Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer (raw, json)
Hash identifier: NheIpMMeJZgPX1oWzYd7wMZzLXawa/m4wwQ9dmREg7o=
Subject key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 079A5D3EC688CE2A500DC6F9D479D82D5DEFC350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 14 Oct 2024 12:50:11 +0000
Certificate not after: Mon 13 Oct 2025 12:55:11 +0000
Subordinate resources: IP: 2a14:7580:9000::/36
IP: 2a14:7581:f40::/44
IP: 2a14:7581:ffd::/48
IP: 2a14:7581:e000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9a:5d:3e:c6:88:ce:2a:50:0d:c6:f9:d4:79:d8:2d:5d:ef:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 14 12:50:11 2024 GMT
Not After : Oct 13 12:55:11 2025 GMT
Subject: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5e:f6:a5:af:28:66:6f:83:ca:18:12:d3:
a5:e7:e2:d3:ef:c0:f2:64:7a:18:a6:10:79:ad:1f:
47:e7:6f:70:44:5b:e1:55:c7:9c:24:58:a3:a8:44:
d1:b2:88:11:94:5f:5f:54:83:7d:bd:20:91:d3:34:
16:27:c0:5b:ac:0b:47:d6:f6:4b:b5:9c:7b:9f:51:
d7:05:ca:fa:f0:15:4b:d6:66:98:68:db:c8:b1:5a:
9f:84:d5:80:c1:70:09:06:a2:98:d8:3f:b6:d3:2e:
df:06:33:3d:b0:78:f1:59:af:fd:1d:1c:08:59:52:
6b:04:cc:19:b1:a8:49:d8:c9:99:78:3b:3e:8d:70:
a3:71:64:03:51:fc:40:29:ff:96:14:5a:10:05:2e:
bb:30:c6:f8:c4:15:5c:20:a0:54:f3:00:22:6a:1a:
ea:31:f9:78:ca:31:cc:0d:a8:b4:20:cc:a8:90:5e:
a2:b3:d1:75:15:21:1b:f2:38:ad:81:c1:df:49:0b:
e9:eb:b5:e5:4c:bf:53:0b:91:42:00:c2:09:af:b7:
a3:e1:b7:f6:9f:89:7c:1d:fd:4a:86:47:38:58:06:
43:36:a5:1f:43:41:9f:35:94:f0:a9:68:a7:c3:8b:
f1:d2:b9:ae:af:4c:4e:43:96:da:0f:a1:63:76:d1:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:9000::/36
2a14:7581:f40::/44
2a14:7581:ffd::/48
2a14:7581:e000::/36
Signature Algorithm: sha256WithRSAEncryption
19:49:6c:5b:9e:c6:fe:ba:47:96:8c:b4:6b:45:ba:5b:4d:84:
3e:df:ad:5f:51:5c:14:2b:79:2c:19:45:19:a9:9f:a3:0e:ee:
bb:7d:ab:52:55:55:4a:bd:9b:80:8b:3e:7f:66:c0:29:60:70:
8f:78:4f:e1:d5:93:a7:2c:92:05:eb:59:f8:7c:1c:a3:fa:8e:
c1:80:11:ac:60:84:b2:0f:d9:3e:ed:88:2e:d7:ed:cf:b6:c6:
33:18:b0:4e:db:fa:fb:3e:25:7f:cb:21:31:7b:c0:7a:e7:58:
50:d1:4f:5b:14:9e:db:ed:36:61:1b:c6:76:04:d0:43:c7:eb:
c7:68:c6:0d:6f:f5:22:9e:5f:3e:b2:6f:5a:0e:3d:bd:96:4c:
da:f9:f2:b6:eb:d9:20:41:78:61:1a:f6:91:9f:0e:04:0f:00:
a4:05:b4:6d:aa:e8:39:b3:b4:a2:46:77:a9:2b:65:e4:e4:14:
3f:f8:39:fb:45:92:c7:fe:df:83:59:9c:1f:d1:ea:df:5a:da:
28:8b:d6:32:4f:87:5c:ec:1f:dc:4a:7a:4b:ff:1d:6f:d2:38:
10:84:97:3a:48:51:3b:85:80:43:89:22:a7:a9:9b:89:f2:d0:
84:55:69:1c:0c:48:d6:b3:0b:e6:cc:d6:3f:56:5a:62:ed:ad:
d6:29:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org