Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
File: 30EC341CC59263F48799F70A95490826E78E6E11.cer (raw, json)
Hash identifier: lkhaYke1Zz4DR7CdHX9uF3Fgjk3PQKgC6ru7Nld97p0=
Subject key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2978373A3BB8A09207EA8AFBE238656000122AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 12 Oct 2024 23:32:46 +0000
Certificate not after: Sat 11 Oct 2025 23:37:46 +0000
Subordinate resources: IP: 2a14:7581:100:: -- 2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
IP: 2a14:7581:1000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:78:37:3a:3b:b8:a0:92:07:ea:8a:fb:e2:38:65:60:00:12:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 12 23:32:46 2024 GMT
Not After : Oct 11 23:37:46 2025 GMT
Subject: CN=30EC341CC59263F48799F70A95490826E78E6E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:42:b1:cd:bc:22:7a:b5:a3:84:aa:81:53:
1b:ad:48:d3:a1:7a:b1:7f:d6:9d:dd:18:03:fb:92:
72:7b:f0:1c:ed:6d:4d:c9:d1:e5:02:55:4e:33:91:
df:29:e4:b2:60:81:f3:21:d1:55:95:56:80:a4:4e:
26:d3:3a:f1:07:3e:e2:b9:d6:7e:42:08:02:e2:4a:
4e:37:e4:b2:c3:2a:7b:7a:5d:64:69:7a:77:73:23:
09:ea:55:35:ff:4d:04:75:35:94:8c:b8:45:96:ca:
cb:1a:95:fb:a9:c2:dc:c4:0b:cc:0a:93:1c:dc:b9:
fc:ae:87:64:e2:52:66:43:f0:c7:54:8c:f3:75:8f:
2e:34:f8:b2:32:a0:e5:44:92:1d:fe:d9:a2:59:85:
da:e3:c8:bc:a4:1c:77:2e:c0:ad:b4:10:c7:a5:5c:
22:de:13:7b:9c:8d:bf:e4:77:9b:58:00:7f:aa:c5:
d0:a3:44:3e:c8:0b:ed:3b:46:3b:29:f1:bc:1f:ed:
41:ed:45:98:5d:8d:05:24:ac:e7:3a:ef:74:1a:c4:
29:87:d5:35:f7:f2:46:46:f3:7f:52:e9:db:32:ea:
25:04:51:f4:34:07:51:4d:fb:a6:1b:1d:ea:3e:b4:
26:e2:0a:3b:bf:f2:a3:7c:34:2a:4f:70:e2:e7:03:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:100::-2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
2a14:7581:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6e:16:09:9a:12:e3:20:d9:dc:54:06:c6:78:08:a0:1d:db:7b:
d0:6e:71:cc:fa:9d:18:4b:58:28:5f:5a:4a:e5:5a:c0:e9:da:
60:d2:18:b8:b4:3e:eb:e1:60:6d:37:de:db:22:9d:65:50:5f:
4c:b3:3b:39:11:b4:1c:3a:38:6a:e8:72:5e:c3:cf:30:41:89:
09:09:44:b5:08:3b:2c:20:f4:51:8f:c1:9d:73:36:14:e1:85:
44:f4:ed:9e:33:25:0e:75:47:73:b4:d0:26:fa:6a:03:7e:b0:
80:95:11:48:a3:78:1f:b3:08:07:5c:11:02:de:b2:f1:00:84:
17:d0:de:5c:f9:17:ea:34:7b:4b:9f:ec:43:25:a0:93:d6:2b:
c5:63:e8:fa:85:3d:82:45:55:93:f4:7d:fb:e7:4e:ff:c4:15:
18:33:c0:18:a4:04:c3:24:b5:5e:14:66:da:d4:8b:69:45:e4:
69:6b:a7:16:94:b0:59:c8:8a:4f:a5:3f:ac:b7:4e:b9:b6:12:
f2:8d:e6:62:03:31:e8:de:7b:0c:8d:f0:f4:0f:8a:6e:bd:5c:
a0:1e:65:31:e1:91:7b:2f:27:d5:10:db:73:d0:1a:77:06:f5:
88:cc:33:dd:76:23:46:aa:eb:c7:2c:36:ba:84:8f:6f:25:db:
4a:e6:1a:33
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIUKXg3Oju4oJIH6or74jhlYAASKvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDEwMTIyMzMyNDZaFw0yNTEwMTEyMzM3NDZaMDMxMTAvBgNV
BAMTKDMwRUMzNDFDQzU5MjYzRjQ4Nzk5RjcwQTk1NDkwODI2RTc4RTZFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LUKxzbwierWjhKqBUxutSNOh
erF/1p3dGAP7knJ78BztbU3J0eUCVU4zkd8p5LJggfMh0VWVVoCkTibTOvEHPuK5
1n5CCALiSk435LLDKnt6XWRpendzIwnqVTX/TQR1NZSMuEWWyssalfupwtzEC8wK
kxzcufyuh2TiUmZD8MdUjPN1jy40+LIyoOVEkh3+2aJZhdrjyLykHHcuwK20EMel
XCLeE3ucjb/kd5tYAH+qxdCjRD7IC+07Rjsp8bwf7UHtRZhdjQUkrOc673QaxCmH
1TX38kZG839S6dsy6iUEUfQ0B1FN+6YbHeo+tCbiCju/8qN8NCpPcOLnA+69AgMB
AAGjggL1MIIC8TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQw7DQcxZJj9IeZ
9wqVSQgm545uETAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4NjgzNzQ4LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgv
MS8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5NTQ5MDgyNkU3OEU2RTExLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH
AQcBAf8EJDAiMCAEAgACMBowEAMGACoUdYEBAwYAKhR1gQIDBgQqFHWBEDANBgkq
hkiG9w0BAQsFAAOCAQEAbhYJmhLjINncVAbGeAigHdt70G5xzPqdGEtYKF9aSuVa
wOnaYNIYuLQ+6+FgbTfe2yKdZVBfTLM7ORG0HDo4auhyXsPPMEGJCQlEtQg7LCD0
UY/BnXM2FOGFRPTtnjMlDnVHc7TQJvpqA36wgJURSKN4H7MIB1wRAt6y8QCEF9De
XPkX6jR7S5/sQyWgk9YrxWPo+oU9gkVVk/R9++dO/8QVGDPAGKQEwyS1XhRm2tSL
aUXkaWunFpSwWciKT6U/rLdOubYS8o3mYgMx6N57DI3w9A+Kbr1coB5lMeGRey8n
1RDbc9Aadwb1iMwz3XYjRqrrxyw2uoSPbyXbSuYaMw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org