Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer
File: CC2B47BFD397E66019550C83BF1B56353173A0CB.cer (raw, json)
Hash identifier: 6XKM1xSej1zw41d+H/R7F1O0h9BJFpMAbk6UfzoaTSA=
Subject key identifier: CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0DBC0D07ED98483EBC2A3F170D483DA882913AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 24 Aug 2024 09:19:17 +0000
Certificate not after: Sat 23 Aug 2025 09:24:17 +0000
Subordinate resources: IP: 2a0f:85c1:331::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bc:0d:07:ed:98:48:3e:bc:2a:3f:17:0d:48:3d:a8:82:91:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 24 09:19:17 2024 GMT
Not After : Aug 23 09:24:17 2025 GMT
Subject: CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:91:e9:e7:97:81:92:79:69:5c:eb:ab:cd:
43:29:bd:58:14:a7:bf:64:71:48:07:2a:93:74:4b:
a3:da:60:00:04:b3:df:1a:2d:ef:d6:7b:2b:a1:69:
60:30:a5:98:58:e3:f2:9c:a2:7f:1c:1f:bc:4a:4e:
57:44:72:e0:02:2b:ae:1b:69:85:f0:69:ad:f6:85:
3b:fc:22:7a:68:38:6d:df:06:9f:be:04:1e:93:2e:
c5:9a:b5:0c:46:ad:b4:e5:49:d8:3b:ff:38:3b:ca:
0b:41:dc:5a:73:f3:35:0d:be:b3:63:77:e5:38:b3:
48:8d:8e:0d:a7:26:b8:d0:b3:5f:fb:bb:ca:a8:aa:
5b:f2:0c:af:5f:5a:f5:0d:97:e6:1a:76:f6:e3:dc:
e2:49:65:95:7e:5a:2a:22:08:5d:a3:ec:12:88:0d:
71:f3:aa:a6:84:0a:58:89:61:f3:70:b1:d7:b1:22:
dd:05:b5:fc:e0:1e:b4:5a:7f:f5:12:e6:f3:72:7d:
cc:49:08:39:de:7b:3c:95:3a:11:6e:ef:cb:a9:56:
57:35:fe:12:fb:36:18:7e:94:fd:70:fd:09:92:ed:
bc:73:43:ac:c0:36:b4:a8:fe:68:99:f0:46:f1:89:
03:19:8a:34:9d:8b:1c:6b:7f:e5:9c:04:f2:4b:f8:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:331::/48
Signature Algorithm: sha256WithRSAEncryption
2c:1d:39:fc:91:1a:96:c1:be:84:24:e3:9f:b0:a8:0c:d2:93:
62:12:00:8c:48:03:07:2b:e7:98:a3:07:d3:82:fd:5a:f4:7a:
7e:ca:56:a7:a4:a8:c2:e1:7f:35:73:a9:61:b3:06:7b:63:85:
27:5a:98:c3:ed:4f:49:34:b0:cf:cf:0c:78:81:58:23:02:af:
b8:82:1d:23:52:98:33:85:ac:14:02:b5:b4:8a:82:61:dc:ca:
eb:1e:c9:a7:c7:e8:84:94:4c:75:90:8f:e8:b4:5d:39:30:92:
df:cc:ad:a0:bc:32:1b:b5:dc:f6:55:65:5a:09:11:26:d8:1d:
0d:81:09:06:04:36:1f:b1:fc:6b:7e:47:9c:1f:33:68:2f:3e:
83:94:a6:60:1d:25:16:05:8a:e6:bf:09:07:df:21:03:e8:6d:
1a:5b:9e:41:46:31:e3:52:65:72:df:96:f4:56:3d:ee:b6:72:
f7:4f:eb:7c:0e:0a:54:93:4c:2b:16:b5:e0:96:f7:9a:f8:26:
81:e8:30:df:0e:85:5f:60:c5:5f:64:ae:93:84:79:62:95:e5:
ad:37:fd:5f:75:d4:e8:b8:24:71:d4:0e:34:40:2d:5e:7e:ed:
30:eb:a6:1c:7c:c0:63:6f:92:a6:ce:1a:f2:1e:78:1e:cb:cd:
db:52:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 11:03:46 2024 by rpki-client on console-ams.rpki-client.org