Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6BM95t4owOsVUapg4HegWP-PrmY.cer
File: 6BM95t4owOsVUapg4HegWP-PrmY.cer (raw, json)
Hash identifier: IZcXQCdQDu88jaYY4FAxmT//4URfAz6mWQ+V12YPuyQ=
Subject key identifier: E8:13:3D:E6:DE:28:C0:EB:15:51:AA:60:E0:77:A0:58:FF:8F:AE:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493776A6C4CF3FC95BCF0475AF4E554
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/8a1bfe-d8c6-402b-a7d1-487e16ae5b6d/1/6BM95t4owOsVUapg4HegWP-PrmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/8a1bfe-d8c6-402b-a7d1-487e16ae5b6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207344
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:6a:6c:4c:f3:fc:95:bc:f0:47:5a:f4:e5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8133de6de28c0eb1551aa60e077a058ff8fae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:e4:9c:2e:b3:2a:4c:fc:04:96:22:33:47:
ad:34:a3:e8:82:66:cd:5c:50:a8:99:7a:d8:f6:59:
06:59:72:00:1b:2e:9b:0e:67:fd:d6:b9:74:e9:f7:
da:e1:7d:f3:5f:e3:d6:33:37:4e:62:ab:29:1b:47:
19:db:30:e2:56:2e:e3:e7:b7:af:62:28:1f:cb:42:
2a:31:9a:ea:3b:27:b3:90:b0:ed:71:c2:a4:15:b4:
9e:99:b4:3f:2e:e4:89:68:3f:06:f3:c0:d0:ea:cd:
7f:1a:98:ba:66:24:a7:ba:97:4e:a6:e1:97:98:72:
9f:5f:82:c7:07:55:be:4c:a2:c3:a6:03:f7:7e:b8:
2c:33:46:68:80:9a:5d:ec:b6:71:64:e6:34:ad:90:
97:73:27:aa:ea:0e:b2:6a:cb:10:f7:b5:1d:ea:9a:
b4:5a:b5:3b:b4:11:d4:a6:aa:81:9e:c1:2c:a4:2f:
c6:3b:bd:e0:63:24:05:be:72:b6:2b:62:f0:d2:ae:
ea:cd:42:6d:ff:48:2a:6e:7a:b5:9f:67:29:f3:83:
97:05:93:15:56:80:31:75:04:0d:08:0e:f0:29:7a:
44:dd:39:3f:57:d2:99:89:d2:75:6c:2d:16:b2:1d:
87:01:09:08:6f:2d:46:d0:22:9b:1d:ad:0a:32:fc:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:3D:E6:DE:28:C0:EB:15:51:AA:60:E0:77:A0:58:FF:8F:AE:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8a1bfe-d8c6-402b-a7d1-487e16ae5b6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8a1bfe-d8c6-402b-a7d1-487e16ae5b6d/1/6BM95t4owOsVUapg4HegWP-PrmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207344
Signature Algorithm: sha256WithRSAEncryption
71:50:a9:77:86:a0:7a:5f:f9:0e:d3:87:40:fc:3c:5e:fa:cc:
56:3c:f3:45:b9:c7:c4:f2:9e:2e:5f:0c:cf:c4:d2:09:f7:95:
ec:73:a5:c2:1b:12:e5:4c:35:ba:6f:06:50:cd:0a:87:0d:f2:
bd:89:b1:a7:4c:c7:c7:b4:8c:d7:ce:fb:06:fd:c8:e1:9f:31:
e5:76:77:7e:cb:27:f3:e1:bf:20:52:a5:e6:7c:f3:0b:37:34:
8f:42:fc:9f:f3:7a:1f:ab:1a:f9:a6:e6:a2:55:7d:72:9c:1e:
6c:13:f7:d8:9c:ad:3e:3e:95:3e:95:e4:78:1b:64:16:35:40:
94:45:02:3b:17:ab:a8:20:70:7f:45:85:04:d8:35:f7:d4:00:
c3:95:cc:84:49:46:8a:3c:dc:ae:1a:12:e7:54:a7:6b:17:9b:
b9:ee:b7:47:3a:02:0e:37:67:4b:d1:f7:12:66:a8:41:42:06:
20:2f:14:d3:c4:6d:f5:dd:bc:c5:10:47:37:4a:15:7e:6d:9d:
54:7f:da:6a:3c:a2:bf:f3:ab:5d:7d:f8:37:a9:c3:cd:64:40:
f3:6f:3a:3e:a8:98:a8:80:65:07:84:64:b7:36:5e:dd:b5:b4:
f1:60:a1:2f:c9:f1:82:bb:e0:8d:1f:20:b9:4c:d8:f8:92:02:
3a:0c:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:00:39 2024 by rpki-client on console-fra.rpki-client.org