Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer (raw, json)
Hash identifier: 5TnsrT+DOe3qENquwXMmXiqpJiY2IyfHGwdPELMTksI=
Subject key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2B717E21CF9A3FA793A5728BFD2CF869CA505F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Aug 2024 15:13:48 +0000
Certificate not after: Thu 07 Aug 2025 15:18:48 +0000
Subordinate resources: IP: 2a14:7581:d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:71:7e:21:cf:9a:3f:a7:93:a5:72:8b:fd:2c:f8:69:ca:50:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 8 15:13:48 2024 GMT
Not After : Aug 7 15:18:48 2025 GMT
Subject: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:a3:08:a4:8a:fb:38:35:6e:f9:e1:2c:ca:
ef:b2:2e:ce:91:34:48:b3:f1:7d:b3:48:4c:66:82:
2b:8d:51:8b:7e:41:a3:04:7b:0d:ee:4f:4f:3b:7c:
2a:54:96:e6:38:06:24:df:0d:62:82:ff:1b:d8:06:
19:a0:49:b3:d5:65:6f:cd:31:3f:49:e7:9f:b3:c6:
6b:3c:e8:36:82:59:e1:7b:f1:99:76:d4:fa:23:87:
f2:ba:20:4c:f0:53:b7:40:e1:2d:22:52:c5:9d:93:
cc:98:d6:2c:c5:c2:8f:fd:aa:d4:26:d9:ef:b5:0b:
7a:c5:66:98:bf:a9:cb:98:02:fe:a1:c2:98:9a:3f:
38:d5:e9:39:e3:df:2f:c9:45:fb:0b:ec:33:fe:51:
6c:f1:51:b7:d1:99:c8:92:e8:c7:af:ff:ca:bc:9b:
38:f6:0f:0e:f0:71:86:de:0f:53:48:d9:70:04:4a:
6b:c8:5c:fd:52:1e:1b:c3:8f:7c:42:38:30:48:29:
51:6b:19:25:bf:bb:72:f8:99:64:db:55:b1:18:54:
36:18:89:25:f5:e2:2c:85:04:b9:be:b5:f8:d8:df:
10:c2:8e:cf:49:81:a2:07:87:e7:48:55:d9:f4:fc:
c4:e2:e2:94:87:cb:09:b0:6e:e9:18:af:b0:8c:b4:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d00::/40
Signature Algorithm: sha256WithRSAEncryption
85:52:23:95:61:42:4f:93:15:21:a4:8b:3d:4c:05:fc:8f:af:
6e:7c:79:9c:2f:92:74:db:90:69:d5:0d:88:ab:c9:1a:61:8a:
ba:1b:d5:24:1e:60:33:6b:3a:0f:2c:8a:d7:41:10:84:90:72:
b7:1f:fe:0a:37:2e:b2:0b:b0:98:4c:b3:a8:97:26:79:2a:4e:
bb:5e:bd:0a:55:33:b9:38:3f:15:a0:e0:9c:e5:81:15:41:d1:
65:98:8c:b7:6d:51:92:56:e1:3c:3b:c3:52:07:d8:aa:05:9a:
e3:00:41:e7:f0:58:d7:21:8f:f1:2e:95:42:80:50:71:36:d1:
82:d2:30:4c:92:44:a9:7e:d9:f2:e9:b9:83:ab:4f:f2:be:ae:
71:d8:d2:e0:ca:22:eb:56:55:e5:2c:0b:8c:f7:86:09:8c:ca:
b3:7d:81:b2:86:c8:fd:e6:e7:53:be:97:20:9b:34:66:07:2d:
fb:87:e5:b8:4b:30:99:52:a6:42:dc:b8:6c:c7:69:df:36:11:
da:ac:a1:1d:6b:e8:d0:b5:1e:44:4d:90:0b:72:64:31:ba:f2:
e0:db:92:dd:71:a3:29:2e:53:5d:f3:18:33:8a:f7:2c:2b:88:
cc:78:f7:49:42:6c:ee:e5:82:78:4f:54:e5:69:2e:10:cd:63:
18:34:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org