b0:32:38:b1:ff:65:cc:68:6d:71:d0:a0:c3:1d:fc:
                    f5:3e:e9:2c:14:f8:42:73:4e:3b:25:7f:59:2d:bd:
                    90:1b:e4:85:31:c5:c0:82:84:6e:b0:eb:6e:16:45:
                    e5:ca:b0:08:e4:7e:5b:43:f1:58:b4:32:6f:6e:72:
                    7e:c4:3d:68:f1:60:7e:17:29:0c:03:ba:ca:a5:06:
                    b6:0f:3a:75:52:02:8c:1a:47:3b:d6:27:1a:c6:ce:
                    51:dc:91:f2:90:d2:96:0c:de:63:55:9e:0f:2a:7e:
                    d8:a1:02:96:56:af:f6:b8:a3:06:87:cb:53:c0:d3:
                    eb:44:d9:d5:d3:8d:cb:9e:db:76:65:56:78:4f:2d:
                    a0:c4:1a:91:92:2e:5f:a7:2f:35:59:16:55:6b:53:
                    56:2d:2b:fc:f2:5e:fe:fb:74:d3:8c:3f:00:a4:de:
                    34:01:c2:1f:92:d4:f1:bb:a3:00:96:c6:0c:e0:cc:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffcf::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:77:a6:00:84:b3:bf:c5:f8:bc:91:b9:d4:95:bf:4b:50:
         99:ec:33:7d:01:82:27:6e:a7:62:96:a0:8a:13:1c:ec:66:05:
         1e:46:09:09:45:50:2c:88:b9:10:b8:81:12:53:a8:bd:da:ed:
         df:58:21:b9:07:c3:42:a6:f2:90:14:0b:42:c4:20:e3:32:7b:
         31:1b:65:d0:81:d6:6f:d7:7b:47:eb:06:ed:d2:d7:2d:1a:a5:
         25:50:3c:9d:01:08:29:1f:db:ad:d3:9a:2c:24:d9:11:88:23:
         8f:cd:dc:d2:d1:52:ab:9f:e8:1f:d1:c1:d8:8d:e4:2b:72:7f:
         90:a8:57:3e:67:56:9a:ae:72:43:c4:1c:f1:66:c2:1d:ac:6b:
         31:f0:fe:e3:62:27:0f:ad:06:25:c0:73:82:f1:91:78:ad:82:
         a6:02:42:44:e6:5f:92:2c:da:0c:f8:7f:aa:3b:3d:97:20:e7:
         30:b6:0d:b5:f1:73:3a:fc:0d:90:93:e0:b1:ab:96:b2:b1:2c:
         84:c8:6c:be:95:31:d5:4d:d1:68:4f:a6:a9:a4:cd:04:b5:83:
         02:ea:13:c1:12:1b:e7:09:d3:3d:4b:bb:26:ab:8f:f0:2b:2f:
         89:72:cc:8d:6d:61:ad:19:c2:d2:50:d9:10:a1:2c:9e:97:d3:
         ef:61:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:09 2026 by rpki-client