Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (raw, json)
Hash identifier: 1tLqZFqjC6SUjqfRKN+94XRr2M8zDiLX86YV29oziuQ=
Subject key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 429C943D4F6D6FFEB1664689F6BFF96931CCBF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 17:58:03 +0000
Certificate not after: Sun 06 Jul 2025 18:03:03 +0000
Subordinate resources: IP: 2a11:f2c0:ffc8::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9c:94:3d:4f:6d:6f:fe:b1:66:46:89:f6:bf:f9:69:31:cc:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 7 17:58:03 2024 GMT
Not After : Jul 6 18:03:03 2025 GMT
Subject: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:13:a3:be:96:07:ed:03:91:5d:25:b0:33:
fa:58:8a:68:c5:14:ef:a9:84:d0:a2:5d:ed:43:52:
12:6d:e3:93:f6:bc:a6:d6:63:e9:a9:06:c9:f5:a1:
f2:1c:c0:cc:9f:c1:0b:8b:70:bb:f8:df:9b:cf:f2:
4e:15:30:26:85:d2:df:06:25:ad:ea:67:47:7f:fa:
bc:cb:7f:9f:61:b3:ed:57:c2:f0:3e:ce:b7:30:8e:
de:27:a5:dc:b5:2e:1b:2f:82:60:06:6f:8d:79:09:
4b:1f:2b:94:ed:3d:d9:4c:32:62:06:b6:62:92:69:
d0:81:c5:30:d5:50:fc:a9:b3:a2:e4:c5:d0:90:77:
aa:f3:c1:4d:2d:f1:22:9e:e6:7c:79:9c:56:55:de:
6e:9e:33:d0:ef:52:dc:4b:4d:58:7b:66:77:d0:fe:
a6:35:ad:bd:44:4c:7f:92:01:a0:8a:1b:da:c2:d3:
eb:b4:e5:64:2b:09:a1:98:3d:fe:61:3d:df:35:04:
21:e8:e3:b2:d4:4d:0f:46:55:3b:68:84:8f:c9:65:
82:5b:1b:f8:1a:30:83:75:f7:51:00:ed:80:be:7d:
d8:1b:b1:6e:ac:44:ae:85:dd:ac:cb:39:b7:7b:db:
52:47:15:27:36:68:ea:3a:b9:b1:ac:c2:ab:c0:03:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc8::/48
Signature Algorithm: sha256WithRSAEncryption
5a:66:45:f6:4c:47:6f:c3:e0:d2:ba:20:46:a7:60:23:0e:36:
d7:6b:40:5e:bd:28:d3:a2:9d:71:aa:c5:fd:dc:b3:40:2f:9d:
93:30:bd:a4:b8:5e:ca:5c:c2:ab:5b:b6:94:a4:0a:4d:96:97:
03:f0:40:de:c9:91:9d:42:96:a7:4d:76:e5:cc:ac:ca:1d:51:
fa:ba:cf:9d:d1:2b:a3:66:4c:41:74:e3:5c:de:29:00:4c:86:
9a:dd:67:b6:60:f7:43:be:6c:d9:b7:e7:b2:fe:e4:de:e7:37:
ac:dc:bf:a3:1b:65:8b:65:69:09:97:06:72:be:c0:2b:ab:e8:
9a:cb:75:a3:73:de:6d:d1:98:88:fb:27:d3:df:5c:1a:02:39:
70:ca:2a:b3:f2:7b:df:32:e8:db:ff:89:ce:1e:b3:22:a3:8a:
94:d8:38:ef:a7:5c:fb:7a:80:55:6f:dc:24:7a:22:d9:a3:b7:
71:9d:d2:8d:8a:30:7c:e2:83:6c:a9:8c:e8:ef:b0:52:b6:57:
8d:b9:9e:2a:70:4c:ff:2c:ae:92:54:5d:6c:17:04:e3:6f:f1:
4b:63:db:93:2a:aa:86:06:ef:96:d8:eb:66:b2:fd:3c:46:7f:
5f:d4:09:95:3d:f8:cb:23:11:7c:40:07:16:f0:6f:e2:b0:6d:
76:cc:63:a0
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUQpyUPU9tb/6xZkaJ9r/5aTHMvxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA3MDcxNzU4MDNaFw0yNTA3MDYxODAzMDNaMDMxMTAvBgNV
BAMTKDFENTcwQjk4NEU5QzVFMzgyQjBBODc5QUEyMUY2NTE4NjIxRjA1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aROjvpYH7QORXSWwM/pYimjF
FO+phNCiXe1DUhJt45P2vKbWY+mpBsn1ofIcwMyfwQuLcLv435vP8k4VMCaF0t8G
Ja3qZ0d/+rzLf59hs+1XwvA+zrcwjt4npdy1LhsvgmAGb415CUsfK5TtPdlMMmIG
tmKSadCBxTDVUPyps6LkxdCQd6rzwU0t8SKe5nx5nFZV3m6eM9DvUtxLTVh7ZnfQ
/qY1rb1ETH+SAaCKG9rC0+u05WQrCaGYPf5hPd81BCHo47LUTQ9GVTtohI/JZYJb
G/gaMIN191EA7YC+fdgbsW6sRK6F3azLObd721JHFSc2aOo6ubGswqvAAzWJAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdVwuYTpxeOCsK
h5qiH2UYYh8FnzAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfNGQ1YzMwOWFlMTFhNDQ5ZWE4NDA3YWNlMWY3OTAxZjAvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBC
OTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/8gwDQYJKoZIhvcNAQELBQADggEBAFpmRfZMR2/D4NK6
IEanYCMONtdrQF69KNOinXGqxf3cs0AvnZMwvaS4XspcwqtbtpSkCk2WlwPwQN7J
kZ1ClqdNduXMrModUfq6z53RK6NmTEF041zeKQBMhprdZ7Zg90O+bNm357L+5N7n
N6zcv6MbZYtlaQmXBnK+wCur6JrLdaNz3m3RmIj7J9PfXBoCOXDKKrPye98y6Nv/
ic4esyKjipTYOO+nXPt6gFVv3CR6Itmjt3Gd0o2KMHzig2ypjOjvsFK2V425nipw
TP8srpJUXWwXBONv8Utj25MqqoYG75bY62ay/TxGf1/UCZU9+MsjEXxABxbwb+Kw
bXbMY6A=
-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:45 2024 by rpki-client on console-fra.rpki-client.org