Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
File: 1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer (raw, json)
Hash identifier: rsjxe48nMLDuVDDIounK208QuZjGzycZonRDjOHBV6M=
Subject key identifier: 17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3B4C2615867EC185111B73F8DFBF5A110874F2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.mft
caRepository: rsync://rpki.xa.wiki/repo/AXNETS-CA/0/
Notify URL: https://rpki.xa.wiki/rrdp/notification.xml
Certificate not before: Thu 19 Sep 2024 13:06:45 +0000
Certificate not after: Thu 18 Sep 2025 13:11:45 +0000
Subordinate resources: IP: 2a14:7580:5000::/36
IP: 2a14:7581:9900::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4c:26:15:86:7e:c1:85:11:1b:73:f8:df:bf:5a:11:08:74:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 19 13:06:45 2024 GMT
Not After : Sep 18 13:11:45 2025 GMT
Subject: CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:00:c1:ee:92:05:eb:f1:a5:69:69:66:2c:
b0:3d:47:70:a3:4a:0d:b2:42:58:4b:a3:20:1b:d2:
69:28:96:64:44:a3:3a:98:ec:15:45:a0:30:c5:34:
a5:71:eb:0c:01:05:5f:cb:34:16:ba:9d:c8:3e:80:
01:b8:9f:5a:67:68:fb:f8:0e:2f:c6:81:c9:ff:39:
88:47:37:25:21:30:98:9a:99:2e:c9:0d:87:1a:7b:
d1:ee:ca:be:86:67:76:b7:be:20:d7:7c:10:78:bb:
ac:db:de:56:a9:16:17:d2:d2:b9:e7:0b:46:05:0f:
92:40:25:a4:f3:7e:49:2d:82:e0:33:32:9d:71:e4:
67:9b:8e:23:e5:a2:14:fa:b1:c3:b4:79:ab:02:b7:
7b:00:c9:fd:f5:d4:f6:b4:f3:7c:17:cd:2c:42:da:
6a:c3:08:f4:76:d4:b0:e2:0b:72:c5:7c:b3:cf:2c:
fb:f4:f4:09:1e:3f:5d:54:25:ac:7c:f6:5c:78:55:
18:56:ae:33:d0:f6:98:69:ac:3c:ee:a6:d8:3c:03:
d4:4b:d5:5e:56:2f:46:62:ea:59:86:20:28:8f:9d:
c6:78:0b:bc:f3:fa:c0:14:09:f1:3c:b0:2f:ea:37:
81:6f:40:67:30:79:de:cc:81:ad:d4:1b:4a:03:a5:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/
RPKI Manifest - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.mft
RPKI Notify - URI:https://rpki.xa.wiki/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5000::/36
2a14:7581:9900::/40
Signature Algorithm: sha256WithRSAEncryption
07:b2:82:47:18:6e:2b:21:22:97:c0:6c:5d:ab:8c:99:93:c8:
73:92:4e:8c:df:6e:fa:29:9a:68:42:74:36:09:f0:45:3e:f4:
a1:66:dc:81:97:ab:64:6d:20:fc:29:99:4e:a0:b2:d0:83:1d:
85:52:2f:ac:5c:d9:4a:4a:1f:a6:43:58:8e:59:6f:98:b8:77:
b5:5b:2d:b1:36:d6:33:48:51:e7:d1:25:7f:55:a1:6a:34:5a:
f1:55:cc:cc:a8:ce:88:f7:9f:d4:2f:22:55:8b:5d:15:0c:f5:
4f:16:e8:ff:29:7f:0a:67:3a:c1:57:d1:ed:42:3a:8e:e1:8d:
97:d9:58:70:6f:ed:1c:10:b2:3e:9b:e8:51:43:04:7e:7d:d3:
e7:7e:0d:13:48:55:e1:be:2f:d0:66:97:83:99:bd:f5:2b:b1:
f8:e9:09:31:92:c9:21:23:ed:99:ff:b3:29:d0:0e:28:c4:cd:
65:e2:7a:7b:47:d7:d9:25:e7:0e:40:61:94:12:0a:10:eb:b9:
8d:1e:3a:39:b0:77:55:7f:26:28:14:8a:8d:c6:49:e2:c8:11:
55:ad:29:92:67:04:27:34:f1:9e:19:ab:01:06:cb:33:f3:07:
af:ee:b2:21:52:d4:78:06:15:b7:83:dc:64:e5:d0:7c:07:7f:
6c:23:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org