Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer (raw, json)
Hash identifier: 44T24EGKxI+JFrSpFAWDUJ1kxCt6IROfaEsfI7LxrP8=
Subject key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6BD61A067C277A73A373D94A41070356E8883BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 27 Jun 2024 06:12:34 +0000
Certificate not after: Thu 26 Jun 2025 06:17:34 +0000
Subordinate resources: IP: 2a14:7581:f40::/44
IP: 2a14:7581:ffd::/48
IP: 2a14:7581:e000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d6:1a:06:7c:27:7a:73:a3:73:d9:4a:41:07:03:56:e8:88:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 27 06:12:34 2024 GMT
Not After : Jun 26 06:17:34 2025 GMT
Subject: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5e:f6:a5:af:28:66:6f:83:ca:18:12:d3:
a5:e7:e2:d3:ef:c0:f2:64:7a:18:a6:10:79:ad:1f:
47:e7:6f:70:44:5b:e1:55:c7:9c:24:58:a3:a8:44:
d1:b2:88:11:94:5f:5f:54:83:7d:bd:20:91:d3:34:
16:27:c0:5b:ac:0b:47:d6:f6:4b:b5:9c:7b:9f:51:
d7:05:ca:fa:f0:15:4b:d6:66:98:68:db:c8:b1:5a:
9f:84:d5:80:c1:70:09:06:a2:98:d8:3f:b6:d3:2e:
df:06:33:3d:b0:78:f1:59:af:fd:1d:1c:08:59:52:
6b:04:cc:19:b1:a8:49:d8:c9:99:78:3b:3e:8d:70:
a3:71:64:03:51:fc:40:29:ff:96:14:5a:10:05:2e:
bb:30:c6:f8:c4:15:5c:20:a0:54:f3:00:22:6a:1a:
ea:31:f9:78:ca:31:cc:0d:a8:b4:20:cc:a8:90:5e:
a2:b3:d1:75:15:21:1b:f2:38:ad:81:c1:df:49:0b:
e9:eb:b5:e5:4c:bf:53:0b:91:42:00:c2:09:af:b7:
a3:e1:b7:f6:9f:89:7c:1d:fd:4a:86:47:38:58:06:
43:36:a5:1f:43:41:9f:35:94:f0:a9:68:a7:c3:8b:
f1:d2:b9:ae:af:4c:4e:43:96:da:0f:a1:63:76:d1:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f40::/44
2a14:7581:ffd::/48
2a14:7581:e000::/36
Signature Algorithm: sha256WithRSAEncryption
60:e4:36:27:f1:bd:53:33:d2:98:ae:04:aa:70:2f:22:95:ae:
9a:3f:cf:13:89:9a:ff:96:18:21:ae:b8:b7:62:bf:13:3b:96:
4f:cf:e3:d3:13:04:50:de:c4:38:44:a3:eb:4d:e9:e9:bf:5d:
98:05:6c:f1:e4:15:f3:68:2c:0a:77:6f:4a:8c:a9:2c:99:d4:
87:0b:91:2d:cd:2f:83:c5:85:e7:b8:92:cf:f2:2e:0a:45:fe:
bf:bc:67:63:2a:0d:ae:e0:3e:3e:d6:78:d3:b8:9d:1c:f6:b2:
b9:79:23:22:79:a0:d6:6e:8d:2c:d2:9e:4e:bd:79:b9:92:46:
99:14:f8:5d:54:6f:b0:3e:11:cd:0b:e8:2d:36:e4:84:fd:44:
93:a5:99:97:92:84:cf:40:52:bd:5b:1e:9c:73:c4:dd:87:74:
59:24:48:3d:6b:d7:17:e2:be:2f:a1:8b:ce:71:cf:e6:50:e8:
eb:73:9e:45:9f:cb:00:04:29:e6:64:f7:03:27:eb:41:a5:9d:
64:4b:09:4f:9e:51:9c:47:f4:94:46:3f:50:b7:d3:05:df:24:
45:3d:3c:76:11:d9:84:a0:8a:d2:05:bd:ab:c1:40:c8:a2:53:
36:07:e6:40:6e:7b:a7:87:23:1b:92:25:f3:a1:1b:d6:11:13:
9b:cb:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:36 2024 by rpki-client on console-ams.rpki-client.org