Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (raw, json)
Hash identifier: R1QXpNLd3jkLFUrDHN6wS/O2LDa2jU5nYoOEUmCHNfg=
Subject key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 6A0C83C9354DC8FB29F63973D5D40AD651E7C497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 08 Jul 2024 09:19:56 +0000
Certificate not after: Mon 07 Jul 2025 09:24:56 +0000
Subordinate resources: IP: 2a11:f2c0:ffcb::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0c:83:c9:35:4d:c8:fb:29:f6:39:73:d5:d4:0a:d6:51:e7:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 8 09:19:56 2024 GMT
Not After : Jul 7 09:24:56 2025 GMT
Subject: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:19:50:c2:60:cc:fc:ca:49:0e:3b:9c:a6:a4:
c9:1e:24:b8:20:77:31:9e:ae:b6:c8:4a:76:a0:53:
da:99:8f:86:92:75:ba:49:f2:1b:22:0a:3f:1b:d9:
70:e6:66:e1:58:18:d9:41:41:8c:1a:e3:e3:0a:b6:
ae:a1:39:91:16:03:64:c4:be:67:b6:b4:de:57:45:
51:e6:87:a5:ba:99:3d:57:0c:26:f0:81:7f:28:b1:
5e:96:95:84:06:be:9e:c9:27:36:78:52:c0:aa:c7:
d6:26:d2:2b:98:76:b7:d9:91:c6:ba:8c:a6:5a:a2:
9b:d1:81:ed:9f:2c:c5:a3:1f:28:a0:30:c9:35:b6:
58:fa:a6:d6:46:5a:06:8f:f5:7d:36:ff:de:52:91:
26:3f:11:be:67:f6:db:a5:39:83:a2:27:04:d6:98:
40:84:96:a0:fc:4d:f3:31:25:00:be:98:25:1e:f7:
f5:f7:1d:c6:ff:60:7b:ee:8e:ea:ec:e3:cf:dc:b7:
3a:76:37:c1:67:6f:2e:0a:b9:78:9f:74:df:59:dc:
56:11:2b:0c:41:5a:1f:33:0c:5d:89:6d:66:14:a3:
70:54:6f:9f:43:37:4c:bc:94:43:14:f3:c8:f0:d0:
92:23:a1:72:73:d5:14:3c:3c:3e:a6:d7:c7:e0:dd:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcb::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ea:e0:54:f1:f9:25:aa:84:e5:89:4d:ef:bd:47:ff:f7:f1:
b2:bd:5f:cd:4c:3a:fe:07:26:dc:19:ee:d4:7a:07:22:12:a4:
b5:fe:c4:f8:d4:63:5c:25:ae:3a:84:58:0a:c1:f4:3d:61:c1:
43:15:90:5d:8b:c4:f3:9f:77:2f:c8:bb:89:41:82:35:b1:66:
2c:7e:96:e2:79:01:97:36:e9:6e:c6:bf:6b:cd:2f:f0:fc:e3:
c8:8b:65:66:12:e7:79:2a:63:11:67:89:78:5b:e9:97:63:05:
6d:7f:0c:44:aa:7d:aa:42:f6:fa:10:eb:dd:40:dc:9e:3b:25:
52:6a:31:af:aa:39:41:63:ea:00:0d:8e:b0:00:e9:8d:7d:42:
5a:e9:75:5a:54:98:f5:f2:f9:86:b4:fd:fd:ed:75:32:e5:a9:
f9:38:6f:4d:a6:03:0f:a1:7b:3d:99:d8:11:a0:48:93:e8:db:
87:86:a8:8d:f9:16:12:78:4a:5e:03:44:fc:c8:be:06:13:c4:
c2:f7:9d:f6:0e:38:2b:93:bf:80:c1:1d:eb:e8:0e:5b:57:c6:
0f:ae:04:81:81:fa:45:65:b4:5f:f1:d8:e1:77:6c:45:1e:aa:
7f:d1:a1:ed:d6:30:f0:a2:b2:01:fe:49:65:3f:d3:bf:3a:00:
43:1c:89:cc
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUagyDyTVNyPsp9jlz1dQK1lHnxJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA3MDgwOTE5NTZaFw0yNTA3MDcwOTI0NTZaMDMxMTAvBgNV
BAMTKDRCQTQ1MTFGNEI4MUM1NjVDRUQzRTcwQjMwMjBGQkQwRUQwNTU2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHGVDCYMz8ykkOO5ympMkeJLgg
dzGerrbISnagU9qZj4aSdbpJ8hsiCj8b2XDmZuFYGNlBQYwa4+MKtq6hOZEWA2TE
vme2tN5XRVHmh6W6mT1XDCbwgX8osV6WlYQGvp7JJzZ4UsCqx9Ym0iuYdrfZkca6
jKZaopvRge2fLMWjHyigMMk1tlj6ptZGWgaP9X02/95SkSY/Eb5n9tulOYOiJwTW
mECElqD8TfMxJQC+mCUe9/X3Hcb/YHvujurs48/ctzp2N8Fnby4KuXifdN9Z3FYR
KwxBWh8zDF2JbWYUo3BUb59DN0y8lEMU88jw0JIjoXJz1RQ8PD6m18fg3XUhAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLpFEfS4HFZc7T
5wswIPvQ7QVWLzAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfOTczZTdhOThhNzFiNDlmZmJiMjJiNzZlZDVmMTI5ZTIvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUx
MUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/8swDQYJKoZIhvcNAQELBQADggEBAGvq4FTx+SWqhOWJ
Te+9R//38bK9X81MOv4HJtwZ7tR6ByISpLX+xPjUY1wlrjqEWArB9D1hwUMVkF2L
xPOfdy/Iu4lBgjWxZix+luJ5AZc26W7Gv2vNL/D848iLZWYS53kqYxFniXhb6Zdj
BW1/DESqfapC9voQ691A3J47JVJqMa+qOUFj6gANjrAA6Y19QlrpdVpUmPXy+Ya0
/f3tdTLlqfk4b02mAw+hez2Z2BGgSJPo24eGqI35FhJ4Sl4DRPzIvgYTxML3nfYO
OCuTv4DBHevoDltXxg+uBIGB+kVltF/x2OF3bEUeqn/Roe3WMPCisgH+SWU/0786
AEMcicw=
-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:45 2024 by rpki-client on console-fra.rpki-client.org