Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
File: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (raw, json)
Hash identifier: j/hM3WoBiwhX8wDUk/pWiGmUuGY2bPtnB8swR6tZ8e4=
Subject key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 7AC3536AA8F2E2C7F32D6D752117726C5039F6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 17:56:20 +0000
Certificate not after: Sun 06 Jul 2025 18:01:20 +0000
Subordinate resources: IP: 2a11:f2c0:ffc0::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c3:53:6a:a8:f2:e2:c7:f3:2d:6d:75:21:17:72:6c:50:39:f6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 7 17:56:20 2024 GMT
Not After : Jul 6 18:01:20 2025 GMT
Subject: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:b3:5e:78:a7:88:78:9f:2b:f6:c5:82:b0:
b5:fd:b7:96:f7:0a:d0:46:d4:76:9b:61:12:3b:e7:
af:70:47:e5:90:80:df:6c:40:e1:b9:98:da:28:a3:
e3:68:c0:ab:b4:fb:0a:c5:2c:0e:b3:d8:af:ff:e4:
00:cd:93:fc:27:b6:8b:fd:c9:6a:53:3e:2c:01:c7:
4c:a3:08:33:f7:20:7f:46:40:73:3f:37:d8:f4:e6:
db:a4:77:29:b1:85:d3:80:23:29:4e:66:aa:73:2b:
ce:f0:8a:72:eb:01:d9:cf:01:96:fb:44:75:bd:a4:
28:4f:f7:18:16:97:ba:54:ff:44:df:2a:5d:23:fe:
5d:5e:4a:6e:00:ac:f3:f6:c0:4c:43:bb:a8:dd:81:
d0:d4:8e:7a:d7:d0:64:41:c1:c2:e9:6b:27:e7:3e:
5f:ee:9e:db:a9:98:1f:a9:8d:46:b1:c5:d9:f1:af:
ce:14:55:89:fe:05:0d:f1:d9:3e:6e:31:04:95:cd:
93:89:83:52:a4:fe:08:70:12:86:2e:5b:ec:29:53:
c8:d2:68:3d:86:5d:ba:81:76:06:a6:d9:37:a9:69:
55:6d:f0:50:ec:01:1e:ba:8f:ce:ec:16:49:01:d2:
38:cd:a7:27:9c:10:44:67:7d:bb:bd:7c:29:2f:2f:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
21:e3:23:16:9c:16:89:40:ef:69:f9:7d:0e:6c:67:58:5c:33:
94:5f:a3:17:f8:50:06:93:c0:73:21:58:66:cb:e3:1f:42:f8:
cf:54:48:a0:52:e7:2d:c2:7c:90:f7:28:c3:b4:7c:78:72:b7:
5c:76:2d:13:e0:f6:9a:bc:de:c1:d4:62:dc:cd:f4:32:52:97:
9c:ce:f3:93:7c:98:11:38:cc:21:60:f3:6c:d3:70:a7:c1:a7:
0a:6a:ca:38:74:1f:24:7f:30:51:4d:f8:2f:13:45:25:d5:99:
6f:0d:43:4f:9b:85:27:1a:56:78:83:26:09:95:8d:ad:bd:ac:
3a:1e:c0:8b:23:75:86:ca:51:dd:e9:84:ce:99:74:c2:11:1c:
e4:bf:cf:32:b5:8b:f5:28:f1:81:18:05:8a:d7:dd:02:bf:c6:
80:64:81:ca:78:46:c8:af:c6:20:7c:b7:93:a3:14:e3:3a:8f:
5e:04:4a:df:6f:ee:4e:80:a9:ad:ee:0a:70:05:d1:22:1a:57:
33:61:33:45:10:91:aa:6a:1c:90:91:9c:05:5c:02:46:4a:37:
b6:ff:ed:ec:8c:d0:5c:b8:9d:99:1b:5e:d5:52:ff:50:eb:1d:
ae:02:70:3f:1f:81:cd:29:29:7f:f6:bd:2f:48:bf:83:f0:e3:
b9:39:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 14:48:54 2024 by rpki-client on console-ams.rpki-client.org