Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer
File: EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer (raw, json)
Hash identifier: qqQ2JzcSYpKxDn2KQV1rf9F3ZUPTUzHLt545dQP65+Y=
Subject key identifier: EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 67A19C4957CE2B9AA57ECD4B1D29B2B79C698309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 09 Dec 2023 18:43:23 +0000
Certificate not after: Sat 07 Dec 2024 18:48:23 +0000
Subordinate resources: IP: 2a0f:85c1:331::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a1:9c:49:57:ce:2b:9a:a5:7e:cd:4b:1d:29:b2:b7:9c:69:83:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Dec 9 18:43:23 2023 GMT
Not After : Dec 7 18:48:23 2024 GMT
Subject: CN=EF9F2D6EC712DCE081DA9CED1F956372EA648756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:97:d9:b4:c0:7c:cd:57:27:19:95:20:e4:
d7:0a:ef:20:9d:25:93:48:e8:ed:9b:38:97:5b:cc:
88:df:61:de:d6:09:1c:d4:f2:36:5e:cb:8d:5d:ff:
63:ef:48:6b:4a:c2:a7:b9:0e:d6:f1:b5:01:df:6c:
97:df:c2:20:4c:7a:dd:69:c7:e0:47:16:0c:d4:1c:
ae:f1:34:24:fc:3e:46:ab:38:a4:94:02:74:01:e3:
d3:35:7e:0a:80:e7:42:a7:fd:e7:ff:59:d0:c9:26:
85:a5:70:51:6e:af:43:04:b0:8f:cd:5a:25:d9:4d:
a5:54:a1:87:56:13:de:7c:ab:9a:86:ac:ce:5b:3d:
c1:9f:52:83:82:ed:62:50:e1:90:05:9b:24:fd:cf:
91:dd:c8:9d:0c:03:80:b4:23:40:20:dd:12:ea:a2:
50:1c:13:e4:50:47:b2:df:a3:34:a8:ba:5c:2b:1f:
fa:fa:29:e8:bd:2b:56:35:b6:e0:9b:2a:3e:c4:db:
20:16:99:53:db:5e:68:de:af:24:ba:88:b1:6e:ec:
e0:d6:46:2b:57:c2:0c:7e:9d:77:ca:6f:88:d4:d6:
38:93:af:04:f1:d3:ab:df:b3:03:bb:b4:a1:3f:a3:
71:76:b0:19:79:0e:9e:07:46:37:dc:6f:b8:44:f8:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:331::/48
Signature Algorithm: sha256WithRSAEncryption
2f:6c:a8:82:a1:d0:8f:7c:6a:3a:91:e6:e8:47:a8:fc:24:ec:
79:b5:3f:ae:1a:73:69:e9:9e:85:9f:c0:cc:80:11:19:3b:28:
54:48:97:d3:c0:b5:cc:75:76:4e:c1:9d:17:cc:84:43:e4:7c:
bc:3f:76:94:8c:85:c5:1f:eb:73:14:95:30:4e:e3:62:20:13:
5d:72:d0:97:77:3e:12:fa:25:8d:cb:ee:0b:88:1b:cc:9e:1e:
b0:4a:0e:2c:5f:b5:4c:c3:63:20:fb:eb:18:48:84:b9:fa:67:
87:f4:d7:a3:fd:92:8b:e0:cf:b5:da:7d:29:8f:fd:eb:63:3f:
80:bd:ba:43:a6:cd:4a:53:57:53:6d:c8:14:cc:79:85:fb:56:
36:a4:6e:39:9d:59:c2:de:23:a7:80:c2:21:b4:95:da:0a:d4:
37:3d:4d:f2:32:66:fd:72:fc:76:45:3c:c8:27:1f:a9:f4:ec:
95:52:06:d5:4e:96:34:23:5c:28:27:1c:0d:60:6b:43:05:03:
e3:14:75:54:27:e5:25:14:db:ae:84:03:85:6c:40:17:59:c3:
4d:18:8d:6c:cc:19:25:28:5a:97:84:3b:dc:70:39:80:33:af:
83:a8:19:88:61:11:3e:c2:7a:28:36:6a:ea:40:84:de:08:ee:
b5:35:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 08:04:23 2024 by rpki-client on console-ams.rpki-client.org