Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/698CBB9E641A60FE66E1B58C92ACD281637ED767.cer
File: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (raw, json)
Hash identifier: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=
Subject key identifier: 69:8C:BB:9E:64:1A:60:FE:66:E1:B5:8C:92:AC:D2:81:63:7E:D7:67
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 1128A6F5EA2F5A8CC6F52C49996483363A5690C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 22 Jun 2024 02:47:12 +0000
Certificate not after: Sat 21 Jun 2025 02:52:12 +0000
Subordinate resources: AS: 203069
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:28:a6:f5:ea:2f:5a:8c:c6:f5:2c:49:99:64:83:36:3a:56:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Jun 22 02:47:12 2024 GMT
Not After : Jun 21 02:52:12 2025 GMT
Subject: CN=698CBB9E641A60FE66E1B58C92ACD281637ED767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:51:0e:a6:99:a4:0b:3b:e1:97:f2:0e:60:
19:48:31:a1:ec:c0:50:13:7a:86:6a:ec:91:7c:68:
f3:17:d1:5c:9c:dd:09:51:12:b6:e1:96:f7:d8:1b:
34:3d:b3:52:6f:7c:ea:27:e6:87:2e:6b:a8:60:4a:
df:2f:71:5c:f3:69:10:7c:4c:a6:2a:a9:38:7e:8d:
b7:e0:00:e5:68:6c:77:af:9b:16:9f:fe:f3:06:10:
15:10:75:f5:a8:52:7a:c0:b4:76:32:7b:22:f2:42:
c4:7e:34:92:58:f2:25:b3:55:39:24:38:ae:88:68:
9f:31:16:84:7b:00:92:8c:f6:d0:57:c8:bd:88:2a:
06:37:07:7a:32:a2:4d:df:38:f0:ef:5b:84:b6:dd:
fb:3d:46:24:bd:cc:d0:35:47:53:35:c7:06:66:d1:
c4:30:e0:38:fa:84:72:69:23:6a:b6:4f:5e:35:69:
18:51:65:79:7b:2b:ee:b8:a3:da:58:00:17:c0:00:
71:bd:a2:08:0a:94:f3:11:e5:22:28:91:40:6d:d3:
57:5b:ec:89:35:0e:76:a8:5b:9b:3d:ab:71:1f:da:
64:00:0a:fd:12:44:5a:12:0f:f1:55:a0:e0:e7:03:
5b:ff:a2:e7:5e:c6:2a:06:dc:d2:dc:bf:00:ff:2f:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
69:8C:BB:9E:64:1A:60:FE:66:E1:B5:8C:92:AC:D2:81:63:7E:D7:67
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203069
Signature Algorithm: sha256WithRSAEncryption
33:14:84:fb:84:ee:c5:76:91:46:ee:02:f0:0a:49:b4:50:a4:
a4:48:16:d9:4f:4c:b3:41:08:cb:19:05:d1:94:a1:75:d7:f6:
df:31:8a:4a:c9:1f:56:93:d9:be:96:6e:d0:1a:33:52:b3:1e:
84:4e:c2:9c:6c:f9:1b:a8:f1:0f:dd:83:e6:e3:80:0b:c8:02:
87:af:52:aa:d1:46:b0:74:09:a4:ae:c3:92:12:9b:2a:04:2d:
e4:77:33:5e:54:92:cb:40:d6:c4:4d:bf:94:45:31:d7:86:f7:
fb:d4:f5:b6:08:b7:4f:0e:65:21:2f:11:56:46:7c:72:7a:98:
64:f8:f1:ac:d2:77:57:70:c8:bb:4a:59:64:ad:46:4d:73:2d:
f3:37:57:cf:ee:97:5e:e6:fe:7f:09:1c:e4:fe:b1:9b:fe:7d:
a7:09:15:a5:76:af:fd:c0:97:96:e3:4c:68:6c:af:9c:89:f2:
b9:91:89:0b:fb:17:68:46:e4:36:08:06:83:16:bd:48:91:2b:
aa:e9:78:5c:c0:78:06:b0:90:47:ca:a8:76:b4:70:9d:64:37:
48:85:ce:d8:bc:64:09:c7:a4:e5:c9:09:97:f0:7a:23:9a:f3:
0a:f9:c4:a7:e3:26:d1:74:13:73:ce:ff:3a:e5:1c:92:71:a8:
f7:98:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org