Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
File: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (raw, json)
Hash identifier: Dh1mwlUTMlGkbPsv2oKAQuUKQelXQm9TWTzWrXvc/xw=
Subject key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial: 4C5A7EFB6AEDF933222CA7A3BF3ED44E41C34071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Manifest: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
caRepository: rsync://rpki.qs.nu/repo/cyntest/2/
Notify URL: https://rpki.qs.nu/rrdp/notification.xml
Certificate not before: Mon 06 May 2024 12:30:53 +0000
Certificate not after: Mon 05 May 2025 12:35:53 +0000
Subordinate resources: IP: 2001:67c:1190:555::/64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5a:7e:fb:6a:ed:f9:33:22:2c:a7:a3:bf:3e:d4:4e:41:c3:40:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
Validity
Not Before: May 6 12:30:53 2024 GMT
Not After : May 5 12:35:53 2025 GMT
Subject: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:97:31:be:6c:77:50:ba:ad:de:ac:e2:6d:
2c:8f:b8:5f:99:76:13:b4:75:61:d1:d6:66:21:55:
c4:67:19:d1:f5:fd:48:74:f9:b9:90:5b:99:bf:2b:
54:f1:bb:79:91:47:a3:fd:93:48:95:a0:de:72:2a:
dd:34:ed:26:3a:a3:02:f7:97:3b:21:80:43:9f:18:
0e:f4:b3:d0:ea:3e:50:29:0d:96:1f:05:54:b1:d4:
e9:aa:50:30:24:2b:01:47:48:43:fa:53:96:9d:81:
b1:04:fc:66:1a:18:ca:7a:97:1a:e1:b2:42:f5:d0:
31:8f:e4:9a:f1:05:a4:7e:d5:d5:ec:bf:d3:b7:1b:
9e:80:27:1a:4a:8a:dd:c1:93:86:8c:4d:e5:2f:30:
94:10:f4:e4:b8:7a:1b:e6:8e:46:d3:4c:13:bf:f4:
3e:0e:ea:72:76:5c:50:15:c3:8a:9f:c3:69:aa:dd:
98:38:e7:f5:27:46:d9:81:23:70:63:df:5b:8a:76:
6a:3f:4a:42:ef:14:a3:01:dd:2d:03:3d:a7:2c:3a:
ba:98:5c:c8:f6:7c:e3:10:0b:b9:76:1e:af:57:53:
82:74:41:c8:3c:53:b5:90:04:c0:0e:ce:9a:c1:5d:
d7:35:15:df:5c:82:a2:50:13:77:04:6a:df:4b:bf:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
X509v3 Authority Key Identifier:
keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.qs.nu/repo/cyntest/2/
RPKI Manifest - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
RPKI Notify - URI:https://rpki.qs.nu/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1190:555::/64
Signature Algorithm: sha256WithRSAEncryption
01:08:f1:ce:f4:70:98:bd:aa:fe:3e:9b:d3:e9:11:aa:1d:de:
1c:30:78:e9:2e:d9:1b:ab:b4:4b:6c:83:47:fa:a3:6d:2d:48:
99:92:52:bb:8f:2b:28:b4:28:fd:e1:81:2f:5a:6e:04:67:a5:
3c:d2:a7:70:ec:d9:d8:9b:07:4e:d3:5c:af:33:a1:7c:99:94:
80:d2:e7:22:2c:ac:f6:32:0b:27:2a:14:58:09:4d:16:18:1d:
a5:84:a8:bc:43:d4:bb:78:76:04:2a:f3:5c:15:74:31:d8:ca:
0d:11:d0:50:79:d2:11:67:e6:b0:01:e9:85:eb:4e:30:4d:c4:
92:c6:fb:9e:4f:52:40:aa:09:e5:9a:77:df:05:f7:86:30:77:
cb:9e:20:63:af:7b:b6:90:45:02:63:8b:88:a9:ac:8f:0d:59:
d5:2c:93:da:d2:ea:64:2d:1e:e0:f4:94:75:13:f5:74:11:f0:
a8:34:fd:a5:35:63:4a:bd:d8:90:b4:b7:e1:7e:c4:02:5a:be:
e1:cb:1d:01:d3:cb:e7:37:5b:f7:4b:56:bc:b6:96:86:68:3a:
02:a2:26:e6:e6:95:b7:62:0e:27:67:a8:a2:8b:66:c4:f5:bc:
63:0c:43:ff:50:35:51:f7:11:1f:7f:8a:05:6a:66:2c:39:97:
fc:c9:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:09:37 2024 by rpki-client on console-fra.rpki-client.org