Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer (raw, json)
Hash identifier: yNZJh3jEGJCxIahr7Nz0AD27WGjSRAVmSevxZAoctSw=
Subject key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2B7BA5419327481F9918F50FE1A729661B99EBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 25 Jun 2024 12:28:06 +0000
Certificate not after: Tue 24 Jun 2025 12:33:06 +0000
Subordinate resources: IP: 2a14:7581:d000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7b:a5:41:93:27:48:1f:99:18:f5:0f:e1:a7:29:66:1b:99:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 25 12:28:06 2024 GMT
Not After : Jun 24 12:33:06 2025 GMT
Subject: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:fd:3a:e1:ad:ca:37:5b:0b:f5:bf:3c:6a:
67:70:87:cc:48:35:f3:fd:08:19:7c:63:b2:56:cd:
a3:30:10:1c:be:ba:c6:1e:56:65:b6:f3:23:8b:10:
95:cd:7e:2c:1d:93:c7:98:9f:1c:1c:6c:78:16:9a:
3a:d0:59:78:43:dd:69:48:46:7c:28:6f:ed:e0:43:
7f:df:62:6d:8c:4a:b6:01:15:5e:07:7a:8b:a9:c5:
cf:03:1a:d3:b9:38:5b:62:6c:2e:a4:51:81:69:a5:
2f:e5:da:7b:3b:05:4c:68:87:f9:5a:80:c1:66:e7:
f4:a1:54:d8:4c:31:3b:ff:31:59:54:9a:11:31:89:
bd:16:60:bc:4c:5a:53:8c:87:80:aa:03:a6:4b:f8:
bc:95:0e:7e:79:c3:7f:d6:32:d5:8c:f3:c8:c7:b1:
2f:f3:77:d8:39:33:18:c7:52:de:af:0f:8a:bb:a1:
83:4b:ed:6b:75:20:56:37:b4:77:27:32:c6:65:38:
8b:dd:09:81:f7:65:c3:15:8a:32:06:e5:8f:b6:d2:
cd:4d:15:ce:33:cb:3b:8b:1a:eb:75:bc:ac:ab:da:
9d:64:19:e5:d7:c1:a3:c2:56:5c:50:8c:02:e0:55:
35:fb:8b:bd:35:4a:92:4b:e5:26:28:93:a9:cf:93:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d000::/36
Signature Algorithm: sha256WithRSAEncryption
21:2c:a6:b8:7d:b8:ed:02:32:4b:2e:d6:fc:0e:87:cb:9c:4f:
81:a4:c2:df:dd:07:a9:f5:3b:4b:9d:73:06:58:16:a5:6d:81:
91:d1:90:56:4f:fb:52:af:da:bc:1a:8d:8c:0d:4d:b5:91:9d:
7e:84:8e:76:fb:79:61:b8:e2:dc:b7:09:7d:ce:a1:0c:33:9f:
84:8c:25:ed:b8:60:95:d2:29:e5:a3:e4:3b:8d:0d:23:33:57:
91:c3:fc:39:c8:33:40:04:90:b2:f3:2e:17:72:2d:cf:de:f9:
c3:17:9f:3e:65:3c:b7:d5:62:08:be:d5:d9:bb:f3:d2:66:ed:
55:3e:e6:6c:dd:4e:a2:bf:ad:be:6b:79:ad:2c:46:0d:94:94:
cf:f1:c5:c0:a1:22:d0:e8:6b:36:0d:3d:d1:56:1c:d6:22:1d:
46:d7:5f:e3:b6:ba:8d:9b:47:12:d8:2d:1b:b9:46:56:e4:fd:
b0:01:15:85:04:fc:0f:af:5d:2a:35:cf:b3:8f:65:77:2c:cb:
06:a9:f4:95:1b:8c:1a:4d:b7:fc:ed:4d:6e:e0:ae:3b:5f:98:
f5:21:8d:3c:03:9b:4e:c9:22:86:29:07:5a:b6:7c:f3:61:7e:
44:a9:10:27:a0:3e:ac:d4:b9:60:9f:b1:2a:8a:92:4b:0a:82:
96:9c:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org