Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer
File: D9227930A3E025CD3EE91059F57EFC7573645142.cer (raw, json)
Hash identifier: 7rpltyqrNT1jbiDEt+trdPQkQFhN/pUjnXeMfwPskCs=
Subject key identifier: D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5A56E3FF8A0E03AF4EE840D782AF3071F472A3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 24 Jan 2025 01:27:03 +0000
Certificate not after: Fri 23 Jan 2026 01:32:03 +0000
Subordinate resources: IP: 2a0b:9e40::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:56:e3:ff:8a:0e:03:af:4e:e8:40:d7:82:af:30:71:f4:72:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 24 01:27:03 2025 GMT
Not After : Jan 23 01:32:03 2026 GMT
Subject: CN=D9227930A3E025CD3EE91059F57EFC7573645142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:2f:ae:07:2e:65:8a:be:9a:a7:86:f3:69:
0c:a9:0a:21:ae:e9:cf:6b:b2:b8:2c:0c:5e:05:85:
28:00:a5:20:a3:03:d5:71:2d:64:b9:8f:b6:fa:e3:
c3:9f:7f:3e:bc:d4:c9:3e:b7:ee:f5:98:d4:66:0b:
60:39:c8:2d:c7:bd:0e:cb:ac:88:3a:33:59:3d:70:
52:a3:4a:a1:a7:3d:5d:ea:84:dc:00:e5:ec:d9:e2:
f7:b6:0a:ed:70:a7:8f:d7:74:27:78:7d:80:11:7a:
0c:7b:25:40:31:3d:b3:39:27:dc:81:90:cb:95:16:
69:8b:dd:3f:8e:4d:0f:3c:fe:c9:64:f2:80:ff:32:
4d:c2:2f:98:f0:1d:2d:3d:e6:25:2d:41:4e:6c:d8:
0c:13:78:91:81:36:62:1d:8d:8f:93:fc:da:46:fd:
a9:af:31:3c:70:5a:62:78:29:a1:4f:b6:60:6d:8d:
55:0c:b9:e0:93:36:8b:26:51:9e:28:61:24:2c:d6:
67:d1:a2:f1:71:48:57:58:0a:b2:19:c7:86:98:92:
ae:7d:17:06:50:29:69:b7:94:e8:44:44:90:d2:ec:
37:55:b9:3d:b4:47:d1:51:49:10:40:81:af:61:5f:
41:58:62:f2:34:4d:fd:eb:93:c9:fe:49:1e:c2:7a:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
10:69:95:ba:77:ba:e7:cf:9e:64:87:b6:0b:3b:57:db:78:ca:
b0:3f:e2:64:11:9f:a3:79:41:17:ea:1d:79:e8:2d:fd:1a:f0:
c6:24:06:9b:c2:be:75:17:27:77:94:03:a1:52:86:33:28:b7:
e9:d2:f7:3c:a1:e1:95:f0:c9:13:2c:a6:5e:66:e2:62:5b:85:
75:8f:18:da:25:ec:88:d1:41:ee:7a:67:19:d4:f1:c4:5e:6a:
20:26:60:1e:dc:22:26:f9:32:11:10:77:0a:af:0a:f6:c4:df:
62:1a:c6:6c:d8:07:41:52:cb:e9:b2:b5:79:61:e2:0a:d1:3e:
69:6f:79:46:0b:17:82:2c:3c:13:18:6f:19:13:aa:64:5f:3c:
65:b2:bc:c9:47:42:c3:2f:26:67:2a:e0:b2:2c:89:4c:ea:67:
3e:af:ea:36:8b:d8:45:7a:26:fc:13:dd:35:93:44:a6:90:18:
ec:f4:b6:6a:7e:f3:98:cc:0d:1e:4a:a6:e3:7d:0e:9e:95:f0:
d2:d0:0b:29:b6:06:99:4a:e8:f0:81:c7:2c:19:c9:fe:f3:30:
b1:f9:80:4e:03:86:bd:4a:e1:3c:55:3f:50:72:eb:d0:8e:ad:
94:73:fd:9b:30:1e:04:29:5b:4f:6b:19:be:83:4d:f6:b7:90:
00:fd:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:59:14 2025 by rpki-client