Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
File: CCD5D3BE49456F7D48B7321029C886F318C23B36.cer (raw, json)
Hash identifier: BrPfz7IyAur41UTzisEnR0WAuE/+HJvdGO4/b4wTUs0=
Subject key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 05A0F46B9A2EA559A90D3464AE102EAE1BD02263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Apr 2025 20:23:51 +0000
Certificate not after: Mon 06 Apr 2026 20:28:51 +0000
Subordinate resources: IP: 2a05:dfc2::/31
IP: 2a05:dfc7::/32
IP: 2a06:1281::/32
IP: 2a06:1284::/32
IP: 2a09:54c6::/31
IP: 2a0a:6041::/32
IP: 2a0a:6044::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a0:f4:6b:9a:2e:a5:59:a9:0d:34:64:ae:10:2e:ae:1b:d0:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 7 20:23:51 2025 GMT
Not After : Apr 6 20:28:51 2026 GMT
Subject: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:ae:18:3d:c2:b5:6b:ee:a9:6b:c1:32:54:
2f:95:62:ae:84:d2:c4:9c:a4:ba:be:3d:e9:33:05:
6a:a1:b6:f7:a4:03:16:f9:41:0f:97:b0:4b:11:ef:
82:92:71:cd:d2:06:d5:b8:64:62:55:f4:5d:5e:d9:
4d:6f:90:a1:9f:7a:c2:21:10:78:b6:11:85:00:b0:
be:ae:5e:d6:8f:f5:16:05:ab:63:0b:3f:6a:94:2c:
c1:46:98:63:41:fb:82:d2:38:91:41:7f:b6:a5:63:
8f:ef:ae:df:80:8b:be:98:a9:ac:d1:c7:21:ef:d5:
2f:ba:72:7f:2c:80:ad:67:d3:44:ca:37:dc:fb:6f:
2b:48:09:74:b1:c1:54:f6:54:ac:8f:99:03:32:2f:
e2:53:57:c7:b7:42:a6:26:c1:dc:59:84:a5:a9:ab:
ed:42:c4:cd:34:8e:54:51:ba:bc:9f:b0:20:2f:ca:
e6:04:02:bb:ac:0c:e1:89:c7:de:d8:ae:9a:aa:6c:
d6:d4:2a:6f:57:a8:b6:f9:2a:ef:f4:f5:5a:2e:2f:
59:b2:89:78:8a:48:7b:74:6c:b2:94:74:52:d3:bf:
e2:66:65:5a:42:f5:18:47:8a:35:18:3f:39:ca:db:
6c:d3:f6:66:1f:4b:61:a6:f3:1e:9d:88:10:a3:7d:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/31
2a05:dfc7::/32
2a06:1281::/32
2a06:1284::/32
2a09:54c6::/31
2a0a:6041::/32
2a0a:6044::/32
Signature Algorithm: sha256WithRSAEncryption
b7:82:9c:9e:7a:42:d0:1c:9a:9d:88:55:ac:83:21:50:7f:ab:
06:16:7a:da:3c:9b:c5:3f:39:c5:a8:bc:6d:be:49:f1:db:55:
f1:72:7e:fa:39:ab:9e:65:f8:7c:06:4b:2c:77:2d:c5:f8:33:
92:4c:aa:e1:e3:e2:2a:1e:e5:f3:29:46:34:cb:7a:54:7f:42:
69:b9:5b:4d:7e:a6:e0:7c:e4:fa:6d:37:73:50:b0:4e:84:cb:
c1:37:15:a9:fe:1e:5f:94:bd:1b:9f:ba:17:92:50:97:c2:af:
cd:79:ec:a8:d4:83:b2:dc:e4:93:8b:cd:8f:0b:f5:85:e1:a5:
dd:fd:9f:81:61:4b:a2:a0:e5:e0:af:c7:ce:a2:51:ea:fd:bb:
e4:f5:71:39:65:2b:5c:b8:e0:7b:8c:6f:71:7e:dd:e8:6b:e7:
00:0c:c1:2a:95:57:e4:6a:66:93:47:75:ea:26:18:f9:4a:19:
2c:e1:95:e7:84:9b:8a:ca:9d:12:6c:4a:01:09:ab:39:87:64:
4e:58:15:9f:cc:69:a8:8d:c8:eb:45:35:15:4c:35:50:c1:02:
6a:b3:fb:de:6a:20:48:f2:b2:08:19:b5:e9:9d:9e:ce:7c:5f:
48:92:d8:5a:68:f3:2e:b3:e6:8b:c4:12:a3:5f:34:b6:17:18:
89:46:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:41 2025 by rpki-client