Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.cer (raw, json)
Hash identifier: G6dfx6pp2oHo6L/HGSi2tnPBXr9HPmwpcQvfZKATi98=
Subject key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E2C821F5FD7BC5F25EBC1F41D57EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201377
IP: 2001:67c:ae4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2c:82:1f:5f:d7:bc:5f:25:eb:c1:f4:1d:57:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:15:2c:27:cd:0d:51:6f:64:a6:36:70:85:
e6:7b:4e:87:e3:00:f5:b4:f3:a1:51:b1:ff:72:85:
c8:82:e9:fd:9b:f1:61:3d:f3:49:1a:d9:ca:a7:44:
7e:a9:91:c7:80:1f:f7:b1:17:5a:3c:01:3b:2c:c0:
e0:4e:83:ec:57:a2:01:cb:4c:9b:b0:b9:04:36:55:
88:4b:52:05:ea:13:75:72:59:db:76:08:0f:51:3a:
c8:da:02:78:c2:21:29:06:69:3e:48:42:65:7d:93:
ee:2b:3c:b6:e5:13:4a:b5:32:f5:b1:fe:5a:63:1b:
70:59:d7:7b:b0:01:1e:98:92:a2:7d:23:af:f3:be:
0f:fa:c3:a1:15:38:a6:e2:d1:e0:c8:81:cc:cc:f9:
84:95:36:89:5a:0a:98:cc:9b:20:46:9d:ad:6d:ed:
7c:6f:ad:e2:e3:05:f8:cd:54:a1:44:71:5e:e9:c8:
ba:4d:ad:3d:e3:a4:45:3b:f9:00:2a:a0:8d:08:03:
a0:f9:74:e3:49:c4:12:df:08:b2:ce:02:b1:0c:56:
8d:ca:44:91:2e:23:19:31:03:1f:e1:a8:cf:7d:ee:
70:48:a8:69:c9:58:17:e1:e1:32:ed:db:c0:92:df:
dc:d0:1f:d5:36:78:1a:b6:b1:51:a1:fa:b2:fe:4d:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ae4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201377
Signature Algorithm: sha256WithRSAEncryption
9d:64:72:70:26:f1:25:55:f4:44:fb:91:e9:34:40:d9:ef:dd:
d3:d7:49:3c:14:75:b6:e3:e5:8e:ac:89:5f:68:7c:17:b5:96:
8a:a6:3d:ae:53:7d:52:69:a2:a8:8c:38:f4:fc:e2:96:e1:1f:
bd:89:81:a4:92:f2:98:b6:e5:80:b9:ab:75:43:62:cf:2a:c8:
69:aa:94:37:31:6b:99:42:c6:98:9a:72:80:2f:be:e8:0a:df:
d0:a2:b7:d0:20:07:23:74:15:e5:45:93:41:6d:bc:8c:10:1f:
78:f2:19:f2:4d:06:13:3c:ae:c1:3b:56:47:71:e1:10:e2:d6:
88:7a:a7:20:76:68:9b:d2:c8:23:f6:cd:fa:94:34:93:ef:c9:
3a:9b:c6:4f:77:35:5a:4b:d3:a8:17:7e:d6:13:6c:58:57:06:
76:12:ca:53:c8:8e:0b:ba:8a:f3:0a:9a:55:77:a6:54:29:96:
f1:0a:9e:c8:79:e9:3e:f8:11:01:f7:90:b1:27:cc:fb:a5:b5:
2d:0c:66:4c:12:99:50:10:5b:26:21:4d:5d:b5:2d:0b:89:0e:
1b:c3:a9:30:77:91:dd:b9:bf:1f:2d:6c:99:8d:11:10:b0:4a:
be:a0:c2:d4:5b:f2:88:81:ee:cc:ea:f7:71:4d:a6:73:86:bb:
c6:cc:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:50:10 2024 by rpki-client on console-ams.rpki-client.org