Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (raw, json)
Hash identifier: CBGq1NlZmG2sIA6VAMrdtMf+IKewwA0piEMY+UFWA/I=
Subject key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 56E37E227CAB765A62780E7BA9B196D1AFBE3C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 20:00:20 +0000
Certificate not after: Sun 06 Jul 2025 20:05:20 +0000
Subordinate resources: IP: 2a11:f2c0:ffcd::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e3:7e:22:7c:ab:76:5a:62:78:0e:7b:a9:b1:96:d1:af:be:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 7 20:00:20 2024 GMT
Not After : Jul 6 20:05:20 2025 GMT
Subject: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:bc:48:86:ea:57:a3:1f:54:46:13:70:99:
fc:de:86:55:f0:de:59:15:ce:ee:07:0f:01:50:bd:
fd:e2:ea:96:c7:b3:25:1c:23:21:8e:18:32:a3:dd:
1b:37:32:9b:8c:ca:9f:be:2a:cf:52:12:be:0a:66:
8d:33:a8:ba:2d:31:ac:a2:db:9d:2b:b0:db:4a:aa:
7c:87:4b:19:06:7f:20:98:98:0b:09:dd:f6:51:a6:
0c:ea:a8:9b:ad:3a:82:25:eb:0c:03:b3:88:d1:d1:
20:0c:d1:19:88:5a:67:cb:6c:82:72:9b:34:92:87:
59:d5:11:72:7b:c7:4d:21:1a:14:4e:6d:b2:92:a2:
b2:0b:2c:35:81:09:a9:da:ad:76:cc:0b:4f:4b:a5:
56:40:d1:86:fd:8d:d1:74:b8:ca:a6:d9:15:ea:c5:
82:b7:cd:82:8e:97:94:e4:67:36:77:4e:15:1c:cd:
94:f9:74:43:3b:0c:c1:34:4b:8d:33:18:a2:b7:23:
96:6b:99:f6:b8:b7:17:76:f7:d1:a8:7b:54:ec:8c:
7d:c2:59:51:09:d8:90:04:41:e3:69:09:3e:33:77:
12:c7:0b:bb:7f:45:63:ce:2b:3e:87:e2:f0:5c:0b:
b8:87:4e:e3:19:cc:17:cf:80:1c:27:27:68:7f:9d:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcd::/48
Signature Algorithm: sha256WithRSAEncryption
5e:b0:c3:86:74:2c:2e:78:a7:d8:f1:66:07:2a:aa:d2:5d:0d:
f2:90:10:b3:7b:77:b6:e5:0f:ab:75:59:3b:34:0f:a4:c6:79:
cf:7e:50:59:b4:89:20:52:e0:b5:07:c8:52:b9:b3:5c:a1:dc:
04:1c:4c:6b:ff:66:97:aa:21:e8:86:36:85:35:dc:e8:e2:d6:
43:93:b3:ed:6b:bd:5c:92:5e:63:c6:7b:4d:c5:39:bf:67:16:
1f:76:01:19:46:8f:0b:01:63:27:ef:5f:34:7f:39:c8:d8:06:
48:20:16:fa:a1:f6:8e:d6:33:ea:ad:6c:08:9d:d2:2b:ab:67:
0c:66:db:3e:6a:b1:ba:01:be:bd:e1:72:20:4b:b9:43:07:8a:
a1:2a:45:63:f1:65:e7:aa:6a:be:e4:04:fa:20:c8:ce:6f:ad:
7c:40:28:89:48:78:62:7b:23:16:94:71:30:78:04:79:79:a2:
e2:54:1d:45:ab:2f:25:d0:5b:99:3b:56:ed:26:ca:24:d7:a3:
7d:f3:c6:87:60:a3:9d:34:49:c6:37:ee:aa:f3:4c:d1:32:82:
d4:d1:b3:1b:24:d9:11:19:a3:21:a9:d0:60:7a:d6:bf:c5:7d:
f9:b9:03:6e:fb:e9:da:93:d9:90:ae:71:d6:0a:6f:26:89:bb:
d5:7f:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:33:40 2024 by rpki-client on console-fra.rpki-client.org