Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer
File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer (raw, json)
Hash identifier: DGhTQevjS6qcPR8gZSAWA3yY2l29BAtEIm3PUkB/Syc=
Subject key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6285357B320EE01C3EEF0089274645D33BEE4D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 05 Apr 2025 06:43:51 +0000
Certificate not after: Sat 04 Apr 2026 06:48:51 +0000
Subordinate resources: IP: 2a14:7584:3000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:85:35:7b:32:0e:e0:1c:3e:ef:00:89:27:46:45:d3:3b:ee:4d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 5 06:43:51 2025 GMT
Not After : Apr 4 06:48:51 2026 GMT
Subject: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:85:0b:52:69:70:83:7e:07:ff:00:c5:9d:
3a:c0:c0:42:a9:c6:59:cc:31:d6:43:b1:56:12:7c:
3f:63:e9:53:3f:77:ac:9e:3f:07:8d:e3:9e:e3:e4:
96:6a:85:51:93:ca:92:91:65:48:1c:12:28:c6:0f:
74:72:f0:a7:15:72:e3:65:a8:fd:27:8b:da:93:06:
95:54:1a:f1:35:1e:6a:e3:c6:5d:30:f4:06:6c:30:
0a:f8:a2:f9:fb:94:cd:69:54:52:8c:71:ae:01:90:
32:67:99:2d:56:88:73:52:2e:fe:e7:c5:bc:fd:eb:
c8:f1:5a:87:4e:d4:40:29:c2:79:6c:79:37:89:98:
0f:23:d3:54:79:e3:e4:e0:1c:d6:1f:cc:ad:bc:00:
c7:b7:87:92:ac:d0:4d:bd:d8:be:a5:4d:44:77:1c:
dd:b9:3b:36:c5:1b:bf:98:c4:3c:a8:d2:e1:d7:39:
3f:d5:12:e0:9a:bc:48:3a:01:e2:90:b0:90:a1:08:
1e:69:64:14:c9:0f:1b:1d:27:2a:df:37:8c:9a:3c:
e3:f1:7a:d1:c9:c0:8a:5e:47:36:79:24:86:9c:21:
b7:5c:db:db:7c:3e:46:5a:ac:b4:11:5e:92:a7:15:
d3:b9:07:c6:47:0b:6a:8b:eb:65:da:18:da:44:33:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:3000::/36
Signature Algorithm: sha256WithRSAEncryption
5f:e6:55:5b:70:93:8c:e7:49:7d:fe:68:c4:10:26:3b:72:72:
bc:7b:18:97:ad:03:e0:77:24:71:50:cd:ad:38:94:b7:ab:4d:
65:92:26:b1:7d:cf:4b:63:93:84:cc:b1:26:bf:b2:72:4b:5d:
85:6e:42:95:17:ca:04:31:2f:7f:24:fb:ea:dc:20:6d:08:91:
ee:cb:91:3c:77:4e:8e:47:6f:f8:93:78:d9:00:cf:07:0e:e2:
19:9d:62:b2:70:78:06:ce:02:9c:d7:f7:49:be:94:ca:4c:cf:
29:6e:11:bd:ad:2e:af:35:e8:70:1d:fc:ef:72:43:b4:90:e0:
dd:03:7d:11:e6:30:81:82:72:ca:70:d1:24:47:d5:3a:99:75:
f6:b1:33:70:9d:92:ce:38:e1:41:ff:90:6d:84:e3:b7:f7:39:
09:c9:1c:c9:77:a0:36:38:ab:9a:68:bb:b6:a6:b5:3c:46:8f:
11:e3:ec:69:92:dd:b0:06:cd:2e:ae:1c:00:d2:e7:b0:ce:cc:
4f:ff:d6:5a:ca:d9:7e:ea:03:e8:aa:06:a8:9c:6d:a5:01:ed:
de:35:a0:2e:d3:fd:a4:eb:c3:22:b1:f6:b0:6a:b0:a6:00:c1:
e5:54:05:59:2e:85:19:aa:58:05:c7:74:1b:ae:cb:d8:f2:44:
18:5c:42:79
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUYoU1ezIO4Bw+7wCJJ0ZF0zvuTRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA0MDUwNjQzNTFaFw0yNjA0MDQwNjQ4NTFaMDMxMTAvBgNV
BAMTKDk0NkRFMTVEMzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPYULUmlwg34H/wDFnTrAwEKp
xlnMMdZDsVYSfD9j6VM/d6yePweN457j5JZqhVGTypKRZUgcEijGD3Ry8KcVcuNl
qP0ni9qTBpVUGvE1Hmrjxl0w9AZsMAr4ovn7lM1pVFKMca4BkDJnmS1WiHNSLv7n
xbz968jxWodO1EApwnlseTeJmA8j01R54+TgHNYfzK28AMe3h5Ks0E292L6lTUR3
HN25OzbFG7+YxDyo0uHXOT/VEuCavEg6AeKQsJChCB5pZBTJDxsdJyrfN4yaPOPx
etHJwIpeRzZ5JIacIbdc29t8PkZarLQRXpKnFdO5B8ZHC2qL62XaGNpEM/MTAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUbeFdNL6uJOKe
oWo/4eZZGyetnDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0Lzcv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQv
Ny85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEzRkUxRTY1OTFCMjdBRDlDLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWEMDANBgkqhkiG9w0BAQsFAAOCAQEAX+ZV
W3CTjOdJff5oxBAmO3JyvHsYl60D4HckcVDNrTiUt6tNZZImsX3PS2OThMyxJr+y
cktdhW5ClRfKBDEvfyT76twgbQiR7suRPHdOjkdv+JN42QDPBw7iGZ1isnB4Bs4C
nNf3Sb6UykzPKW4Rva0urzXocB3873JDtJDg3QN9EeYwgYJyynDRJEfVOpl19rEz
cJ2SzjjhQf+QbYTjt/c5CckcyXegNjirmmi7tqa1PEaPEePsaZLdsAbNLq4cANLn
sM7MT//WWsrZfuoD6KoGqJxtpQHt3jWgLtP9pOvDIrH2sGqwpgDB5VQFWS6FGapY
Bcd0G67L2PJEGFxCeQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:36 2025 by rpki-client