Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
File: BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer (raw, json)
Hash identifier: LRXhftaaKDG1H1A5/gI8iiL8wMuMlGtaSQK0mZd/tgo=
Subject key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 21F3544625A1CF98C111202099F09AF8EED79447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
caRepository: rsync://rpki.cc/repo/MythicalKitten/7/
Notify URL: https://rpki.cc/rrdp/notification.xml
Certificate not before: Sun 09 Mar 2025 12:12:46 +0000
Certificate not after: Sun 08 Mar 2026 12:17:46 +0000
Subordinate resources: IP: 2a06:a005:b70:: -- 2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
IP: 2a06:a005:bd0:: -- 2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
IP: 2a06:a005:d41::/48
IP: 2a06:a005:1040::/43
IP: 2a06:a005:1490:: -- 2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
IP: 2a06:a005:1600::/44
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f3:54:46:25:a1:cf:98:c1:11:20:20:99:f0:9a:f8:ee:d7:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 9 12:12:46 2025 GMT
Not After : Mar 8 12:17:46 2026 GMT
Subject: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:47:2c:0a:7a:dd:33:6c:f1:1a:d2:0d:81:
7f:27:c8:69:60:62:47:d8:61:5b:46:e4:8f:23:06:
2d:e5:c8:ce:fc:df:fa:94:91:60:e2:d7:35:a7:71:
41:8f:b0:59:22:68:d3:be:00:d8:dd:a5:ed:7c:ef:
88:df:36:42:68:43:3d:90:51:82:e3:9b:9b:fe:17:
1e:5a:23:25:e0:90:dc:c7:a2:51:f4:3a:dc:4a:fe:
a8:f5:60:67:81:8e:4e:f1:44:14:5e:62:6f:56:2e:
17:d2:d7:9b:66:c9:c8:46:e8:08:cc:e5:9e:30:8f:
a2:4d:48:14:69:69:73:c2:bc:a0:f6:28:11:b9:8f:
f2:38:fc:de:6a:62:c5:e3:11:9a:80:51:f9:80:71:
8b:59:06:f7:c9:c1:b1:13:0a:25:86:22:57:a0:bd:
e9:41:e3:67:06:1e:d4:53:c4:a9:c7:e1:5c:5c:c7:
71:eb:36:ea:98:3f:73:ca:39:d0:c2:f0:bf:a8:4e:
4a:76:9c:74:ea:61:16:9d:9d:10:f7:32:d0:d8:2a:
06:21:27:1b:b3:6b:0c:01:13:13:db:78:85:3f:84:
00:db:40:84:33:83:e1:a6:9a:78:57:b2:3a:4b:67:
61:5f:ce:db:d4:d5:a8:b8:b6:99:0d:f1:59:70:34:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/7/
RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
2a06:a005:d41::/48
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
Signature Algorithm: sha256WithRSAEncryption
52:0c:69:77:31:1d:1c:c7:11:4c:1e:76:51:a1:97:e5:e8:9a:
2f:23:34:bc:34:d4:0f:0e:37:ba:18:09:cd:84:92:6c:88:34:
01:31:d3:f0:82:c1:5d:56:6b:9b:1a:c9:7a:bd:15:50:de:19:
46:80:88:cb:bd:63:4b:96:97:5a:f4:85:d5:8c:99:d3:14:69:
9f:71:52:09:d3:6f:e7:34:b8:48:56:35:9e:03:86:93:39:fd:
66:2d:97:84:b2:44:ae:7f:ae:a3:44:08:dd:5c:14:78:69:85:
64:3f:cf:76:43:c9:06:3c:4d:1e:33:84:17:49:99:bf:7d:1a:
48:5e:99:af:b6:07:72:4a:48:98:e7:54:09:31:fe:a8:be:0d:
24:2c:3a:fb:80:62:48:c1:60:00:42:e0:71:64:ae:da:f0:58:
f4:18:0d:88:4b:b1:27:b5:f7:65:1e:32:66:49:68:f8:ca:b9:
61:c2:83:33:3e:31:ca:8f:2c:ee:5a:e8:70:84:e3:a7:4e:bf:
e6:b7:3c:d4:10:cd:aa:91:c2:cb:2b:d2:a8:4d:d9:7e:a7:44:
d9:f5:a9:76:1c:f2:da:de:57:42:d4:c9:ce:24:b7:99:98:a1:
cd:6a:23:2a:d0:6d:a0:0c:8f:8d:38:38:17:b4:7d:2d:2f:1f:
91:3c:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:24 2025 by rpki-client