Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
File: 847138B5401830B89B52403C777718BB40B2B6B5.cer (raw, json)
Hash identifier: DgtytgMNnKLBCSn4g+b4qndYuyo9Aq19WuLGJGlkeos=
Subject key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4EEEE26A02D931579D50DF5E5DCC07630EB10530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 24 Oct 2024 18:34:29 +0000
Certificate not after: Thu 23 Oct 2025 18:39:29 +0000
Subordinate resources: IP: 2a05:dfc5::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ee:e2:6a:02:d9:31:57:9d:50:df:5e:5d:cc:07:63:0e:b1:05:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Oct 24 18:34:29 2024 GMT
Not After : Oct 23 18:39:29 2025 GMT
Subject: CN=847138B5401830B89B52403C777718BB40B2B6B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:ae:a8:9c:1e:fc:1f:9e:1b:92:47:6c:fa:
d8:4a:4a:a2:9d:b6:83:8e:0e:86:81:bd:32:17:aa:
03:b4:1e:e4:4b:39:be:4f:fe:60:53:b7:69:62:46:
91:5c:16:4a:2b:37:94:5d:24:e1:a9:c2:59:a0:e7:
80:9c:9b:46:89:bd:e7:4f:3b:32:f1:f3:e7:6a:ee:
cb:b0:d9:49:a5:c8:60:9c:dc:08:de:d9:fd:5f:50:
17:fb:78:50:70:5b:bb:29:b4:f2:cf:cb:14:d9:3d:
3c:29:d5:85:74:70:22:bc:ca:cf:ff:3d:48:b4:0d:
50:64:c7:9e:a3:5f:22:64:48:82:3e:74:15:ac:f2:
c5:1e:4c:fc:78:eb:9c:da:45:b6:e5:47:03:34:02:
24:f7:51:4e:4f:4e:3b:bd:3b:91:e1:ea:7f:f8:ba:
97:33:53:50:f8:9b:e6:13:5e:64:2d:07:0c:69:59:
c2:36:6b:77:64:0a:36:4c:9b:c0:8f:05:af:d9:7c:
b4:86:63:33:33:85:cc:0f:8c:a5:5a:4c:11:c1:99:
78:fb:71:ac:ea:50:26:cb:3b:ea:a8:c2:77:3b:4d:
96:09:e1:2c:07:e3:86:ff:8e:f9:82:5d:2e:aa:91:
98:41:cc:ff:27:d1:df:5f:85:2f:48:0a:42:ca:bf:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5::/32
Signature Algorithm: sha256WithRSAEncryption
4a:9a:9d:ae:24:8b:c9:e2:fd:7a:ba:3b:89:9d:33:85:ad:20:
76:ca:5d:7c:60:8c:2c:13:75:e1:a1:f2:a9:2c:44:fc:2c:f7:
1a:df:05:4e:ba:20:07:9e:b3:3a:5d:52:ba:61:33:27:fe:e5:
e0:27:57:5b:b9:19:c2:09:7c:8e:0c:d5:f9:39:53:b9:95:a6:
7e:46:69:49:7e:1c:db:df:b6:c2:02:c3:a0:3a:80:5c:cc:2b:
69:26:47:cd:e6:46:2e:d8:43:a5:bb:f9:76:c1:0d:cf:68:9b:
10:c4:a1:a7:45:48:3a:00:41:d7:fe:a6:13:90:82:cd:c7:8b:
ea:dd:5b:02:8e:67:6d:53:98:93:6a:d2:e0:21:c0:83:b4:cd:
70:69:c0:eb:72:f3:f1:85:c1:2c:63:4d:4f:98:84:37:9d:74:
f6:a2:b2:2a:77:91:03:0a:78:f4:23:a2:dc:48:f8:c6:6c:c5:
28:d7:91:b3:49:b4:dc:e1:f1:e9:e5:6d:22:72:e3:4c:c1:54:
00:de:1d:ba:a5:22:f0:90:9a:b4:3c:2d:be:57:97:98:ae:a5:
6c:68:f7:b3:2b:ec:d3:5e:14:dc:6c:0d:1b:6d:00:c3:c8:cf:
bc:fe:88:98:3e:6f:1c:b9:ed:69:d3:7b:54:8a:45:98:0a:54:
10:6a:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org