Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (raw, json)
Hash identifier: W33AY8n66YBiKFAdMlU1PcWz7qog9dVaO6LUtxa3ULA=
Subject key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 16D9D4092F8754A98FA7C05B9E051EFE89149873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Aug 2024 17:25:35 +0000
Certificate not after: Thu 07 Aug 2025 17:30:35 +0000
Subordinate resources: IP: 2a13:9644:4000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:d4:09:2f:87:54:a9:8f:a7:c0:5b:9e:05:1e:fe:89:14:98:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Aug 8 17:25:35 2024 GMT
Not After : Aug 7 17:30:35 2025 GMT
Subject: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:f1:8c:34:0d:01:eb:65:f7:f3:f4:11:6a:
c4:7c:25:23:7a:da:f0:34:6d:81:8f:d0:ba:77:05:
f2:f0:d1:01:ef:9b:da:ff:07:62:77:9a:d7:c7:c2:
4d:9c:39:72:ea:70:32:e8:2b:54:ef:c5:be:be:60:
06:c6:cd:93:46:82:ab:91:59:e5:71:b2:17:96:5d:
4e:cc:a6:5d:5a:1b:09:21:99:ad:2d:6f:bf:a7:13:
5d:3f:79:4e:5b:ed:c6:56:30:44:55:54:71:1a:73:
43:b7:53:c4:bc:d3:2e:68:c9:e0:90:ea:85:02:0a:
10:6f:6a:55:e5:c9:30:27:4e:23:18:a4:bc:76:c6:
e1:5f:01:e3:33:0f:6e:8d:ce:20:3a:fc:e2:5f:6a:
40:1c:77:de:0a:cb:e5:45:1c:d7:f2:61:8c:3b:8b:
28:ae:89:5b:b8:b6:24:66:97:18:c0:e4:e2:30:d2:
08:c9:a5:97:c1:60:7c:0c:25:ae:4b:23:77:38:d9:
4e:9a:58:d2:ff:e6:18:cb:26:34:35:a0:c9:9e:89:
19:c3:92:72:40:95:0d:9f:09:85:cf:f1:19:b8:e1:
4c:5c:f5:5f:8a:d5:94:12:3f:20:20:59:25:2d:8b:
f3:88:d3:0b:64:5b:1e:3e:47:14:e6:24:eb:91:ef:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:4000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:eb:3e:6f:a9:51:47:e3:25:f1:47:e7:36:a9:61:c3:35:5d:
e4:32:3a:1a:90:d8:94:48:21:2c:91:33:71:70:bf:2a:03:ed:
73:7d:33:57:bf:15:2f:60:47:b8:38:a9:db:c4:3e:76:ee:50:
e4:cc:bd:37:a1:fc:6e:22:8c:d5:21:8f:5b:ed:c2:33:24:c1:
10:fd:40:d2:30:cc:eb:08:f5:d4:c3:49:3d:02:6c:45:0c:1f:
22:e4:21:dc:5d:9b:91:4c:d4:dd:02:c7:91:9e:ba:bc:c9:e7:
0e:22:ad:d0:1e:4f:2c:4a:cf:37:3b:38:86:cd:49:4f:50:74:
d1:a1:cb:6d:f4:4b:39:15:e0:9f:3e:55:cb:75:54:d8:d2:a2:
a6:e6:a9:24:84:bf:7a:0c:26:58:93:9f:4b:50:a6:17:0d:ce:
ee:85:8e:4a:c3:c2:dd:a8:49:a7:4e:ef:ec:ba:d2:6f:9d:43:
8f:af:05:a8:07:48:13:17:7d:8c:0c:2e:3f:f7:12:34:ed:37:
77:b1:97:29:69:13:e9:19:a7:48:29:4e:4a:ae:e5:fe:b6:db:
9f:0c:51:4e:5f:cc:4a:e7:9a:b3:6e:95:1f:7c:5d:af:4a:c5:
36:9d:92:36:a9:cc:b6:75:07:ad:be:ea:1f:ab:2b:db:d3:d4:
f3:f9:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:49:41 2024 by rpki-client on console-fra.rpki-client.org