Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer (raw, json)
Hash identifier: 7M8kSgw1UqXWL6ELzWWkI4LHqQYULxiSZKrG9ubTB3k=
Subject key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0745637056A8BB8D9156BC191DA744CA0AF74449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 23 Aug 2024 19:09:22 +0000
Certificate not after: Fri 22 Aug 2025 19:14:22 +0000
Subordinate resources: IP: 2a0f:85c1:3a2::/48
IP: 2a0f:85c1:700::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:45:63:70:56:a8:bb:8d:91:56:bc:19:1d:a7:44:ca:0a:f7:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 19:09:22 2024 GMT
Not After : Aug 22 19:14:22 2025 GMT
Subject: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:94:7f:e3:a9:d5:84:fa:c3:d9:97:90:d6:
9c:f8:d1:b3:65:21:e3:6e:00:89:cd:25:8a:ab:a9:
b4:3c:a3:b1:fa:8d:59:18:bd:0c:db:07:da:fa:77:
7c:53:bc:14:69:6d:bf:fd:0d:75:0c:a0:e7:06:73:
2e:81:88:d5:a0:f7:9e:9e:62:85:23:cd:5b:9f:ec:
96:10:e0:dc:12:e9:66:c9:af:d0:6f:d2:ce:e0:68:
62:e1:1e:f0:dd:b5:7c:d2:75:37:d3:ac:0b:23:9f:
30:fb:55:0c:ba:86:86:dd:e3:ef:a8:9f:84:57:d4:
c7:c0:5d:cd:72:86:0f:ba:ba:af:b5:94:de:c9:13:
64:ae:59:3a:8e:ae:cd:91:92:aa:ee:ba:84:56:66:
15:9d:fe:49:f3:cf:9c:15:a9:9b:8e:42:e0:b0:14:
00:6d:20:ed:94:24:23:22:4f:ba:55:78:7d:b8:2a:
7b:32:44:09:87:c2:72:e7:09:ef:02:e5:4f:78:f7:
28:a8:6d:ad:77:94:c9:d4:9b:60:55:f4:98:b4:1e:
6a:1c:76:f4:b7:51:7c:7e:95:0f:57:f7:fe:54:59:
6b:d1:9a:58:1b:16:a5:60:fd:d6:be:8d:a2:81:41:
6f:ad:cc:e8:b1:3b:8a:a1:e2:c6:d0:c7:57:de:71:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a2::/48
2a0f:85c1:700::/40
Signature Algorithm: sha256WithRSAEncryption
e9:46:22:d5:4e:4f:a0:ef:63:6f:f4:fb:5e:e3:73:63:f9:b3:
c3:25:92:28:f9:f2:0f:18:04:f1:b8:0b:ae:40:8f:b0:b4:84:
0a:77:a7:5a:8f:35:3b:24:b2:bb:f3:a5:d1:8e:7a:ec:d0:0d:
df:d6:f5:67:e3:50:5d:ff:45:d8:e6:54:9e:1e:ea:a9:72:5c:
e1:c3:2f:70:80:6f:3f:70:50:77:55:54:59:f0:c5:65:34:3c:
2e:b8:3b:b7:e7:82:e3:b2:77:1b:f2:be:55:6d:82:6b:54:6f:
49:4b:8c:5a:66:5e:c7:a8:66:c6:dd:ef:98:4f:7b:62:37:22:
99:b6:5b:7a:fc:5e:a3:b2:7d:14:cb:bc:6e:1e:bd:55:5f:fb:
48:16:47:08:39:35:40:57:ac:3a:a2:74:e0:dc:7d:cd:d3:b1:
0e:b4:a2:11:7d:36:eb:7a:3d:72:d7:84:f8:96:0a:cf:10:82:
c1:1e:2f:a0:91:1c:fa:95:72:05:ef:70:42:1c:54:b8:ba:b1:
dd:55:68:25:c4:a0:20:a4:d2:e6:63:08:cb:8b:8f:13:b1:c7:
d0:49:01:7e:f7:a3:78:b8:53:13:d3:7b:52:14:1a:fd:7d:f9:
98:c5:d4:d6:68:a7:b8:bb:dd:bb:11:38:c9:5c:9a:eb:04:16:
3c:bb:21:db
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUB0VjcFaou42RVrwZHadEygr3REkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMxOTA5MjJaFw0yNTA4MjIxOTE0MjJaMDMxMTAvBgNV
BAMTKDFBOTBBNkFFMTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ypR/46nVhPrD2ZeQ1pz40bNl
IeNuAInNJYqrqbQ8o7H6jVkYvQzbB9r6d3xTvBRpbb/9DXUMoOcGcy6BiNWg956e
YoUjzVuf7JYQ4NwS6WbJr9Bv0s7gaGLhHvDdtXzSdTfTrAsjnzD7VQy6hobd4++o
n4RX1MfAXc1yhg+6uq+1lN7JE2SuWTqOrs2RkqruuoRWZhWd/knzz5wVqZuOQuCw
FABtIO2UJCMiT7pVeH24KnsyRAmHwnLnCe8C5U949yioba13lMnUm2BV9Ji0Hmoc
dvS3UXx+lQ9X9/5UWWvRmlgbFqVg/da+jaKBQW+tzOixO4qh4sbQx1fecZyfAgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQakKauFUKjU8yn
SXfrK/4qScGDdzAfBgNVHSMEGDAWgBTEzn2JAkBbpFmPhLakHCfXIoNLHDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9DNENFN0Q4OTAyNDA1QkE0NTk4Rjg0QjZB
NDFDMjdENzIyODM0QjFDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQveE01OWlR
SkFXNlJaajRTMnBCd24xeUtEU3h3LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0MmUxLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEv
MS8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdFQjJCRkUyQTQ5QzE4Mzc3Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBwAqD4XBA6IDBgAqD4XBBzANBgkqhkiG9w0BAQsF
AAOCAQEA6UYi1U5PoO9jb/T7XuNzY/mzwyWSKPnyDxgE8bgLrkCPsLSECnenWo81
OySyu/Ol0Y567NAN39b1Z+NQXf9F2OZUnh7qqXJc4cMvcIBvP3BQd1VUWfDFZTQ8
Lrg7t+eC47J3G/K+VW2Ca1RvSUuMWmZex6hmxt3vmE97YjcimbZbevxeo7J9FMu8
bh69VV/7SBZHCDk1QFesOqJ04Nx9zdOxDrSiEX0263o9cteE+JYKzxCCwR4voJEc
+pVyBe9wQhxUuLqx3VVoJcSgIKTS5mMIy4uPE7HH0EkBfvejeLhTE9N7UhQa/X35
mMXU1minuLvduxE4yVya6wQWPLsh2w==
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org