Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer
File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (raw, json)
Hash identifier: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=
Subject key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 7521AE23AA7BCE9EB75CB40E9C81333C89662AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Aug 2024 20:13:26 +0000
Certificate not after: Thu 07 Aug 2025 20:18:26 +0000
Subordinate resources: IP: 2a13:9644:3000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:21:ae:23:aa:7b:ce:9e:b7:5c:b4:0e:9c:81:33:3c:89:66:2a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 8 20:13:26 2024 GMT
Not After : Aug 7 20:18:26 2025 GMT
Subject: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:f9:6f:73:c5:f1:3f:a6:ac:37:94:ed:cc:
9c:2c:9e:fa:ae:02:a6:32:85:a5:dd:33:0d:b4:5c:
bf:6c:2b:d8:66:2d:6e:17:35:d8:d1:70:09:87:f2:
b4:fc:da:72:df:fd:ef:67:6b:cf:fe:98:df:5d:ff:
12:06:b6:94:4d:f6:61:96:13:a1:a4:02:6e:aa:c9:
a7:43:e0:b7:9a:aa:43:1e:f2:37:93:e7:de:92:0a:
b2:f2:4e:02:b1:6f:2b:8c:9d:0c:c7:8d:dc:40:82:
48:9a:b3:ab:31:8d:80:7f:bd:96:6c:aa:a8:0e:91:
29:c3:bc:2e:3c:b4:28:03:c8:4a:d3:42:c5:60:33:
cd:1e:26:11:d3:30:5e:50:32:0a:d4:88:a0:e7:91:
33:f7:65:95:01:9b:34:af:b7:4f:f9:12:8b:11:49:
4d:2e:19:97:8f:7f:6a:77:2b:89:c7:9a:8e:bd:35:
81:63:f1:4c:75:a9:9b:2f:c3:2f:e8:bd:24:f7:a1:
8a:7e:d1:ac:5d:06:68:3c:f8:b4:5e:7a:7e:01:75:
a2:df:55:33:62:33:8e:ae:50:c2:f5:28:a7:de:68:
c2:ca:b2:69:4e:29:57:ef:db:7d:c4:00:f1:55:41:
8a:52:7f:dc:1d:22:60:96:e4:95:28:10:e6:93:d4:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:3000::/40
Signature Algorithm: sha256WithRSAEncryption
23:02:64:61:b3:49:84:96:13:49:bb:fb:62:d7:0d:de:01:8b:
5c:bb:62:b0:54:e0:b8:9f:9f:4a:70:73:75:15:97:f0:11:eb:
c0:3f:f7:d6:dd:e8:75:15:ea:eb:ca:c4:25:b6:a0:58:33:f2:
04:5b:7c:b9:46:c7:08:b6:75:b3:d5:29:1f:f6:f8:ac:86:56:
4d:00:28:ab:6c:54:48:ad:92:0a:66:e8:5a:5f:76:b9:69:69:
96:a8:f6:1d:2d:09:61:e1:97:e1:56:94:2f:fc:8e:0e:29:cf:
3b:18:3a:7a:ea:ea:09:78:4d:42:c5:84:01:59:a8:da:62:ad:
cc:f0:79:33:9b:a6:3f:84:ee:cf:04:b8:67:42:eb:50:db:73:
bd:ec:87:c7:37:af:ec:9a:c4:22:8a:88:c0:85:81:da:ae:75:
ba:73:44:3c:44:91:3d:c5:ee:96:cf:f4:9f:e9:95:bf:92:58:
e3:00:bb:06:cb:71:55:85:68:82:f3:93:f5:12:95:ac:57:50:
f8:fb:89:31:67:da:c4:c0:44:27:75:44:63:02:ec:64:c9:8e:
9b:62:bc:7b:69:b2:2d:71:67:ff:00:86:9b:e7:4f:4f:2d:94:
84:8b:da:f2:4b:e8:89:c5:69:fe:3e:3d:64:c0:e8:29:09:4c:
9e:c0:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:49:41 2024 by rpki-client on console-fra.rpki-client.org