Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer (raw, json)
Hash identifier: mFKrx4TSted5kJtfNuUziEo3+dIJhD+us8Kx2Pks3rA=
Subject key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 57B9E5AA004334564E5855BE4AC758A8E3A9F4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 28 Apr 2025 16:16:47 +0000
Certificate not after: Mon 27 Apr 2026 16:21:47 +0000
Subordinate resources: IP: 2a14:7580:5000::/36
IP: 2a14:7580:ff40::/44
IP: 2a14:7581:9900::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b9:e5:aa:00:43:34:56:4e:58:55:be:4a:c7:58:a8:e3:a9:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 28 16:16:47 2025 GMT
Not After : Apr 27 16:21:47 2026 GMT
Subject: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:93:62:2f:ec:fd:d1:10:4a:dc:2e:cf:3e:
ff:76:73:9a:1c:65:17:68:ca:67:0d:83:c4:02:f2:
4c:25:70:95:07:27:69:02:4b:7a:4a:e0:de:7f:f6:
95:9a:b7:ca:7b:b7:c0:c9:42:05:24:bb:33:95:48:
64:28:81:62:12:47:5c:31:8c:ea:21:8e:6f:a5:a4:
21:0d:71:2e:44:75:d2:37:e2:11:91:18:01:79:11:
85:88:9b:8f:3c:36:d5:7b:89:04:3c:3b:4c:01:0e:
1f:21:cd:6c:c1:c1:19:1e:cb:29:70:d9:fe:9c:74:
f9:43:68:e3:15:79:48:01:55:bc:56:63:bc:ad:4d:
b8:c7:cf:11:a6:e6:f7:68:b7:fe:87:ee:af:8e:1d:
c0:ed:63:b2:63:b2:27:84:9c:99:a8:a8:29:bd:ef:
c8:f1:48:6f:a2:c6:7a:10:42:6b:f6:bb:38:52:ca:
c2:dd:85:bd:13:29:1d:8d:48:af:de:4c:6d:8c:60:
e2:cd:c2:74:04:a4:24:8a:30:2a:78:e1:86:e4:ad:
53:f9:fe:be:82:da:ff:b5:96:4b:d1:71:03:5a:44:
40:64:39:c8:a8:ed:82:d3:d0:de:dc:9d:3c:ec:53:
41:ae:aa:61:73:67:11:5f:01:11:f7:fe:a2:1a:64:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5000::/36
2a14:7580:ff40::/44
2a14:7581:9900::/40
Signature Algorithm: sha256WithRSAEncryption
88:7a:92:a2:eb:16:a2:bd:9e:3f:27:0c:ed:17:19:f8:1c:6b:
30:4b:b7:01:fd:a3:4a:cb:9d:c8:34:47:06:8a:e0:05:0e:06:
ba:51:5c:54:9d:d3:e4:3d:25:ab:9e:e7:5c:59:cd:6f:cc:e2:
87:a1:a3:49:db:9a:55:67:24:ac:40:3e:82:42:bf:31:e6:de:
1a:9c:e3:14:d8:a0:da:2d:fd:02:78:30:ea:72:5c:18:3c:3e:
bc:db:f5:a6:3b:80:aa:d5:1d:5a:48:ee:df:a6:88:4c:67:b0:
be:40:2f:b2:e4:e9:10:0c:49:d6:ee:a3:b6:0b:cd:1e:94:52:
af:6c:6f:73:97:2a:39:04:86:d5:d7:9d:df:74:de:f5:0c:43:
64:4f:03:74:92:d7:81:eb:0a:bb:05:a0:38:a3:3a:e5:a1:08:
12:d1:76:58:37:6f:9f:82:48:bd:ef:da:17:68:8b:a7:36:c1:
e0:52:02:47:de:ca:de:a4:d8:3c:77:0f:b1:16:67:0a:3a:95:
b8:20:7f:1e:52:83:b1:09:ad:2e:69:55:a3:85:ad:e0:ae:30:
59:85:c4:92:51:22:40:43:4c:97:0d:e4:2a:b8:8f:97:b6:04:
98:f8:d4:c8:bb:d4:66:d8:89:fe:08:58:09:25:57:6c:6b:e3:
ba:95:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:30 2025 by rpki-client