Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer (raw, json)
Hash identifier: tK4dbvetiMIEWn3EmTPhR/+NT/gzsA0Z7XLo9d2E+Wg=
Subject key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 085AAEEE7E9D249461D4D24A7844CA05886E3211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 27 Aug 2024 17:13:31 +0000
Certificate not after: Tue 26 Aug 2025 17:18:31 +0000
Subordinate resources: IP: 2a0f:85c1:325::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5a:ae:ee:7e:9d:24:94:61:d4:d2:4a:78:44:ca:05:88:6e:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 27 17:13:31 2024 GMT
Not After : Aug 26 17:18:31 2025 GMT
Subject: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:38:0a:7f:00:00:c6:66:5a:55:96:89:01:
4c:f7:4a:5a:2b:b0:3e:e6:05:ee:7f:51:a0:88:58:
c5:40:66:0e:bb:84:d0:25:8d:20:46:43:27:76:97:
3f:7f:cb:75:66:b7:98:1d:d8:2a:11:17:5d:44:91:
df:88:ae:34:ba:6c:28:ec:74:a4:51:81:12:c9:0b:
9b:30:91:ad:51:8b:45:1b:cc:21:4b:84:d3:ee:54:
b8:ee:e0:78:35:80:9f:aa:aa:4c:7c:c9:da:26:c2:
75:d0:ef:78:36:4b:fe:c6:7d:74:07:41:de:2f:c5:
66:b8:f7:03:32:e5:e9:cb:bf:eb:ef:d7:21:5b:6b:
3f:f7:6a:fb:23:05:cf:19:b0:20:45:2c:3b:fa:9c:
35:66:5f:97:bc:6b:f6:d5:a3:de:1b:0c:ec:bc:39:
d6:27:52:6f:65:1d:db:88:eb:72:0f:0c:cf:a4:c6:
e9:b5:cf:3d:f5:3d:18:9b:3c:b6:03:26:bf:87:65:
96:66:d7:ca:4b:3f:35:52:e0:b8:b7:ab:df:bf:5a:
a4:51:54:7d:72:62:1a:7f:72:3f:84:d0:16:e1:0b:
4c:b5:a1:ba:62:62:47:2a:9d:cb:82:29:68:42:56:
ab:9e:cb:74:d2:9a:e4:8c:5a:67:69:93:f7:2e:59:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:325::/48
Signature Algorithm: sha256WithRSAEncryption
48:7b:90:c3:50:78:1d:5a:b9:c1:fc:f8:1c:cf:51:03:17:8c:
90:96:76:e9:86:f7:b4:7f:ac:ec:95:f8:20:80:6d:65:1f:0e:
2e:cb:83:60:e8:45:2b:29:5a:1f:35:04:07:bc:2b:00:6c:61:
13:c7:9c:51:0f:68:eb:0b:a5:77:99:cb:78:71:49:86:35:b3:
9d:a1:e0:23:55:ec:5a:bb:a7:5c:88:0b:ac:a7:b3:62:16:93:
42:fb:8b:f1:b5:80:07:9a:2f:6c:d9:50:ed:ec:1b:f8:3e:67:
ad:15:5d:aa:33:b8:dd:ff:e5:11:d5:18:c5:1a:06:77:ed:a2:
b0:05:6c:b2:25:00:20:c2:79:3d:33:01:bf:9c:5b:44:56:9e:
b0:4e:7f:71:c0:93:2c:49:b2:ea:b6:0e:7b:5f:41:5e:55:3d:
22:3a:f9:70:30:27:f0:38:c9:6d:9c:b3:05:18:d2:1a:4b:d2:
25:07:81:79:8d:be:bf:ba:58:fd:f4:8a:2d:19:4b:da:2f:68:
bb:a4:48:f4:3e:d2:8f:1d:8b:60:d6:57:df:9a:31:c9:94:2f:
c8:3c:0b:23:4b:cd:45:9b:3f:e4:90:8c:f3:20:6f:1a:72:08:
50:f9:ab:97:b7:91:3b:10:e1:77:20:a9:7d:b3:4c:00:f0:3d:
9b:75:23:3a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUCFqu7n6dJJRh1NJKeETKBYhuMhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjcxNzEzMzFaFw0yNTA4MjYxNzE4MzFaMDMxMTAvBgNV
BAMTKEVFQjlGQjlBMzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqPzgKfwAAxmZaVZaJAUz3Slor
sD7mBe5/UaCIWMVAZg67hNAljSBGQyd2lz9/y3Vmt5gd2CoRF11Ekd+IrjS6bCjs
dKRRgRLJC5swka1Ri0UbzCFLhNPuVLju4Hg1gJ+qqkx8ydomwnXQ73g2S/7GfXQH
Qd4vxWa49wMy5enLv+vv1yFbaz/3avsjBc8ZsCBFLDv6nDVmX5e8a/bVo94bDOy8
OdYnUm9lHduI63IPDM+kxum1zz31PRibPLYDJr+HZZZm18pLPzVS4Li3q9+/WqRR
VH1yYhp/cj+E0BbhC0y1obpiYkcqncuCKWhCVquey3TSmuSMWmdpk/cuWWL3AgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTuufuaMp3bW5T8
XiQk5XLsue7eUjAfBgNVHSMEGDAWgBTEzn2JAkBbpFmPhLakHCfXIoNLHDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9DNENFN0Q4OTAyNDA1QkE0NTk4Rjg0QjZB
NDFDMjdENzIyODM0QjFDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQveE01OWlR
SkFXNlJaajRTMnBCd24xeUtEU3h3LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4NzU1LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUv
MS9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQyNEU1NzJFQ0I5RUVERTUyLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAqD4XBAyUwDQYJKoZIhvcNAQELBQADggEBAEh7
kMNQeB1aucH8+BzPUQMXjJCWdumG97R/rOyV+CCAbWUfDi7Lg2DoRSspWh81BAe8
KwBsYRPHnFEPaOsLpXeZy3hxSYY1s52h4CNV7Fq7p1yIC6yns2IWk0L7i/G1gAea
L2zZUO3sG/g+Z60VXaozuN3/5RHVGMUaBnftorAFbLIlACDCeT0zAb+cW0RWnrBO
f3HAkyxJsuq2DntfQV5VPSI6+XAwJ/A4yW2cswUY0hpL0iUHgXmNvr+6WP30ii0Z
S9ovaLukSPQ+0o8di2DWV9+aMcmUL8g8CyNLzUWbP+SQjPMgbxpyCFD5q5e3kTsQ
4XcgqX2zTADwPZt1Izo=
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org