Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (raw, json)
Hash identifier: +kjjdHM+kH8b2S6MrqETRYvozXvj3Pj+Ppi6xPpES88=
Subject key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 44D20485104C12D057B95558CE1260245422CD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 17 Sep 2024 18:02:33 +0000
Certificate not after: Tue 16 Sep 2025 18:07:33 +0000
Subordinate resources: IP: 2a14:1ec1::/32
IP: 2a14:1ec7:c000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d2:04:85:10:4c:12:d0:57:b9:55:58:ce:12:60:24:54:22:cd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 17 18:02:33 2024 GMT
Not After : Sep 16 18:07:33 2025 GMT
Subject: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:46:cc:ab:ac:d8:e2:7a:cd:2d:15:da:58:
3c:17:21:3e:52:a0:34:73:5f:c6:a9:ca:c9:8a:14:
0b:24:e1:62:bb:3f:ae:14:63:e3:76:e5:4c:79:74:
d2:24:e7:ba:5c:19:e0:7f:78:fe:87:e7:67:98:12:
39:c3:e0:9c:da:60:60:0c:ca:e5:87:6c:02:5d:3c:
49:c1:c2:57:cc:3c:4e:b4:7a:a2:c9:4d:f4:4d:c1:
6c:21:a0:b4:d9:74:91:ed:f0:46:bf:b0:80:36:c9:
f6:62:d5:20:e8:28:2d:49:d3:f5:db:03:f0:9e:27:
c8:d4:bf:f9:b5:24:63:6b:d0:35:15:34:c1:f8:54:
bb:ef:de:f2:25:66:b1:de:fd:8e:9f:a4:89:18:fd:
47:99:1b:9f:69:4c:70:9e:cd:79:be:f4:21:72:7e:
38:bc:33:6b:f5:85:fe:bc:1d:89:5a:da:ef:20:4e:
d1:f5:44:74:ec:4c:d2:c8:10:5b:f7:0c:65:e1:0b:
ee:9b:68:13:8d:4d:38:74:5b:28:e6:fd:ee:f8:fb:
7e:01:5a:08:77:3e:4b:67:57:ef:89:bf:18:b0:76:
da:b0:3b:79:67:aa:02:ad:b6:e1:f1:2a:a7:9a:a1:
86:dc:80:77:e6:ff:b6:3c:f6:5a:3c:a6:9a:8c:e5:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec1::/32
2a14:1ec7:c000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:4c:49:1c:f0:52:27:21:ca:1f:d7:b9:a5:8d:e8:e6:5a:f6:
d5:49:c2:7b:34:aa:93:89:2c:51:54:e6:f2:69:08:11:73:04:
f9:6c:e0:ea:25:47:6e:79:d0:c7:a7:ba:a3:91:50:40:3f:a4:
3f:70:fb:5a:a4:0c:4b:fe:d5:08:16:d0:b6:dd:9f:6e:d4:3b:
4b:99:20:74:14:4f:83:15:cc:c7:22:2b:97:e9:e0:0b:71:31:
7e:c1:f0:80:1c:9f:78:e4:da:43:14:c0:03:62:5f:9e:0c:ab:
83:6f:18:c6:f8:51:bc:8d:08:8a:3e:d6:5a:67:ac:35:84:eb:
0a:93:b0:57:8e:f5:01:f7:63:3a:d7:a9:c5:23:72:6b:64:85:
00:16:8a:ea:e5:a2:40:e4:28:dd:db:1a:7e:d4:32:0c:7d:3a:
07:ed:35:f1:3d:c8:90:46:b3:97:cb:98:aa:f1:c0:a7:83:f3:
50:ee:80:ab:36:23:2c:5f:19:b1:90:a5:76:b7:22:a9:07:3a:
48:a8:68:01:ec:cc:5a:95:f8:0c:a4:37:6b:dc:41:29:4d:46:
20:9f:0a:83:74:60:e3:ec:43:43:e3:67:56:4c:63:45:f5:0e:
55:a5:f9:d2:5d:66:f3:f0:38:cd:d6:95:a7:02:d1:1d:a6:81:
21:f2:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:05:36 2024 by rpki-client on console-ams.rpki-client.org