Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer
File: FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer (raw, json)
Hash identifier: 75YdPhXz23j8gqbXo47uTGqc+yUaOwnxZfCUytkh14s=
Subject key identifier: FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 25329C63BD19621AF5B0DE9D3895F482577B501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 06 Feb 2024 19:52:42 +0000
Certificate not after: Tue 04 Feb 2025 19:57:42 +0000
Subordinate resources: IP: 2a0f:85c1:362::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:32:9c:63:bd:19:62:1a:f5:b0:de:9d:38:95:f4:82:57:7b:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 6 19:52:42 2024 GMT
Not After : Feb 4 19:57:42 2025 GMT
Subject: CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:56:42:d6:eb:ed:0b:92:20:b3:99:8c:e1:
c6:4c:90:91:88:9b:b2:7e:5f:7a:f8:03:4d:f0:d2:
cd:ff:de:72:06:4c:d4:dc:76:1d:56:68:df:3c:fa:
a8:7c:3c:0e:07:7d:0f:34:c8:cd:5d:1f:d6:00:81:
3d:b6:5a:4c:66:f4:97:ba:0d:ab:53:7a:e7:f4:a1:
3c:fb:6b:25:c8:8b:61:a5:63:47:30:01:0a:9b:34:
c8:b4:55:b3:8d:a9:75:bc:3e:91:eb:94:8b:48:c5:
c3:26:41:f4:3f:c1:68:7e:ca:e2:60:76:12:b9:a8:
2b:bb:dd:f2:c2:16:bf:03:02:52:74:a8:13:21:b5:
a3:3f:ee:95:81:6d:af:8e:f2:52:27:d6:92:66:ae:
8d:93:f5:b5:3d:46:73:ff:d3:3c:7f:74:46:37:34:
c6:db:57:09:34:e0:49:9e:38:01:78:03:cb:ce:ec:
f1:ac:9e:ff:f5:a9:1e:7c:e6:c3:19:5a:dd:f4:ce:
e4:c1:04:b4:c3:0a:36:c2:49:fd:9e:af:b8:5d:70:
ba:db:a4:1e:26:e0:c3:a6:32:a3:03:cc:fa:07:b1:
c2:14:2e:5b:fc:46:29:98:9b:4f:0f:83:18:28:14:
64:01:94:7c:3f:c9:3f:2f:33:e4:b7:7f:2b:89:2a:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:362::/48
Signature Algorithm: sha256WithRSAEncryption
95:52:00:cd:fe:3e:1f:5c:fa:48:57:89:d5:f5:8f:45:23:b0:
de:25:f8:d3:5f:41:d9:4e:3b:43:61:6a:17:2f:5f:f4:0f:48:
86:2d:fb:4c:a0:d8:e5:d3:ed:fa:bc:ab:d7:fc:3f:33:d9:4e:
f5:01:b9:7d:26:cf:6a:9c:65:8e:2f:a8:59:36:8e:b0:88:70:
4c:c1:da:94:d4:51:8a:87:d1:ea:eb:33:74:d5:cc:7c:33:fb:
4d:d7:b5:4a:4e:6d:d0:24:b9:11:c7:fd:e5:69:30:43:b6:bb:
07:46:71:85:2a:4e:31:20:8f:eb:6e:8c:74:b5:9f:41:c2:fb:
13:a8:6f:78:3b:19:9d:f7:1d:d0:14:6e:88:75:86:ae:bf:c8:
ce:f1:71:82:49:30:4b:2e:c7:f2:26:89:bb:8c:17:8f:7a:98:
1b:9f:7a:da:d9:1d:f7:51:d6:44:50:5e:05:67:d7:2c:a0:e9:
b8:fe:c2:37:ce:2a:25:94:e1:57:fd:bf:b9:04:e9:1a:90:b5:
47:86:db:b3:66:de:a1:96:7c:27:5d:71:d5:0e:c7:39:3b:ff:
f1:04:cd:0e:ac:dc:37:8b:73:cc:61:bd:15:22:74:91:ee:c2:
ec:0f:c1:5b:6d:11:3a:2b:57:49:a1:5c:db:08:84:70:50:67:
e7:25:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:20:45 2024 by rpki-client on console-fra.rpki-client.org