Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.cer (raw, json)
Hash identifier: hS+KFzEazDdb0Tv549klWHt9GArQdJ0ZQhmtEtMscDc=
Subject key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019007DA63C7FBBC39827EFC228E16EFC5B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Jun 2024 15:11:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214759
IP: 2001:67c:2c1c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jul 2024 15:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:da:63:c7:fb:bc:39:82:7e:fc:22:8e:16:ef:c5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 15:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:ca:28:56:fd:02:5c:91:76:d7:4c:92:81:
d4:bb:8f:6c:31:e7:25:56:74:ec:e0:6b:0a:c6:b4:
43:a4:f3:42:35:ab:21:ba:95:36:0e:1d:28:ef:ed:
ce:a0:78:d4:03:7a:40:cd:3d:7d:13:3a:b6:3f:7b:
ed:04:e6:7b:6b:f3:f7:8a:64:30:2c:01:f4:f1:05:
95:b2:05:95:20:a5:da:ca:ea:e2:30:ba:10:ae:3b:
f1:83:9b:81:77:6e:b5:fd:45:df:38:81:b1:c9:ee:
b9:f0:1d:c1:52:66:dc:d5:70:d0:99:c9:87:52:a3:
51:78:99:95:e5:5a:21:1d:a6:1c:60:57:bb:38:2d:
5c:3e:6a:2b:90:33:b2:7e:5b:69:4e:54:cb:3b:8b:
82:97:43:e1:aa:f9:6a:72:a1:33:f0:29:32:2c:a5:
af:a8:d0:73:9c:fa:30:23:f1:15:5c:cb:a3:10:af:
db:f3:03:d7:79:58:b2:5c:d9:0b:6e:32:9a:b1:c0:
97:90:04:50:64:f5:69:f2:27:cd:e9:a4:2f:a2:63:
b0:61:84:fc:e4:d8:a5:60:2c:af:29:e3:ef:88:a4:
0d:90:c6:7f:a4:46:a2:41:fe:65:a5:ac:bc:3c:c6:
2e:c7:e6:56:00:09:51:0f:8f:c2:80:5f:a7:37:59:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c1c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214759
Signature Algorithm: sha256WithRSAEncryption
6b:3e:d8:1d:b6:85:89:b5:d9:0e:14:81:61:3d:fc:22:c8:60:
97:14:4d:d0:e8:e3:11:5a:d8:3b:2e:ec:c8:5b:54:99:50:6f:
cc:91:b1:d7:d9:95:13:a6:b1:49:4b:b8:95:76:73:70:d4:9f:
15:f7:e5:9b:f6:be:ad:8c:62:27:68:95:f3:ad:4c:ba:33:fe:
2a:03:d5:4c:ea:ee:53:8a:bf:cb:ef:70:fe:23:66:2b:48:dd:
e2:6d:41:38:7c:7f:dc:04:77:33:59:07:36:db:77:c0:8c:55:
c0:34:1e:1d:73:a1:99:a9:01:30:b3:9a:47:dd:df:d9:a8:98:
85:d8:f8:86:cd:a6:ef:07:1a:18:d8:af:f5:ef:a0:3b:69:ab:
d8:98:43:77:b1:8a:0f:5c:a8:b1:bb:11:d6:1a:99:21:4e:be:
73:fc:7d:c6:52:d7:53:fb:14:07:90:5a:ec:07:f0:f7:ca:f9:
3b:ac:25:0b:f0:1e:ed:77:f0:4a:b6:2f:c6:65:3f:7f:e4:d5:
68:f8:31:86:e8:41:9b:cc:91:cf:4f:c5:0b:f7:62:8e:ea:02:
ce:cb:4d:a9:b9:b1:c3:11:f7:db:57:f4:6e:89:d9:9a:33:4c:
d4:cc:0d:91:17:de:8f:c4:b1:0a:f1:78:a1:c8:7e:e5:56:e4:
8e:de:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 18:14:46 2024 by rpki-client on console-fra.rpki-client.org