Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
File: AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer (raw, json)
Hash identifier: TUJ33MtsWvpewonyCuOgBAysxQooD1lYfyt0e4N3ZsU=
Subject key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 58E0CC59DD9677C37174AB814CA72484A69AB530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 12 Oct 2024 16:21:31 +0000
Certificate not after: Sat 11 Oct 2025 16:26:31 +0000
Subordinate resources: IP: 2a14:7581:2000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e0:cc:59:dd:96:77:c3:71:74:ab:81:4c:a7:24:84:a6:9a:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 12 16:21:31 2024 GMT
Not After : Oct 11 16:26:31 2025 GMT
Subject: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:17:ed:37:5a:57:ae:87:d1:38:e4:a9:cb:
49:ec:bd:14:fd:f1:a8:9d:3b:bb:bd:a3:70:67:21:
63:29:5a:97:6e:82:3c:7c:17:d0:a3:56:2d:b5:01:
7f:57:a3:8e:73:d2:8b:67:cf:83:2e:c5:5e:8d:45:
6a:70:04:ed:58:92:a4:5f:ac:de:77:81:8c:e3:05:
e7:04:e4:3a:c0:63:10:d8:39:fb:f4:c9:36:7b:e3:
80:ee:34:dd:6e:dc:17:5e:d2:be:f8:cf:61:07:4f:
a2:bc:5c:99:7c:ab:71:7e:0c:c3:b3:29:19:78:5a:
88:fa:a4:22:a7:0d:f7:9e:3a:1f:64:5e:84:05:1d:
75:59:72:4e:2a:f7:51:03:75:e0:1a:b8:97:a2:b6:
f7:7f:9b:a6:02:8f:ae:d8:d1:a9:84:07:60:8d:76:
2a:80:cb:b3:59:18:11:e2:c3:99:17:cd:d8:4e:37:
86:98:5f:e9:32:48:cc:8e:7c:c2:c9:00:ed:73:24:
c3:24:db:8e:32:5b:f9:05:df:11:73:06:8a:5a:18:
a1:2d:fd:68:56:90:56:95:31:af:b2:89:bd:ba:38:
88:e6:35:29:cb:51:cd:d5:eb:7c:0f:57:27:98:35:
ff:ca:b2:5d:52:05:1e:95:23:45:5c:1c:10:b0:c3:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:58:54:f2:e3:74:86:69:b6:d6:d5:0d:86:f9:47:80:6f:3e:
1d:cd:24:7e:40:bf:cb:4f:ab:b3:e5:39:88:b1:71:07:b1:d0:
94:6b:47:9a:1a:82:a0:d3:bf:ab:94:a1:93:d8:f6:d5:19:a6:
f4:d0:38:35:7b:9f:a5:3e:3b:8f:4d:22:f8:8d:07:df:2b:40:
d5:6c:dd:88:15:b9:50:c2:f4:dc:22:a0:4d:28:b2:fc:28:31:
c5:bb:f4:23:02:e7:62:97:01:c5:84:de:88:a0:80:21:a5:3d:
65:f1:f5:e2:c5:d6:7f:66:50:c4:61:12:b1:38:10:ce:87:16:
f2:c6:36:40:1d:2d:ff:c6:c4:47:0d:8f:90:91:1e:52:d8:75:
de:59:65:1a:05:f2:81:c4:f3:31:2e:d7:4e:bf:92:f3:1e:0a:
2f:b7:e7:00:43:1c:92:7d:60:74:ff:55:0c:e0:ff:75:46:e7:
e8:fe:ca:98:e9:c2:5a:64:ff:f0:64:11:54:06:f4:f1:d5:9a:
89:98:7f:5e:c4:d1:1c:2c:e4:a6:4f:e9:32:15:e7:80:e2:e0:
18:61:a6:fb:38:4e:07:72:69:8d:8f:94:44:06:16:11:72:fd:
e9:80:b6:1b:01:ac:d9:3b:45:c9:c7:ad:45:81:2b:d9:d6:c7:
7d:5a:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org