Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/7B8B788E11038E988A479693F5D7C2EA216BCD76.cer
File: 7B8B788E11038E988A479693F5D7C2EA216BCD76.cer (raw, json)
Hash identifier: Bxg6gSI7GZcJkwSfpUTZjJOhwmiYHrCxmlYBg880CR4=
Subject key identifier: 7B:8B:78:8E:11:03:8E:98:8A:47:96:93:F5:D7:C2:EA:21:6B:CD:76
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 28DE1CDAA41F335F587300B0FFFA7AD0CDCF825C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/7B8B788E11038E988A479693F5D7C2EA216BCD76.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 17 May 2024 17:49:34 +0000
Certificate not after: Fri 16 May 2025 17:54:34 +0000
Subordinate resources: IP: 2a14:1ec7:c000::/36
IP: 2a14:1ec7:fe00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:de:1c:da:a4:1f:33:5f:58:73:00:b0:ff:fa:7a:d0:cd:cf:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: May 17 17:49:34 2024 GMT
Not After : May 16 17:54:34 2025 GMT
Subject: CN=7B8B788E11038E988A479693F5D7C2EA216BCD76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a4:bc:71:b0:05:6b:f8:49:e1:8d:14:13:ab:
53:07:f4:c3:59:b9:82:3e:76:ac:99:ef:3f:15:5f:
90:c3:fe:cd:66:72:f9:de:17:45:b4:46:8c:c8:67:
fb:15:70:28:d5:80:11:71:f3:af:c6:f0:80:ef:42:
75:6a:a4:96:41:d5:e4:01:91:97:ba:72:dc:c4:97:
0e:51:68:93:8c:1c:14:b0:40:31:a6:97:bf:ac:69:
3b:ac:eb:f6:8e:4b:c1:97:d9:d8:93:fd:84:fa:3e:
db:3c:72:4f:99:bf:5c:bc:2a:57:d6:e0:12:64:0a:
3a:66:05:2f:32:ea:f3:ef:b7:e3:14:02:46:4a:f5:
d0:2f:d3:e4:f8:3a:a5:45:8f:bb:f4:5f:ea:29:a1:
75:03:f4:c3:1d:53:4d:6d:ee:cf:0d:ca:68:ee:54:
22:40:f0:9a:93:1d:84:e9:07:7d:62:c0:d1:2b:76:
10:22:42:54:6f:fa:2e:8d:83:46:25:52:e5:75:16:
bb:a1:4e:2a:af:12:36:37:f5:00:85:eb:a2:11:fd:
dd:aa:09:83:0a:c7:e2:75:e8:5f:af:37:d5:4e:e5:
b1:fc:b1:46:fc:28:6c:e5:49:30:bc:a0:ee:bf:94:
e6:ac:c1:08:f8:b1:b6:ef:41:53:eb:35:65:cc:9c:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7B:8B:78:8E:11:03:8E:98:8A:47:96:93:F5:D7:C2:EA:21:6B:CD:76
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/7B8B788E11038E988A479693F5D7C2EA216BCD76.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:c000::/36
2a14:1ec7:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
80:c3:90:2f:9d:7b:29:20:be:35:6c:88:e3:41:f5:15:f0:ec:
cb:5c:e4:40:c7:ea:ce:59:3c:ac:a4:af:66:d3:d8:33:89:9b:
5b:a3:75:1f:73:b0:ad:14:be:17:7a:7b:87:31:55:d8:42:fb:
29:9f:5e:43:77:3d:4c:fe:6c:d0:da:19:0d:cf:9d:4f:b4:3d:
9b:f4:5a:65:07:d4:e9:af:05:ae:19:1f:74:93:d6:3b:66:02:
c2:d2:35:74:5e:55:b6:69:d8:57:5f:df:9f:b3:91:27:9e:cf:
e6:16:59:33:a7:c0:6a:dd:bb:af:7d:be:70:32:16:db:e2:ee:
b9:bf:f2:d6:76:c6:fe:89:c2:d9:8c:d3:ab:e6:14:b6:eb:dd:
6d:91:a6:29:1f:ca:0a:57:14:c1:af:33:b6:90:d9:07:fc:18:
11:47:49:96:86:2e:80:2b:fb:5a:fe:e9:43:dd:3f:44:81:b5:
63:50:7b:1a:fe:ea:b8:ac:5a:d8:24:16:ff:e4:e6:28:8e:11:
2c:11:6a:4a:3b:0e:0a:3b:07:cb:b5:04:bc:5d:02:92:6f:ed:
de:2f:4b:5a:05:5b:f0:2d:63:36:6a:97:6d:51:e7:cf:9a:7c:
fe:5f:6d:ce:71:a0:fc:95:03:8b:95:ab:f3:88:d8:b8:d6:41:
fc:09:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 04:03:41 2024 by rpki-client on console-ams.rpki-client.org