Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer
File: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer (raw, json)
Hash identifier: 3s75beipr5RxlBqpIsmqjDIp3YrHo/NtmRCMwWSTPO0=
Subject key identifier: F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 25C9D9457EDA58FF930D517777B209120F811CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 24 Oct 2024 18:34:22 +0000
Certificate not after: Thu 23 Oct 2025 18:39:22 +0000
Subordinate resources: IP: 2a05:dfc5::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c9:d9:45:7e:da:58:ff:93:0d:51:77:77:b2:09:12:0f:81:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Oct 24 18:34:22 2024 GMT
Not After : Oct 23 18:39:22 2025 GMT
Subject: CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:e5:c8:fd:1f:44:54:e7:3b:d6:d2:c1:fa:
0a:b7:78:42:90:f3:3a:0a:e2:63:a5:d3:97:a5:b9:
b9:03:cf:00:8a:d5:db:e5:f6:19:ea:80:05:fb:c7:
56:43:60:b8:ed:3c:f8:3f:9b:7a:f6:76:64:64:91:
c0:c5:ce:61:e2:88:48:fb:20:f3:62:72:8b:f0:ec:
4a:16:f0:09:b6:a5:6e:82:aa:d5:3a:21:b2:e2:0d:
04:69:8c:b2:c3:03:e0:6e:d4:70:e4:5b:bb:bf:cd:
86:fd:a6:e9:a6:4b:9c:13:2b:71:a3:55:ec:fc:f1:
ba:f2:e8:93:fc:4b:d1:9c:a3:ea:10:fb:b7:46:d5:
29:54:d1:85:d2:a7:72:ac:ce:d8:d4:3d:fb:df:12:
cd:dd:c9:2b:8c:fe:fa:97:c7:67:28:9d:75:c7:7d:
82:47:03:09:70:27:67:5a:5d:60:a4:48:8c:19:9e:
31:79:b4:a9:23:9b:21:e8:23:9e:ba:fa:f6:9b:28:
58:29:c1:be:49:42:45:a9:df:2b:d8:e5:e4:88:0d:
6e:31:b4:48:c5:2c:0c:75:79:95:e3:01:59:6f:cd:
06:4d:ef:ad:bf:61:b7:67:56:74:e4:a9:aa:46:2e:
7f:b4:d4:60:66:a9:eb:b6:ef:72:09:2c:58:b8:2a:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5::/32
Signature Algorithm: sha256WithRSAEncryption
64:56:ab:b6:2a:6c:b4:4e:c5:a2:a3:f3:ab:e8:69:78:e8:e3:
de:7e:3b:8a:94:14:69:7b:4f:89:fe:20:c1:68:8f:03:2c:85:
b1:9d:ae:58:80:e1:62:06:b8:9e:b7:35:06:cf:de:0e:c8:43:
9d:f5:bd:51:3b:7a:b3:fd:23:25:d5:0b:0f:d5:aa:0e:c4:cd:
10:bc:bb:a1:0b:70:0b:ff:80:88:6b:1c:44:98:29:52:73:79:
ba:9c:0f:63:f0:34:ea:03:67:57:ef:3c:b9:88:eb:82:6c:a0:
5e:a4:24:fb:4b:c0:22:26:5e:7d:25:ee:64:3d:cd:4f:ac:6a:
09:b3:83:aa:be:39:f0:ee:b3:e2:1f:68:a5:fd:7c:18:88:cd:
2d:c0:69:20:ff:e7:8d:1d:f2:72:80:f6:97:df:a0:95:06:1d:
56:8f:f1:b5:be:25:9b:e2:15:0d:d2:71:d3:2d:3f:ef:6a:76:
a1:ae:c3:6f:86:e4:62:99:0b:e6:8e:a8:be:ad:d8:dd:96:41:
bb:6c:81:5f:ba:84:69:a1:10:2d:55:69:7d:00:3e:c5:b8:12:
48:bd:b6:e6:5a:01:5e:91:81:d8:af:38:ac:1c:bb:b4:8b:d6:
d2:99:a8:d8:6f:3f:17:33:83:09:d7:8f:60:e6:58:0b:bc:98:
b2:61:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:34 2025 by rpki-client