Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (raw, json)
Hash identifier: B/+QWDHzyOr9SJLC4npzSctgEQuTvpsRqvyFt5a8rhQ=
Subject key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 02B64A86977B2B4E6022BA815300C5A29700FCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 17:59:00 +0000
Certificate not after: Sun 06 Jul 2025 18:04:00 +0000
Subordinate resources: IP: 2a11:f2c0:ffcf::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 20:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b6:4a:86:97:7b:2b:4e:60:22:ba:81:53:00:c5:a2:97:00:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 7 17:59:00 2024 GMT
Not After : Jul 6 18:04:00 2025 GMT
Subject: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:a6:86:b6:d4:2d:c0:4e:03:e3:2d:36:73:
f9:a8:75:2f:eb:c3:1d:27:73:88:54:22:ad:3c:09:
ba:46:c4:df:bc:4a:0d:3c:9f:72:72:60:24:c5:d9:
a4:af:7d:60:d0:85:91:97:17:45:a5:19:c3:4c:2b:
ff:17:34:2a:3b:81:8f:fc:7d:ac:0b:b6:49:d3:75:
b0:32:38:b1:ff:65:cc:68:6d:71:d0:a0:c3:1d:fc:
f5:3e:e9:2c:14:f8:42:73:4e:3b:25:7f:59:2d:bd:
90:1b:e4:85:31:c5:c0:82:84:6e:b0:eb:6e:16:45:
e5:ca:b0:08:e4:7e:5b:43:f1:58:b4:32:6f:6e:72:
7e:c4:3d:68:f1:60:7e:17:29:0c:03:ba:ca:a5:06:
b6:0f:3a:75:52:02:8c:1a:47:3b:d6:27:1a:c6:ce:
51:dc:91:f2:90:d2:96:0c:de:63:55:9e:0f:2a:7e:
d8:a1:02:96:56:af:f6:b8:a3:06:87:cb:53:c0:d3:
eb:44:d9:d5:d3:8d:cb:9e:db:76:65:56:78:4f:2d:
a0:c4:1a:91:92:2e:5f:a7:2f:35:59:16:55:6b:53:
56:2d:2b:fc:f2:5e:fe:fb:74:d3:8c:3f:00:a4:de:
34:01:c2:1f:92:d4:f1:bb:a3:00:96:c6:0c:e0:cc:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcf::/48
Signature Algorithm: sha256WithRSAEncryption
9f:60:0e:9c:39:6e:6b:01:7d:5a:ae:79:b4:99:51:a8:a4:f0:
01:63:c9:b2:ec:63:ac:f7:4b:5f:2e:16:1f:fd:14:45:01:9e:
e8:c0:d2:ff:69:bd:3f:13:37:d1:e4:9b:cd:ab:e6:17:41:a1:
3d:dc:d4:1e:ae:e8:f8:3a:52:7e:9e:59:3a:66:97:da:d8:c0:
67:0a:76:5f:0b:89:01:83:d1:45:76:9b:b1:e5:7d:bf:4b:8c:
13:11:68:b8:b6:0c:89:d3:3c:a4:13:7f:c5:04:2f:e5:4d:5b:
69:2c:f3:f1:4b:6a:fe:0e:ef:e1:66:44:04:47:e5:b7:28:d4:
c5:c2:38:19:8b:97:11:53:8d:5c:ef:a5:32:e2:ca:99:80:91:
8a:83:40:ed:92:9d:8d:c5:84:8a:6b:fe:4b:cf:14:cb:69:58:
40:a0:28:23:c9:a8:da:9f:7c:97:f9:3a:c1:81:dd:92:b8:e2:
a6:df:3b:27:8f:1b:89:15:fb:36:d6:bb:c3:6e:5c:ed:00:62:
56:82:43:46:73:b2:19:76:2b:58:ab:fe:4f:44:2a:37:32:7c:
a8:e7:21:72:e2:df:dd:ad:50:6c:1d:e8:fc:a2:6e:8c:12:6d:
07:dd:f5:1f:a2:e7:a4:47:20:01:20:5a:b4:86:19:ad:bc:9e:
55:92:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:12 2025 by rpki-client