Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
File: A4A082EAE8EF48C7B407C40E742479EADD862089.cer (raw, json)
Hash identifier: 3oIUZisDd48CotyhOZsqFNGbX8/GIR+56TwAfU6QSKM=
Subject key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6B284E08D5F52FBEC974565E01A5602ACF55C1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 04 Mar 2025 18:51:58 +0000
Certificate not after: Tue 03 Mar 2026 18:56:58 +0000
Subordinate resources: IP: 2a0f:85c1:390::/48
IP: 2a0f:85c1:b4d::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:28:4e:08:d5:f5:2f:be:c9:74:56:5e:01:a5:60:2a:cf:55:c1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 18:51:58 2025 GMT
Not After : Mar 3 18:56:58 2026 GMT
Subject: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:8c:ca:82:01:9e:44:5c:61:7a:e2:4d:da:
73:c8:39:6f:0f:92:35:60:06:17:08:69:0d:a8:8c:
f8:dd:f9:55:35:fb:00:db:2d:47:38:1b:48:bd:14:
21:ff:02:ef:4b:4c:cd:7a:16:17:5b:9e:21:c8:93:
78:03:4d:11:29:d9:13:15:59:e4:e7:6a:44:03:2c:
fe:03:a4:97:e8:97:25:e9:a1:a5:32:5a:b7:a7:ed:
5c:8e:12:53:77:01:9c:df:f8:d9:ca:31:1a:9a:bb:
f2:0f:67:b7:a6:a7:b9:df:dd:52:1a:e5:ab:9e:25:
5c:61:bd:bb:91:f9:29:c8:e6:59:d0:0b:84:20:46:
1d:02:d2:f7:3b:2f:01:d9:7e:53:a8:79:0f:3e:3a:
b5:cf:57:35:0a:c0:c3:5b:1d:27:1b:9a:3b:c9:42:
7f:8f:e1:58:9f:4a:20:e6:dd:ae:d4:12:8d:cc:61:
02:68:40:1d:64:34:ff:83:0d:10:db:a2:f8:0a:18:
25:fb:3a:bc:d7:9c:71:a8:c3:0f:b4:4a:a7:b8:c9:
75:a5:cd:b9:3c:4f:65:17:90:16:5c:01:bb:b2:6f:
cb:52:7b:1d:4a:9e:b7:9e:ea:05:ef:85:ac:22:0f:
93:ab:b7:ad:71:81:a4:f8:69:ee:25:c1:a0:6f:2f:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:390::/48
2a0f:85c1:b4d::/48
Signature Algorithm: sha256WithRSAEncryption
11:1d:43:46:3c:71:65:2e:df:ab:6d:e9:20:81:15:ef:29:8a:
c6:e3:fa:fb:f5:f5:17:f0:8f:69:f7:d9:84:c4:c3:a8:d1:34:
3e:6e:ae:67:ba:b4:b6:83:b9:7d:ac:f5:7c:d1:b5:5c:ef:c9:
e0:8c:ea:fe:a8:22:92:ea:a0:40:bf:13:b5:e7:e1:21:96:08:
b5:28:30:2a:43:a9:77:56:ee:a8:ce:21:1c:17:7b:bd:56:50:
41:61:17:0e:76:11:60:1e:05:51:e6:1a:d5:27:29:1b:b7:ae:
56:12:30:bc:f8:5a:2b:9b:a0:5f:1a:99:13:b1:85:1d:07:8e:
1b:4d:ad:d0:58:92:58:9a:d5:2c:74:84:c0:9c:01:20:f6:fa:
ef:9a:68:d5:9e:51:48:da:4e:8a:77:c5:06:0b:ac:1c:6c:75:
58:17:68:9f:ec:f0:8a:36:eb:30:bb:a7:91:ef:dd:c6:ee:05:
54:2a:a1:12:45:fc:d3:e0:20:af:01:63:b9:fa:ae:24:98:25:
09:c5:f2:34:c1:d1:52:5f:b9:8a:d4:19:20:17:e5:53:0c:4b:
29:a3:7e:a4:78:20:b9:4f:fa:4c:9d:70:cd:0f:92:6c:6d:e2:
a3:98:e7:1d:d4:72:f1:12:ab:32:1a:2a:f5:c2:41:2c:95:b2:
ab:4e:ea:74
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgIUayhOCNX1L77JdFZeAaVgKs9VwcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTAzMDQxODUxNThaFw0yNjAzMDMxODU2NThaMDMxMTAvBgNV
BAMTKEE0QTA4MkVBRThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7ozKggGeRFxheuJN2nPIOW8P
kjVgBhcIaQ2ojPjd+VU1+wDbLUc4G0i9FCH/Au9LTM16FhdbniHIk3gDTREp2RMV
WeTnakQDLP4DpJfolyXpoaUyWren7VyOElN3AZzf+NnKMRqau/IPZ7emp7nf3VIa
5aueJVxhvbuR+SnI5lnQC4QgRh0C0vc7LwHZflOoeQ8+OrXPVzUKwMNbHScbmjvJ
Qn+P4VifSiDm3a7UEo3MYQJoQB1kNP+DDRDbovgKGCX7OrzXnHGoww+0Sqe4yXWl
zbk8T2UXkBZcAbuyb8tSex1Knree6gXvhawiD5Ort61xgaT4ae4lwaBvLxePAgMB
AAGjggLtMIIC6TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkoILq6O9Ix7QH
xA50JHnq3YYgiTAfBgNVHSMEGDAWgBTEzn2JAkBbpFmPhLakHCfXIoNLHDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9DNENFN0Q4OTAyNDA1QkE0NTk4Rjg0QjZB
NDFDMjdENzIyODM0QjFDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQveE01OWlR
SkFXNlJaajRTMnBCd24xeUtEU3h3LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4Zjc3LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcv
MS9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3NDI0NzlFQUREODYyMDg5Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH
AQcBAf8EHDAaMBgEAgACMBIDBwAqD4XBA5ADBwAqD4XBC00wDQYJKoZIhvcNAQEL
BQADggEBABEdQ0Y8cWUu36tt6SCBFe8pisbj+vv19Rfwj2n32YTEw6jRND5urme6
tLaDuX2s9XzRtVzvyeCM6v6oIpLqoEC/E7Xn4SGWCLUoMCpDqXdW7qjOIRwXe71W
UEFhFw52EWAeBVHmGtUnKRu3rlYSMLz4WiuboF8amROxhR0HjhtNrdBYklia1Sx0
hMCcASD2+u+aaNWeUUjaTop3xQYLrBxsdVgXaJ/s8Io26zC7p5Hv3cbuBVQqoRJF
/NPgIK8BY7n6riSYJQnF8jTB0VJfuYrUGSAX5VMMSymjfqR4ILlP+kydcM0Pkmxt
4qOY5x3UcvESqzIaKvXCQSyVsqtO6nQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:41 2025 by rpki-client