Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer
File: FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer (raw, json)
Hash identifier: dl/K5XwkrVUNqeaoJDntxJJJgu0A0mgKLGeXjpckO+8=
Subject key identifier: FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 16AD6DCFB51920735F0558116B9541D4328D1B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 24 Aug 2024 16:06:05 +0000
Certificate not after: Sat 23 Aug 2025 16:11:05 +0000
Subordinate resources: IP: 2a0f:85c1:362::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ad:6d:cf:b5:19:20:73:5f:05:58:11:6b:95:41:d4:32:8d:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 24 16:06:05 2024 GMT
Not After : Aug 23 16:11:05 2025 GMT
Subject: CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:56:42:d6:eb:ed:0b:92:20:b3:99:8c:e1:
c6:4c:90:91:88:9b:b2:7e:5f:7a:f8:03:4d:f0:d2:
cd:ff:de:72:06:4c:d4:dc:76:1d:56:68:df:3c:fa:
a8:7c:3c:0e:07:7d:0f:34:c8:cd:5d:1f:d6:00:81:
3d:b6:5a:4c:66:f4:97:ba:0d:ab:53:7a:e7:f4:a1:
3c:fb:6b:25:c8:8b:61:a5:63:47:30:01:0a:9b:34:
c8:b4:55:b3:8d:a9:75:bc:3e:91:eb:94:8b:48:c5:
c3:26:41:f4:3f:c1:68:7e:ca:e2:60:76:12:b9:a8:
2b:bb:dd:f2:c2:16:bf:03:02:52:74:a8:13:21:b5:
a3:3f:ee:95:81:6d:af:8e:f2:52:27:d6:92:66:ae:
8d:93:f5:b5:3d:46:73:ff:d3:3c:7f:74:46:37:34:
c6:db:57:09:34:e0:49:9e:38:01:78:03:cb:ce:ec:
f1:ac:9e:ff:f5:a9:1e:7c:e6:c3:19:5a:dd:f4:ce:
e4:c1:04:b4:c3:0a:36:c2:49:fd:9e:af:b8:5d:70:
ba:db:a4:1e:26:e0:c3:a6:32:a3:03:cc:fa:07:b1:
c2:14:2e:5b:fc:46:29:98:9b:4f:0f:83:18:28:14:
64:01:94:7c:3f:c9:3f:2f:33:e4:b7:7f:2b:89:2a:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:362::/48
Signature Algorithm: sha256WithRSAEncryption
0f:24:58:7d:61:ec:63:01:1b:0f:93:d8:00:f1:a3:eb:04:c6:
06:53:6f:98:2e:40:cb:fb:23:16:a8:1b:15:fc:d7:8e:eb:3d:
cc:c1:e9:2e:65:22:5b:0b:0a:03:6d:5f:59:c3:0d:16:69:88:
d6:f6:04:97:6a:95:f3:bf:05:00:f3:3e:01:51:39:ed:11:79:
ba:47:75:e7:72:c5:b4:db:91:59:47:cb:5a:48:1d:7d:2c:fe:
c4:85:b1:1c:1a:13:77:a8:a4:18:8d:18:e0:73:fb:e6:4c:68:
96:11:d2:a0:04:2d:3d:52:07:c8:d1:f9:b7:5d:ed:78:15:88:
3b:6f:9a:27:2e:a0:b2:95:4a:7e:6c:69:39:bd:3d:9c:ac:d2:
47:69:4b:2d:e0:60:a4:c2:ba:c1:b5:60:06:c3:7b:fc:6d:dc:
0a:ca:b0:9d:41:e8:ad:0b:1f:3e:f7:ba:9d:2c:d7:65:57:1f:
84:0b:17:98:af:d9:88:98:d8:9b:93:7a:0e:fe:7c:29:23:1b:
b0:b7:78:67:48:58:3d:ae:cd:9a:b6:d6:92:ea:a8:ef:c3:58:
f9:ed:ac:e3:4d:35:50:6e:9b:98:37:3a:5d:91:f3:d2:ff:e6:
c8:fe:6e:ef:5b:f9:91:f3:6e:9f:7f:5b:ac:bf:e2:8d:a5:2f:
82:7c:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org