Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
File: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (raw, json)
Hash identifier: R9kWauZtTFpGZjX6VrWpxuVpEbSEHz0Up7w0vWfXk1k=
Subject key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 6B3C009773BD61E9783DC1CBBCA8F5462B322207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 18:00:55 +0000
Certificate not after: Sun 06 Jul 2025 18:05:55 +0000
Subordinate resources: IP: 2a11:f2c0:aca0::/44
IP: 2a11:f2c0:fff6::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3c:00:97:73:bd:61:e9:78:3d:c1:cb:bc:a8:f5:46:2b:32:22:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 7 18:00:55 2024 GMT
Not After : Jul 6 18:05:55 2025 GMT
Subject: CN=970AD94C83244100A97F9186D53DADAB07995EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:60:28:eb:ad:72:2f:2d:60:f6:5d:15:78:
7c:58:9d:05:16:f6:80:55:36:5c:4b:62:08:9f:8f:
36:5c:b8:97:ae:2e:3f:35:37:6f:9e:16:b8:4f:fa:
90:20:1c:0b:d7:91:01:21:c4:b0:ad:92:8a:12:0e:
3a:61:22:66:6f:1a:c8:0d:60:1a:93:88:83:7c:51:
fc:56:f4:d2:d3:36:38:b7:4b:44:0a:68:37:28:d8:
a7:b2:93:2d:dc:aa:6d:af:91:a7:b8:43:b0:43:53:
a5:ad:f8:36:37:2c:5a:0f:31:0c:e8:c6:3d:3c:7b:
78:c7:33:25:19:6e:7e:21:59:fc:30:5e:4d:fa:36:
ca:fb:ff:a8:c0:74:e3:5d:d4:52:01:4a:da:59:be:
dc:ef:78:c8:55:ac:b1:bc:51:ef:22:f0:ec:3d:13:
e3:45:60:50:d3:00:02:e1:c3:03:2a:a1:a9:93:d3:
ff:2d:bf:f9:86:03:a9:44:96:02:1d:06:38:4b:1f:
ec:aa:e0:6f:0f:56:07:bd:d8:ab:64:e0:7b:dc:92:
39:1f:54:f3:ed:76:4d:4e:dc:bf:bb:63:83:d6:f8:
5c:c8:3b:a3:8b:be:74:6a:55:ac:dc:a1:ad:44:33:
51:22:d7:98:9d:62:af:b9:38:70:1d:22:90:d8:30:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:aca0::/44
2a11:f2c0:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
5f:f5:2b:ec:1f:c9:83:1a:cd:25:6b:6a:62:eb:a1:0f:6a:39:
6a:5b:02:5d:32:e0:83:c5:82:b8:71:2c:71:13:51:05:a9:3f:
12:81:bb:d5:c5:24:92:62:0b:7c:e2:3b:48:c9:af:47:1b:e1:
aa:e5:7a:1a:68:45:23:6a:30:a2:06:51:7f:6f:44:e4:e9:f0:
7a:49:d7:33:ec:67:42:e3:39:ae:88:fa:f7:1c:86:1e:e3:06:
39:60:bf:fe:73:62:1b:19:56:be:b1:74:0b:3b:08:2d:8c:fe:
09:41:92:6f:c8:42:02:32:b2:c5:34:3e:87:1e:e4:1b:92:75:
85:13:d1:c3:1b:ab:3c:60:0f:a7:14:d3:0e:9b:c8:cd:e8:2b:
7c:c4:d5:fb:74:58:a4:b8:ae:6f:bf:e4:19:96:af:ef:50:2d:
f7:56:12:93:95:d7:23:03:61:26:ae:30:ef:1f:f2:1f:5a:31:
2a:e7:f2:a8:e8:5c:a9:99:7d:18:d1:39:d5:54:69:5b:8b:d1:
57:e3:7b:e6:39:10:34:d3:ca:2e:6e:76:7d:bd:b2:f8:36:62:
b7:c8:5d:9f:80:31:9a:21:09:31:1b:2c:c4:82:38:3a:ef:64:
e9:ea:36:10:81:bf:46:b3:97:87:0a:bc:fe:81:9d:f3:30:f2:
c7:74:ab:5c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUazwAl3O9Yel4PcHLvKj1RisyIgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA3MDcxODAwNTVaFw0yNTA3MDYxODA1NTVaMDMxMTAvBgNV
BAMTKDk3MEFEOTRDODMyNDQxMDBBOTdGOTE4NkQ1M0RBREFCMDc5OTVFRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSGAo661yLy1g9l0VeHxYnQUW
9oBVNlxLYgifjzZcuJeuLj81N2+eFrhP+pAgHAvXkQEhxLCtkooSDjphImZvGsgN
YBqTiIN8UfxW9NLTNji3S0QKaDco2Keyky3cqm2vkae4Q7BDU6Wt+DY3LFoPMQzo
xj08e3jHMyUZbn4hWfwwXk36Nsr7/6jAdONd1FIBStpZvtzveMhVrLG8Ue8i8Ow9
E+NFYFDTAALhwwMqoamT0/8tv/mGA6lElgIdBjhLH+yq4G8PVge92Ktk4Hvckjkf
VPPtdk1O3L+7Y4PW+FzIO6OLvnRqVazcoa1EM1Ei15idYq+5OHAdIpDYMEJnAgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXCtlMgyRBAKl/
kYbVPa2rB5le6TAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfOWQ4MzljYTBhNTVlNDJhNDlkMTBkZTA3MWY0NjU5OGIvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5
NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAa
MBgEAgACMBIDBwQqEfLArKADBwAqEfLA//YwDQYJKoZIhvcNAQELBQADggEBAF/1
K+wfyYMazSVramLroQ9qOWpbAl0y4IPFgrhxLHETUQWpPxKBu9XFJJJiC3ziO0jJ
r0cb4arlehpoRSNqMKIGUX9vROTp8HpJ1zPsZ0LjOa6I+vcchh7jBjlgv/5zYhsZ
Vr6xdAs7CC2M/glBkm/IQgIyssU0Poce5BuSdYUT0cMbqzxgD6cU0w6byM3oK3zE
1ft0WKS4rm+/5BmWr+9QLfdWEpOV1yMDYSauMO8f8h9aMSrn8qjoXKmZfRjROdVU
aVuL0Vfje+Y5EDTTyi5udn29svg2YrfIXZ+AMZohCTEbLMSCODrvZOnqNhCBv0az
l4cKvP6BnfMw8sd0q1w=
-----END CERTIFICATE-----
Generated at Wed Sep 18 14:48:54 2024 by rpki-client on console-ams.rpki-client.org