Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer
File: 81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer (raw, json)
Hash identifier: lKNiScQCHtMZRDh263rjIGkOLQGNrnbPm4Y+SWksunE=
Subject key identifier: 81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4F52A26B77999A1B8D1AC04E14CAFF03C97FC0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 05 Apr 2024 13:06:00 +0000
Certificate not after: Fri 04 Apr 2025 13:11:00 +0000
Subordinate resources: IP: 2a14:7581:6000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:52:a2:6b:77:99:9a:1b:8d:1a:c0:4e:14:ca:ff:03:c9:7f:c0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 5 13:06:00 2024 GMT
Not After : Apr 4 13:11:00 2025 GMT
Subject: CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:6f:07:96:d1:42:f7:e2:9d:4c:95:42:8e:
dd:3f:1a:b7:a4:f0:ec:24:35:a1:e3:8a:ff:a4:d6:
9d:3b:2c:d5:78:af:6f:7a:38:6c:40:68:8d:2a:69:
8b:b1:79:28:32:d0:f8:c6:b0:b8:d4:47:81:8d:e9:
99:f7:cd:98:91:9d:62:93:f2:9d:01:96:eb:bf:f8:
0c:31:e7:b7:73:02:df:c4:65:58:06:6f:20:81:62:
4f:10:4a:6a:22:40:89:8e:37:48:e3:e9:32:8c:f6:
ee:8f:36:fe:ce:61:82:7d:2a:10:78:9f:24:b6:90:
cd:f6:1d:6f:00:c8:71:57:0a:07:38:8a:2e:c7:65:
eb:fa:7a:95:e7:00:5f:1f:09:01:1a:a4:c4:c9:e8:
d2:5f:4d:de:ed:09:b5:5d:07:31:0a:25:1e:e9:d2:
a8:03:dc:63:ad:f1:d9:12:20:7d:aa:dd:57:4a:5a:
f0:e2:f9:5d:63:2d:cc:3c:27:ac:e3:28:d1:e2:46:
2a:06:89:07:ab:52:da:31:86:13:98:0a:10:26:d0:
f5:b0:74:d4:64:5f:2c:92:d5:3e:e4:d2:13:b7:55:
a8:41:77:a3:83:7a:2f:04:f6:a1:62:f3:91:95:2c:
22:fb:39:ff:e2:48:e6:9f:56:cc:b5:29:1f:bd:25:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:6000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:38:3e:33:34:5b:c0:0a:68:48:a0:c3:9e:8c:f0:08:f1:d6:
fe:20:9d:e1:d8:9a:3a:ed:10:17:89:4c:50:10:23:cd:00:60:
c6:4d:e7:2b:65:06:2d:5f:12:7e:3e:97:18:38:1f:08:7d:0c:
4d:0c:bc:06:54:b7:dc:17:7d:65:7c:cb:41:a6:59:94:34:7e:
ae:34:f7:bb:1d:7c:d2:d9:d1:68:df:5a:f2:6b:b1:80:5e:47:
9e:b0:85:5e:df:be:ae:12:1c:29:56:d5:f0:01:f6:41:c4:78:
2d:63:3e:6c:03:a7:0d:03:95:64:52:7b:ce:88:63:5a:e3:a5:
55:a5:2b:26:79:bf:f3:1a:81:9e:57:f0:68:60:ef:c3:8c:a6:
4a:85:d3:26:a2:e6:4a:96:4a:ff:88:02:84:a8:a5:e5:25:25:
0c:04:db:be:50:d0:48:dd:ac:ce:8e:b7:90:5d:44:64:58:6e:
4a:bd:09:06:f1:5f:f9:6a:a9:ee:8d:22:3d:92:90:78:fd:8e:
9e:22:fb:08:fc:f7:67:63:3d:57:5e:b5:15:09:26:dc:1b:01:
bf:07:e1:0e:fc:d1:94:45:89:f7:7d:bf:39:90:19:88:9a:c5:
2c:67:fc:c0:d4:ea:73:11:72:c0:45:e9:0b:f2:db:f0:35:09:
13:c8:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org