Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer (raw, json)
Hash identifier: sCw7xRIbdKNGsMbRbR3JtltTwuq5ekvfEverXm+UHrU=
Subject key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 51F54F3576E71BF74E46AAF0ECEE9779E2F10ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 19:03:26 +0000
Certificate not after: Tue 09 Sep 2025 19:08:26 +0000
Subordinate resources: IP: 94.24.108.0/24
IP: 2a06:a003::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f5:4f:35:76:e7:1b:f7:4e:46:aa:f0:ec:ee:97:79:e2:f1:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 10 19:03:26 2024 GMT
Not After : Sep 9 19:08:26 2025 GMT
Subject: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:7c:79:04:27:fd:97:84:52:aa:a0:d6:da:
02:44:25:57:83:07:2a:7c:a0:ef:eb:d3:87:d3:63:
bb:04:37:14:9f:19:31:31:73:55:13:39:17:67:30:
cc:47:42:e0:df:f7:13:58:4f:44:4c:b2:a1:62:c3:
e4:8b:bc:a1:95:24:52:46:78:33:f9:c6:22:9a:d3:
4c:64:3e:5b:ee:42:fd:5b:5d:2e:40:fc:a5:c1:18:
cd:09:ae:af:f8:51:c7:6a:96:27:85:08:a0:82:49:
25:2e:17:2c:df:8c:3d:0a:b4:fe:eb:6c:d9:0c:5e:
e9:5d:2a:87:7d:3b:cc:27:b7:e3:88:8e:87:05:77:
74:af:18:de:69:d8:e4:bc:ea:50:ff:87:77:12:c4:
61:78:c4:66:fa:1b:68:ae:e3:b6:00:f1:7f:5c:5c:
9d:7d:f5:8c:fc:aa:cf:58:77:3c:28:66:86:61:5a:
65:09:af:92:b7:3e:89:a5:fd:8a:38:5e:03:42:1d:
2c:24:71:bd:6a:e0:0a:fa:e7:a2:d1:9f:d8:30:fe:
de:35:20:e7:4c:ce:63:e4:16:1f:e9:06:91:a4:9b:
74:46:b0:a0:51:a0:5e:2f:47:a0:0f:60:1e:4c:39:
78:68:2d:70:48:95:9f:34:d8:d3:35:2d:fc:a6:a6:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.108.0/24
IPv6:
2a06:a003::/32
Signature Algorithm: sha256WithRSAEncryption
7f:14:78:51:8e:f5:b6:c7:e5:f8:0a:1f:3c:bc:c2:47:b8:dc:
38:be:52:e2:de:97:48:52:3f:10:df:e9:35:94:83:d4:7e:dd:
13:0e:7a:31:17:9d:94:00:75:66:b9:82:51:94:eb:32:8d:d4:
2d:22:2e:d3:f7:82:ab:6b:17:e7:5c:cc:98:e3:a9:2e:1b:ac:
05:04:ae:34:19:37:d9:8a:89:77:8c:70:06:b1:9a:3e:36:32:
50:1e:24:10:2e:c4:13:32:9b:79:61:cb:58:37:b1:fb:e8:97:
06:c4:e4:a5:f6:f3:7b:e6:7f:8b:9d:9d:d1:39:4a:c8:41:36:
08:4b:40:66:68:d7:57:6e:e8:9b:09:07:45:36:b4:69:54:1b:
3e:f3:32:28:3c:47:79:ad:be:79:52:d9:40:bc:71:6a:ba:21:
36:04:ec:ee:65:1e:fc:7f:af:20:03:df:85:31:90:e2:c1:55:
92:79:92:04:73:a5:88:5a:03:44:38:90:5b:f3:58:d8:88:d9:
8a:d5:38:45:db:31:d3:41:2d:ec:3b:5d:df:75:56:49:4a:0a:
c2:39:b2:6e:7c:80:00:6d:bf:7e:f2:70:2d:f3:2f:e1:97:9b:
fa:5e:bf:1c:04:b7:17:47:16:a1:bb:76:b9:5d:21:51:58:2d:
1b:b7:2e:22
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUUfVPNXbnG/dORqrw7O6XeeLxCs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDA5MTAxOTAzMjZaFw0yNTA5MDkxOTA4MjZaMDMxMTAvBgNV
BAMTKENFMUI0RjQzNjdCNkE1NUYzNENBOTgxQTBENkNBNzU4M0Y5NTUxQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtnx5BCf9l4RSqqDW2gJEJVeD
Byp8oO/r04fTY7sENxSfGTExc1UTORdnMMxHQuDf9xNYT0RMsqFiw+SLvKGVJFJG
eDP5xiKa00xkPlvuQv1bXS5A/KXBGM0Jrq/4UcdqlieFCKCCSSUuFyzfjD0KtP7r
bNkMXuldKod9O8wnt+OIjocFd3SvGN5p2OS86lD/h3cSxGF4xGb6G2iu47YA8X9c
XJ199Yz8qs9YdzwoZoZhWmUJr5K3Poml/Yo4XgNCHSwkcb1q4Ar656LRn9gw/t41
IOdMzmPkFh/pBpGkm3RGsKBRoF4vR6APYB5MOXhoLXBIlZ802NM1LfympmJHAgMB
AAGjggLgMIIC3DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOG09DZ7alXzTK
mBoNbKdYP5VRzTAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2Nh
Ni0zNGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJhY2Ez
Y2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNlNy8xL0NFMUI0RjQzNjdCNkE1
NUYzNENBOTgxQTBENkNBNzU4M0Y5NTUxQ0QubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEAF4YbDANBAIAAjAHAwUAKgagAzANBgkqhkiG9w0BAQsFAAOCAQEAfxR4UY71
tsfl+AofPLzCR7jcOL5S4t6XSFI/EN/pNZSD1H7dEw56MRedlAB1ZrmCUZTrMo3U
LSIu0/eCq2sX51zMmOOpLhusBQSuNBk32YqJd4xwBrGaPjYyUB4kEC7EEzKbeWHL
WDex++iXBsTkpfbze+Z/i52d0TlKyEE2CEtAZmjXV27omwkHRTa0aVQbPvMyKDxH
ea2+eVLZQLxxarohNgTs7mUe/H+vIAPfhTGQ4sFVknmSBHOliFoDRDiQW/NY2IjZ
itU4Rdsx00Et7Dtd33VWSUoKwjmybnyAAG2/fvJwLfMv4Zeb+l6/HAS3F0cWobt2
uV0hUVgtG7cuIg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org