Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer
File: 5D86A1FAB8C19115720081D417D39278074047FB.cer (raw, json)
Hash identifier: U4S/mBivybS7LfE8iNtVC+nYff3mnKdGpyPawAZ+Rm8=
Subject key identifier: 5D:86:A1:FA:B8:C1:91:15:72:00:81:D4:17:D3:92:78:07:40:47:FB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1A5810AE6148C2542AC9A66EE741CB9B162639A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 22 Aug 2024 15:48:43 +0000
Certificate not after: Thu 21 Aug 2025 15:53:43 +0000
Subordinate resources: IP: 2a14:7580:4000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Oct 2024 14:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:58:10:ae:61:48:c2:54:2a:c9:a6:6e:e7:41:cb:9b:16:26:39:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 22 15:48:43 2024 GMT
Not After : Aug 21 15:53:43 2025 GMT
Subject: CN=5D86A1FAB8C19115720081D417D39278074047FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:68:56:8e:69:11:94:5c:9a:80:be:ad:59:
4b:d7:ba:64:68:9c:58:d4:9e:0f:3d:fa:62:2e:7a:
0e:e6:b7:35:f7:ec:c1:04:67:24:28:c3:ac:d3:6f:
fb:e0:1f:16:6b:88:01:25:47:2c:15:25:8d:ed:64:
b1:78:3c:8a:a6:6c:59:54:b3:b7:9f:95:58:15:38:
67:9b:7c:1f:bd:5b:22:98:95:b3:14:f3:c7:e0:93:
16:64:00:16:3b:e2:eb:5c:d9:28:ea:8d:fc:d7:2a:
af:bb:0f:0f:24:fc:ff:7c:74:12:0a:b9:ef:5b:a6:
15:5c:7f:f3:fd:42:d3:37:c0:da:67:35:f0:f9:6f:
1f:b3:31:8f:14:1a:99:9e:c1:12:56:cf:df:23:d5:
cb:ee:af:12:35:b4:b2:c7:1d:74:76:88:5b:27:24:
fe:50:d4:6a:90:0b:67:39:2e:91:ec:f3:dc:c4:fb:
ee:21:97:1f:c2:0b:60:b0:ad:3f:68:db:fb:59:f4:
31:2b:9d:d6:52:a1:0e:b6:46:4f:e7:3d:20:96:da:
20:c7:89:1d:23:40:1b:c8:fa:ca:16:63:6a:a3:b0:
a1:b3:ac:90:33:d1:66:fa:89:91:ff:96:60:94:40:
22:1e:21:94:e3:e1:fa:1f:82:d8:28:30:fe:53:cb:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:86:A1:FA:B8:C1:91:15:72:00:81:D4:17:D3:92:78:07:40:47:FB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:4000::/36
Signature Algorithm: sha256WithRSAEncryption
53:b8:e1:8f:38:02:e4:87:92:d5:1c:0c:4d:b9:47:7b:21:ba:
61:05:ed:69:4c:a1:14:35:63:b7:18:4c:b8:03:bb:96:f7:64:
15:d5:43:53:28:d6:79:fb:b5:eb:2c:db:f6:00:32:0c:60:b4:
fd:af:a9:da:92:1f:45:e5:e2:c9:0b:53:cb:11:08:2e:64:0c:
c9:28:ad:e7:57:f9:ff:ad:7e:71:57:84:2a:07:7d:a1:ae:ed:
c4:ea:01:94:82:36:18:64:76:f1:5a:8c:f2:15:e9:2c:c8:dd:
ef:86:a3:c0:58:e9:09:24:67:f6:f2:9b:40:af:02:06:c1:2e:
53:e5:c9:37:58:92:45:2e:2b:40:eb:42:5f:03:42:94:c9:92:
00:9f:27:34:5a:d4:cc:13:96:c9:cd:ae:cf:78:2e:7c:8f:52:
90:b6:35:4c:fd:e2:78:c1:56:84:38:5e:53:f1:24:ca:63:f8:
d1:b8:dd:8a:9d:06:e0:35:81:01:b3:89:85:f8:bb:d1:0c:46:
55:d3:fc:9f:ea:e3:6d:7e:73:b3:22:c5:00:5f:db:4f:54:f1:
f8:c2:3e:66:bf:06:bf:4e:5e:c6:7b:00:9c:03:f5:69:d4:80:
42:e2:e5:3f:ff:66:52:60:38:b8:1f:18:38:9b:5c:b5:4d:86:
fe:22:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 19:20:04 2024 by rpki-client on console-fra.rpki-client.org