Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
File: 4742E76772F118A935D69FD40F69858085C80999.cer (raw, json)
Hash identifier: V3Tmt7GQs798B4Cgu4nYDsEfMRFW7/d2fxNsVODF9ok=
Subject key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 0FE3F6A311A2A7B0212E2A1D1120F76E1CEC68EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 08 Jul 2024 09:22:54 +0000
Certificate not after: Mon 07 Jul 2025 09:27:54 +0000
Subordinate resources: IP: 2a11:f2c0:fffa::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 20:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e3:f6:a3:11:a2:a7:b0:21:2e:2a:1d:11:20:f7:6e:1c:ec:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 8 09:22:54 2024 GMT
Not After : Jul 7 09:27:54 2025 GMT
Subject: CN=4742E76772F118A935D69FD40F69858085C80999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:ee:9c:c8:9a:29:68:3e:54:f9:ff:65:bf:
2e:e8:9b:63:ee:0c:88:0e:af:eb:68:54:e7:29:b0:
7c:39:2f:13:30:d5:7f:b0:bd:8a:e0:e7:21:85:fa:
e8:86:2d:49:2e:70:ee:55:0a:6b:85:7d:60:da:a8:
65:e4:9d:76:2d:ae:25:76:a9:59:49:9f:aa:a0:09:
14:a3:f3:da:61:6b:67:ac:fc:ae:fd:40:06:61:c6:
7a:68:ae:4a:df:33:76:47:e2:a4:76:73:e3:c3:28:
41:9d:8d:ad:5f:41:43:62:b5:22:2d:79:d0:c3:79:
ac:75:af:05:b1:5e:07:a0:4a:b7:df:60:19:24:9d:
47:10:31:92:59:4e:47:c2:62:9f:29:21:43:d1:9c:
b1:78:7c:a0:33:c0:55:cb:16:ba:ba:fb:bb:b3:48:
f0:f8:d0:3d:68:37:f0:cc:b9:8c:d2:e8:e1:37:74:
0a:57:d6:41:22:9d:62:07:4b:e1:9a:38:c6:8b:fe:
1e:fc:c3:a8:57:5c:ed:5c:70:4f:a7:17:54:0f:67:
da:4a:b0:a0:5f:af:c6:c8:2c:c5:ca:ee:cb:7d:c2:
dc:49:b1:76:a0:24:0b:53:88:b8:bf:be:83:c7:0d:
a3:e2:ff:58:67:61:2c:54:b2:68:14:0b:4c:47:f6:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9f:1d:66:07:c8:11:51:fc:1d:6d:e3:d4:cf:81:9e:70:a3:
d4:38:d0:a0:4c:0c:3d:e9:af:68:44:9c:d5:ce:05:3f:d0:3e:
6a:d9:db:0e:34:91:d1:05:9b:20:8b:5d:5c:20:9f:d9:9e:2f:
ec:2c:fd:3a:d5:21:b3:a3:8b:c2:0a:38:1f:94:51:b8:d6:2a:
ac:f1:c4:9a:d4:c7:5a:88:5d:a5:03:bf:1b:b3:6d:c6:79:ac:
ec:58:ab:52:5e:58:c6:8c:9d:55:09:c9:92:fc:b0:20:97:ed:
4d:95:9e:bf:ab:66:c2:c1:74:53:b8:16:10:bc:9f:e7:b8:5c:
a0:57:33:c5:42:dd:dd:4c:c0:89:e0:11:d0:e6:f4:29:13:2d:
04:59:00:53:a1:3b:a1:c1:7c:e5:b4:26:c9:16:da:25:c6:87:
a5:81:67:9a:d6:e8:b9:42:88:51:7f:db:aa:b1:2f:9a:3c:d3:
2d:d9:3a:7b:9b:40:8b:e3:51:5c:28:2f:fe:62:49:95:e6:1a:
cd:5a:7b:f1:38:c9:5e:32:68:20:1b:27:ab:df:78:b6:e4:33:
9e:d8:72:6d:a2:8c:c9:1b:6d:2b:d7:4e:19:73:54:ec:65:46:
0e:df:b0:a9:a1:b6:72:13:e5:cb:c7:4f:9d:8b:dc:eb:78:2d:
d0:4a:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:32 2025 by rpki-client