Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.cer (raw, json)
Hash identifier: I/u0kRdp8yBxPjOgIiog7rHB4JaTQt1oYHu+4Op4ghg=
Subject key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 634D487758602E89B0E43C4E3588BD8712CB6A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 26 Jun 2024 04:57:07 +0000
Certificate not after: Wed 25 Jun 2025 05:02:07 +0000
Subordinate resources: IP: 2a14:7581:ff0::/48
IP: 2a14:7581:9000::/38
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4d:48:77:58:60:2e:89:b0:e4:3c:4e:35:88:bd:87:12:cb:6a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 26 04:57:07 2024 GMT
Not After : Jun 25 05:02:07 2025 GMT
Subject: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:34:a6:7d:b1:db:4c:7d:ff:0d:e4:d3:7f:
f8:db:c7:9f:75:cf:18:33:29:b5:3f:eb:bf:e5:91:
09:cb:f4:e9:5a:26:91:8f:2e:5f:c0:54:11:58:92:
a2:3b:9a:38:eb:97:a7:34:8c:5e:82:f4:c7:77:35:
b5:a4:87:59:b8:66:b7:e0:c0:cf:ac:9b:fe:42:e3:
41:11:29:5e:b2:2e:b8:f3:9c:2e:6e:e2:98:54:57:
68:40:48:0b:d7:d4:be:f4:86:ca:10:02:bf:71:7b:
92:6c:30:1b:4b:1e:22:1e:be:59:06:32:0a:80:9c:
5d:17:a8:97:61:46:9d:4b:75:56:11:87:74:e9:8a:
dc:c8:18:b1:08:c8:bb:92:8c:ed:ad:59:69:7d:fb:
f9:21:9f:b6:84:30:57:b6:4f:d7:e6:f3:66:cd:0f:
87:e7:3f:8f:7e:04:ce:c6:bc:23:19:de:57:da:0c:
f3:da:7b:ac:6e:3b:80:d4:d1:9a:60:b1:de:ae:61:
26:0e:29:57:82:f1:a0:4a:97:56:04:30:02:8a:33:
20:4c:a6:7e:c1:f6:36:00:d4:12:08:f1:62:b6:3e:
7c:58:26:2a:2a:66:76:8a:db:45:7a:f0:f6:e6:38:
b5:77:2e:ae:57:0b:8b:ed:06:25:17:b0:9a:28:0c:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff0::/48
2a14:7581:9000::/38
Signature Algorithm: sha256WithRSAEncryption
7f:ab:78:30:63:10:d6:85:6f:bf:7e:81:2b:bf:ae:2a:bd:20:
ea:4e:e3:b1:43:23:74:e1:00:86:e1:0e:82:2b:42:48:4d:de:
b2:0f:18:87:b3:46:a9:f2:21:b1:b0:bb:b4:ce:bf:28:13:54:
7c:d3:97:a4:12:26:ce:36:3f:63:14:d0:05:98:28:95:44:42:
a3:4e:1d:5f:d4:11:e1:c7:0b:60:48:74:b0:f2:30:12:3f:5e:
fd:58:14:fe:17:c6:b7:84:2d:63:62:9c:ff:0e:33:3c:02:5d:
2a:35:56:c7:49:6c:c9:81:cc:01:9b:a7:bc:2f:af:28:5e:99:
26:90:0b:19:55:82:56:9f:47:5c:5a:ff:12:5e:be:8f:46:dd:
98:1b:5f:52:a5:75:ca:dc:c1:f3:74:1f:57:8f:9b:36:6a:ec:
b2:f6:c6:14:83:de:4f:2d:c7:ff:fe:29:46:40:ff:9b:bb:db:
9f:94:34:32:f8:d4:2a:31:81:62:d9:d0:95:6d:42:2d:9f:71:
8e:d8:ee:24:08:a0:cc:86:32:78:86:49:1a:86:45:63:34:f2:
c7:30:0b:af:39:6b:5f:f1:c6:f3:dc:ad:13:06:6a:2a:89:b7:
17:11:e9:87:78:bc:c3:f0:62:2d:82:d7:3a:33:a2:1e:d4:89:
7e:b5:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org