Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
File: AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer (raw, json)
Hash identifier: xatF46EgoCuoQ6b73GnREyudGXnf2rIduDBudS6mjrU=
Subject key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Certificate issuer: /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial: 4434E624D1B1A442AED8ECA4AD88B8DB21A0ED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Apr 2024 20:49:40 +0000
Certificate not after: Wed 09 Apr 2025 20:54:40 +0000
Subordinate resources: IP: 2a07:2486:e00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:34:e6:24:d1:b1:a4:42:ae:d8:ec:a4:ad:88:b8:db:21:a0:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Validity
Not Before: Apr 10 20:49:40 2024 GMT
Not After : Apr 9 20:54:40 2025 GMT
Subject: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:71:e7:8d:63:10:9b:2d:0d:9e:04:95:5c:
0c:db:e5:91:7e:27:53:1e:6e:5e:a2:5e:03:d3:ac:
01:d2:df:9b:31:42:c3:51:89:43:9a:0a:5e:32:8c:
de:f1:2a:b7:ae:d9:9b:e6:a1:b7:78:97:02:7e:56:
80:00:b4:93:2e:3e:a9:83:a2:13:c3:15:73:09:d8:
e3:1b:b5:31:fd:dd:a0:27:44:f3:e1:ba:c3:cd:6f:
96:ed:00:e9:26:20:aa:16:ef:d4:45:49:c2:91:c6:
04:c3:a0:be:41:bb:05:c7:83:81:63:70:30:de:b8:
51:10:f8:f8:37:f4:ce:05:45:39:d8:cd:54:5d:28:
57:ef:fb:25:1c:e3:1a:22:57:99:3c:fa:17:36:03:
ac:35:3e:ad:6d:b0:49:57:56:d8:af:57:d3:63:d9:
39:48:23:3d:f1:2e:56:5b:f0:15:8e:2d:64:59:ef:
43:70:2b:53:03:3f:6b:2e:3d:4d:5c:de:51:51:da:
25:ce:17:0c:06:4c:89:4d:f0:a6:54:a9:e5:ac:4d:
b6:45:b4:0a:6a:0e:a0:7e:b3:7e:ac:9f:c0:ce:0e:
96:ae:0c:45:99:de:70:99:8e:26:05:28:db:05:38:
9b:f3:0a:12:48:6d:b2:dd:08:ec:43:7a:b3:07:c4:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Authority Key Identifier:
keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:e00::/40
Signature Algorithm: sha256WithRSAEncryption
6b:ba:8c:af:5c:57:fc:b1:24:83:6e:0f:c9:d0:4d:01:41:70:
d3:5b:f0:3a:a4:08:8b:16:9e:50:c3:2e:53:85:b7:b1:bd:88:
60:cc:81:4d:45:d0:dc:7d:58:f6:aa:82:82:b9:04:2a:e9:6f:
1e:ac:01:fe:4e:0c:f3:29:c5:58:c0:39:c1:50:22:35:c1:91:
23:d9:03:44:30:6f:e2:e1:a7:d5:27:cd:b4:66:53:19:fe:63:
53:84:32:59:28:ce:6a:91:12:16:6c:1b:e9:7c:4a:28:85:6b:
14:8d:f9:76:af:8f:de:0f:c9:19:30:c0:dc:91:38:64:44:95:
43:3c:62:00:b9:00:0f:dc:c7:74:e6:e1:4b:54:2e:ae:a0:3d:
c8:b8:79:a9:a5:2b:08:a9:4b:14:a8:b8:e8:05:4c:ad:c9:42:
dc:1f:28:4d:04:8b:b6:bd:99:8e:57:fb:1b:b9:bf:ec:5a:25:
e8:20:ef:3b:21:80:49:cb:4f:3f:f2:0e:d8:12:d9:7b:f2:79:
de:51:a7:78:43:74:2a:3b:8e:61:b1:1c:f7:8f:1d:41:ce:c5:
6e:71:ff:02:40:1a:e9:05:11:4e:26:ad:bd:e8:80:af:91:0a:
27:3e:69:20:3d:29:b0:87:31:c9:d4:d9:a1:bf:8e:10:34:df:
db:f7:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:03:51 2024 by rpki-client on console-ams.rpki-client.org