Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer
File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer (raw, json)
Hash identifier: DGz79kRZ+4IH1Q+ZQGK8lfOAivKt48+s6XiOLB68ZgM=
Subject key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1A1DCED5B298C6A4A24D25745270D90D9AD8C991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 17:59:19 +0000
Certificate not after: Sun 06 Jul 2025 18:04:19 +0000
Subordinate resources: IP: 2a11:f2c0:ffe0::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 20:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1d:ce:d5:b2:98:c6:a4:a2:4d:25:74:52:70:d9:0d:9a:d8:c9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jul 7 17:59:19 2024 GMT
Not After : Jul 6 18:04:19 2025 GMT
Subject: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:e5:04:41:de:5c:81:a9:d6:b1:cc:a2:49:
95:66:7c:92:d7:b7:09:91:96:ea:1d:7c:96:66:47:
01:1f:94:0c:b7:28:97:dc:b7:30:fc:fd:ab:8a:40:
d1:97:bc:71:e9:92:40:ae:b3:ae:07:6d:0d:f6:40:
e5:61:e4:12:65:00:fb:04:1f:8a:ad:29:34:08:93:
af:8b:ef:e6:be:d9:9f:dd:38:44:00:83:5e:9d:f9:
6e:9a:60:e3:d5:7e:a2:ff:84:db:20:14:bb:45:bf:
a9:61:8c:52:55:bd:24:a1:a4:10:23:73:f2:9c:20:
44:d4:a6:58:3c:ee:9f:96:23:1b:50:d3:90:a8:6f:
b7:14:cd:08:bc:df:df:49:f3:ed:c7:b6:7b:d6:b3:
6e:87:c5:c5:e7:1f:fc:57:38:ae:69:57:cc:c9:63:
e5:9a:76:0a:d6:b2:89:6f:16:50:93:a9:5d:c6:58:
29:c1:7d:62:ad:9e:ee:ee:07:4d:0d:a2:23:02:b1:
48:a7:a8:ba:b3:b5:ed:bf:2f:f0:b9:d7:4d:0e:d8:
7f:f6:80:a8:9f:42:d5:4c:67:35:20:13:1e:b6:e2:
eb:7c:f9:9d:2d:f3:13:0c:a9:62:76:ec:74:79:c0:
23:13:49:65:97:d2:ca:98:d0:5c:12:ac:f7:f1:15:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
22:99:62:d5:57:b4:4a:11:b3:58:eb:e1:95:d2:c2:d4:69:4b:
5c:0d:02:97:c6:d7:44:18:59:e8:08:d2:4c:ac:43:de:d8:86:
11:4e:d6:95:ad:f6:d7:72:04:9b:93:9f:a5:5b:84:3d:46:5f:
28:7d:73:a5:b1:c5:48:a8:d8:f3:2e:51:24:cc:75:6b:0f:2d:
f4:0b:cc:0b:61:da:d1:c3:97:26:a2:20:be:f3:f2:65:6d:52:
60:3a:2f:70:bb:3c:b6:d7:97:9b:c2:17:a5:61:0c:7c:73:d1:
db:6a:ce:79:d0:c5:31:b7:bf:07:b6:55:f7:c0:5b:5c:98:fc:
5c:ef:5f:d6:ba:dd:d6:20:8f:8b:b7:2c:37:e0:7b:10:5f:83:
85:65:f4:29:e6:7f:6d:e0:20:10:ac:7b:d7:9e:c5:cb:a3:9c:
a3:ea:da:7e:d4:87:e3:f9:d9:8a:c9:7e:b7:f2:cf:76:8f:30:
8b:dc:9d:73:4f:94:00:22:7b:96:db:95:25:5e:4d:33:43:f8:
9c:25:85:ac:2a:f6:3c:2d:d6:85:80:5d:c0:8e:15:d5:94:5a:
85:dd:1f:cc:f4:62:ab:af:a8:e1:52:d6:56:05:de:f0:0f:2e:
3c:36:97:44:d4:51:33:f8:86:5f:5e:4b:1f:78:ed:94:dc:42:
d2:b5:27:5e
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUGh3O1bKYxqSiTSV0UnDZDZrYyZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA3MDcxNzU5MTlaFw0yNTA3MDYxODA0MTlaMDMxMTAvBgNV
BAMTKERDMkQzNEZFMEY4QzkwQjJBOENBRUM0NzI3RDZCQTMxQjk4RDI1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPuuUEQd5cganWscyiSZVmfJLX
twmRluodfJZmRwEflAy3KJfctzD8/auKQNGXvHHpkkCus64HbQ32QOVh5BJlAPsE
H4qtKTQIk6+L7+a+2Z/dOEQAg16d+W6aYOPVfqL/hNsgFLtFv6lhjFJVvSShpBAj
c/KcIETUplg87p+WIxtQ05Cob7cUzQi8399J8+3HtnvWs26HxcXnH/xXOK5pV8zJ
Y+WadgrWsolvFlCTqV3GWCnBfWKtnu7uB00NoiMCsUinqLqzte2/L/C5100O2H/2
gKifQtVMZzUgEx624ut8+Z0t8xMMqWJ27HR5wCMTSWWX0sqY0FwSrPfxFX1NAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcLTT+D4yQsqjK
7Ecn1roxuY0l0TAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfNWM1NTIyYmE2OWZlNDdkMmI2M2M3YjY1MzFhMjQ0ZjgvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0
RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwQqEfLA/+AwDQYJKoZIhvcNAQELBQADggEBACKZYtVXtEoRs1jr
4ZXSwtRpS1wNApfG10QYWegI0kysQ97YhhFO1pWt9tdyBJuTn6VbhD1GXyh9c6Wx
xUio2PMuUSTMdWsPLfQLzAth2tHDlyaiIL7z8mVtUmA6L3C7PLbXl5vCF6VhDHxz
0dtqznnQxTG3vwe2VffAW1yY/FzvX9a63dYgj4u3LDfgexBfg4Vl9Cnmf23gIBCs
e9eexcujnKPq2n7Uh+P52YrJfrfyz3aPMIvcnXNPlAAie5bblSVeTTND+Jwlhawq
9jwt1oWAXcCOFdWUWoXdH8z0YquvqOFS1lYF3vAPLjw2l0TUUTP4hl9eSx947ZTc
QtK1J14=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:30 2025 by rpki-client