Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.cer (raw, json)
Hash identifier: 653TklyA/gYCrzd6etOKmjt01nqqEsGTaILx24enrRA=
Subject key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 39F2538225E63EEF7FECA8D6E7C8AC1F6C47BEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 24 Aug 2024 02:07:00 +0000
Certificate not after: Sat 23 Aug 2025 02:12:00 +0000
Subordinate resources: IP: 2a0f:85c1:351::/48
IP: 2a0f:85c1:357::/48
IP: 2a0f:85c1:363::/48
IP: 2a0f:85c1:600::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f2:53:82:25:e6:3e:ef:7f:ec:a8:d6:e7:c8:ac:1f:6c:47:be:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 24 02:07:00 2024 GMT
Not After : Aug 23 02:12:00 2025 GMT
Subject: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:91:87:ed:aa:54:fd:56:d0:e6:22:93:12:
0a:0c:3e:91:81:80:a3:0d:4a:75:d5:54:62:9d:66:
e2:7e:67:18:92:bc:dc:ea:7e:da:1d:5f:6d:32:b4:
95:ce:ae:9a:bf:89:c6:57:a3:df:7f:5b:92:e3:72:
29:c2:77:8c:78:c2:79:9e:0b:b8:18:d6:de:32:cf:
1f:d8:37:d2:87:50:2c:db:e3:b5:75:7f:30:33:44:
03:48:45:99:14:11:f0:b8:53:7e:f5:92:16:32:cb:
1f:34:a5:8c:2f:3b:a3:5e:8e:f6:12:d7:15:23:a5:
50:d7:7f:26:08:80:09:4c:55:e3:e0:04:77:9e:25:
a6:8b:58:90:e5:39:ef:97:d3:fc:d7:3e:75:73:f2:
1d:92:d1:bc:e1:8a:c7:f1:ca:6a:68:e9:db:fb:ba:
f2:6e:02:a8:30:a7:e6:4b:f2:8c:6c:23:72:0a:da:
90:04:23:b2:66:9c:b3:04:e9:a1:30:95:b7:3e:53:
d6:fb:92:98:f4:ec:29:fa:b8:37:b1:6a:bb:f8:db:
3e:d9:69:dc:63:4c:92:5f:96:d8:11:92:8b:5d:c8:
9a:6c:38:1c:bc:e6:15:79:92:94:77:58:57:eb:bd:
86:aa:fb:61:73:13:f7:f0:d4:4f:fa:8f:20:90:b0:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:351::/48
2a0f:85c1:357::/48
2a0f:85c1:363::/48
2a0f:85c1:600::/40
Signature Algorithm: sha256WithRSAEncryption
44:47:df:46:0a:4a:26:3f:89:84:c0:58:e6:5b:d4:ba:06:fb:
c8:dd:df:f2:bc:71:f3:e9:c9:58:05:04:f8:db:1b:a1:a2:1e:
20:d9:2b:7e:fb:01:37:94:a4:23:bc:3a:4e:de:67:61:24:17:
8e:0c:e4:7e:7d:73:d2:62:6a:9f:a6:cd:0b:9f:a6:37:46:8f:
6d:23:d3:70:3e:d5:e2:08:bd:73:19:a0:4b:fb:0d:b6:9e:fe:
5f:2c:64:eb:66:c1:32:ad:11:39:3f:a8:95:0f:92:86:c3:7a:
1b:be:7e:bb:c4:03:06:37:8a:29:64:dc:9a:aa:58:6c:1e:90:
7b:45:e7:f7:46:3c:7a:06:32:d6:4e:20:88:8a:ff:56:80:91:
33:22:e4:5b:a0:5c:f8:2a:a4:d1:3d:92:ef:22:d2:84:c5:46:
d8:1f:df:c3:09:9a:a8:01:6c:41:06:06:5e:34:aa:c3:2b:53:
ca:fd:d6:03:f6:01:49:82:80:86:77:1f:a1:5b:70:12:34:fe:
af:a2:3f:3d:99:01:7a:45:2a:9b:cb:b7:3d:03:8e:f5:52:5c:
5f:f1:5d:b7:42:1f:ed:0a:b6:ec:9b:ee:4d:bd:37:21:b2:b5:
2a:a6:fa:1e:a4:9d:07:5c:18:8b:03:1d:95:52:5c:1a:bb:0f:
e0:49:fc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org