Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer
File: 6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer (raw, json)
Hash identifier: hAkiVHtWITF6Xsv4UFVFW3M1ZjVYhs1lPb6RK0M/Yv8=
Subject key identifier: 6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 36611C3D22AE2924F0DD86BBECA1725649EB50CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 27 Feb 2025 04:39:17 +0000
Certificate not after: Thu 26 Feb 2026 04:44:17 +0000
Subordinate resources: IP: 2a06:a005:d2d::/48
IP: 2a06:a005:1507::/48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:61:1c:3d:22:ae:29:24:f0:dd:86:bb:ec:a1:72:56:49:eb:50:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 27 04:39:17 2025 GMT
Not After : Feb 26 04:44:17 2026 GMT
Subject: CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:fd:d0:25:db:8b:d2:6f:df:1d:0e:d0:73:
9a:a3:e4:78:de:f3:c0:6a:f5:e9:7a:6e:5d:77:0b:
23:3a:96:25:3c:a7:1a:f2:ab:b9:3e:73:fd:03:45:
4d:71:f9:d8:a3:ab:20:d1:ed:79:bb:d4:b9:24:ba:
f5:ec:14:7b:3f:2b:f3:c7:20:db:31:9d:be:dd:de:
b7:7b:6e:ff:21:5d:c2:34:72:8e:db:bd:b1:3f:c6:
ff:84:df:1c:fb:ff:33:c7:f2:2e:b8:ba:6a:52:bd:
08:ad:3e:02:50:9e:89:f1:30:dc:70:aa:2d:60:f3:
8c:81:5c:bb:3d:3e:f0:e7:80:10:b8:d0:e4:ff:db:
6c:9c:57:02:76:38:d3:c5:a6:bb:7d:7b:b3:67:cc:
3f:cb:1e:13:41:23:25:a9:46:b9:8a:2d:c5:5a:12:
26:c3:6b:f6:b5:a7:f6:b0:1f:ab:24:c4:8b:57:a8:
e2:01:f2:de:c2:3c:c2:a0:6a:78:d5:a2:5c:55:9a:
9a:d2:58:81:bd:52:58:91:99:39:14:be:d8:1a:d0:
68:11:5b:f3:29:57:b5:4b:e0:19:b3:0d:c1:f3:fb:
f0:eb:7b:25:8b:32:fd:8e:e9:b9:97:4a:42:77:a1:
e1:49:14:1c:01:61:39:bb:02:a4:66:5d:88:49:43:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2d::/48
2a06:a005:1507::/48
Signature Algorithm: sha256WithRSAEncryption
b9:4d:c7:fb:43:02:6b:25:4d:b9:0a:da:9d:39:91:4b:ce:e3:
a1:28:c2:78:02:d2:2c:15:b8:b7:ae:19:8e:ff:e8:49:7b:d6:
73:a1:87:73:47:cf:e4:21:7c:10:25:43:10:57:86:70:ef:b3:
a2:51:70:1d:eb:19:85:3b:38:8a:a6:9d:9a:48:c7:24:b9:95:
1b:c6:e5:35:e9:50:c8:24:35:d3:2a:e0:a5:ed:1a:30:5f:12:
bf:51:22:1d:bc:1a:68:80:e6:ce:e9:7f:29:b3:03:33:53:3b:
3c:05:c3:d6:9d:bd:1a:d8:61:b6:4a:ed:9f:d4:3d:c2:78:c2:
c3:cf:64:5a:05:06:d4:bf:51:2b:30:44:cf:44:44:29:15:6b:
c1:40:59:a2:8d:1f:69:3f:39:e6:7d:5e:61:df:dc:79:1b:ee:
d6:e3:88:01:b6:e9:9d:a7:42:17:2e:5b:5a:4b:b0:ed:6f:1a:
0f:9e:a7:ec:a1:b6:e2:68:4a:e1:72:9d:86:0f:dd:ea:5e:76:
7e:55:8c:23:99:45:25:44:7d:4c:78:24:cc:f6:09:d6:9a:10:
3e:61:6e:8d:e8:3c:d1:80:bd:83:97:7f:ef:c6:9f:e3:57:02:
64:f4:0f:4b:35:24:b6:38:d9:68:7a:84:03:8b:e3:96:5a:15:
fb:61:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:52 2025 by rpki-client