Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
File:                     AEF766F103B2EF99DF8C71978A7FE519D730B155.cer (raw, json)
Hash identifier:          zySLMFtNhPngz9aGt6Lf2qZ8QPuJ7vu2bpsznifJJnY=
Subject key identifier:   AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       3B38574D11CCFC8DAF1D83D31EFFFCB7A77A4446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Fri 20 Jun 2025 11:31:29 +0000
Certificate not after:    Fri 19 Jun 2026 11:36:29 +0000
Subordinate resources:    IP: 2.56.254.0/24
                          IP: 2.59.148.0/23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:38:57:4d:11:cc:fc:8d:af:1d:83:d3:1e:ff:fc:b7:a7:7a:44:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jun 20 11:31:29 2025 GMT
            Not After : Jun 19 11:36:29 2026 GMT
        Subject: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:33:5b:a9:b8:66:f7:91:68:b6:40:40:a0:
                    6a:b1:84:0d:bd:f7:16:e5:76:87:2e:73:ea:f0:53:
                    90:be:0f:a4:7c:8b:22:15:b9:18:86:ec:26:2d:0c:
                    17:2f:77:3a:37:fd:09:60:43:97:c6:f4:18:12:66:
                    52:a1:9e:aa:3e:09:2a:22:c4:13:94:1c:97:3e:00:
                    32:1e:cd:38:f3:8f:3f:01:cf:81:b2:46:0b:cf:28:
                    2a:45:ee:32:de:3f:aa:3e:36:2a:43:bc:d0:d9:f8:
                    d2:b4:75:22:45:29:25:01:d5:83:86:af:6a:08:e4:
                    b4:eb:90:81:73:9c:b7:07:f4:bf:2b:d4:f7:17:61:
                    ae:b7:dc:f4:7d:05:3f:6f:0d:f0:9f:bd:93:30:47:
                    c7:92:c7:10:c4:13:6e:07:bd:d0:6b:d4:92:cd:a2:
                    61:17:83:64:74:a1:5a:16:4b:2f:21:da:28:1a:ae:
                    b5:08:de:a4:8d:61:f6:69:7f:14:ba:81:79:25:12:
                    20:b8:fb:2a:6a:19:34:96:8d:9a:4a:4e:18:55:9a:
                    6a:a7:91:e9:9b:ea:db:e1:81:3f:09:86:81:fe:42:
                    ab:1b:f8:ad:d6:d2:b1:ec:ff:db:94:63:01:23:fe:
                    84:70:4a:d0:bf:1e:bb:54:84:f0:fc:b6:b6:ff:2b:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.254.0/24
                  2.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:7f:91:be:d1:a1:a5:ed:f7:25:d9:78:84:7b:c1:1c:73:
         3b:96:05:24:ca:43:d5:15:95:0c:cd:6e:f1:19:e4:d3:cc:26:
         32:48:23:1e:67:71:a5:04:d4:20:86:a5:80:38:b7:62:70:6a:
         01:4d:bb:8a:69:82:fe:45:8c:37:47:c7:6e:a7:d5:0c:2f:dc:
         73:47:5d:24:a6:59:e2:95:78:34:7f:c6:2f:8d:37:6a:fe:b9:
         2b:96:d6:f7:7e:65:bd:20:4e:f9:7f:0b:84:46:2b:0c:de:30:
         58:5f:ea:fb:e0:d6:97:98:c9:79:e3:4d:20:78:d4:83:fe:ec:
         3f:17:f3:bb:2e:9e:04:db:54:ef:28:24:80:7d:10:ab:2f:3a:
         9a:52:0b:22:e9:36:20:a2:0e:df:e6:18:31:5b:f1:68:db:64:
         12:6f:22:82:f4:93:04:c6:aa:cb:6c:d2:dd:35:00:08:56:97:
         fc:55:83:26:bf:95:33:97:58:71:10:2c:76:2f:3f:ba:b9:d1:
         ee:bd:57:ce:49:6c:40:f2:ec:dd:1d:25:60:c5:b2:2a:f4:07:
         30:d6:42:a5:e3:23:c2:35:4b:27:71:ce:22:26:28:c7:06:60:
         7c:66:bf:95:d3:6f:5e:0f:a8:cc:52:21:38:e4:a0:24:39:7f:
         d4:e0:f6:23
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUOzhXTRHM/I2vHYPTHv/8t6d6REYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjAxMTMxMjlaFw0yNjA2MTkxMTM2MjlaMDMxMTAvBgNV
BAMTKEFFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BjNbqbhm95FotkBAoGqxhA29
9xbldocuc+rwU5C+D6R8iyIVuRiG7CYtDBcvdzo3/QlgQ5fG9BgSZlKhnqo+CSoi
xBOUHJc+ADIezTjzjz8Bz4GyRgvPKCpF7jLeP6o+NipDvNDZ+NK0dSJFKSUB1YOG
r2oI5LTrkIFznLcH9L8r1PcXYa633PR9BT9vDfCfvZMwR8eSxxDEE24HvdBr1JLN
omEXg2R0oVoWSy8h2igarrUI3qSNYfZpfxS6gXklEiC4+ypqGTSWjZpKThhVmmqn
kemb6tvhgT8JhoH+Qqsb+K3W0rHs/9uUYwEj/oRwStC/HrtUhPD8trb/K3S5AgMB
AAGjggLUMIIC0DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu92bxA7Lvmd+M
cZeKf+UZ1zCxVTAfBgNVHSMEGDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRh
YzItYWJjNC1hMzMyNTkwYjk5YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0
QTFGNjcwMzRFQTc3NzlDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZw
eVY4ckZOOHgzU1NoOW5BMDZuZDV3LmNlcjCCASwGCCsGAQUFBwELBIIBHjCCARow
VgYIKwYBBQUHMAWGSnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzMw
MzI3YjllLTIyN2EtNGViZC04MjViLTNiOTgwOTVkYzkyNy0wLzAvMIGCBggrBgEF
BQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUt
MjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZGMTAzQjJFRjk5
REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6
Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAME
AAI4/gMEAQI7lDANBgkqhkiG9w0BAQsFAAOCAQEAnU1/kb7RoaXt9yXZeIR7wRxz
O5YFJMpD1RWVDM1u8Rnk08wmMkgjHmdxpQTUIIalgDi3YnBqAU27immC/kWMN0fH
bqfVDC/cc0ddJKZZ4pV4NH/GL403av65K5bW935lvSBO+X8LhEYrDN4wWF/q++DW
l5jJeeNNIHjUg/7sPxfzuy6eBNtU7ygkgH0Qqy86mlILIuk2IKIO3+YYMVvxaNtk
Em8igvSTBMaqy2zS3TUACFaX/FWDJr+VM5dYcRAsdi8/urnR7r1XzklsQPLs3R0l
YMWyKvQHMNZCpeMjwjVLJ3HOIiYoxwZgfGa/ldNvXg+ozFIhOOSgJDl/1OD2Iw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:32:35 2025 by rpki-client