Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GPTuiFhNbf2eOqm8IBxQ9E41PZw.cer
File: GPTuiFhNbf2eOqm8IBxQ9E41PZw.cer (raw, json)
Hash identifier: 00s4Y9XwukkUzZm4HQ7eYMqqWPhvEOwwlzlyqmaQ1hg=
Subject key identifier: 18:F4:EE:88:58:4D:6D:FD:9E:3A:A9:BC:20:1C:50:F4:4E:35:3D:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3490B8FDDA60A8BF6B569D7B8245877
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/GPTuiFhNbf2eOqm8IBxQ9E41PZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208723
IP: 2001:678:a90::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0b:8f:dd:a6:0a:8b:f6:b5:69:d7:b8:24:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18f4ee88584d6dfd9e3aa9bc201c50f44e353d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:d6:55:b9:b2:05:00:30:dc:1a:e3:05:34:
b2:7d:2a:a4:cb:2b:43:7a:c0:1e:60:54:71:9f:66:
fc:11:4e:b0:09:47:77:a9:ec:4e:77:2e:3c:1c:1e:
4d:55:0d:11:09:35:8e:f2:98:07:99:1e:45:37:7c:
72:f7:5e:5d:10:f0:f8:87:5c:11:6e:cc:fd:97:da:
c9:3d:da:61:d7:d0:51:ed:6c:b0:75:ca:f6:a9:fc:
e6:ef:51:bd:b0:11:81:30:e6:75:66:47:cc:8c:8d:
7c:2b:97:b9:cc:14:12:7c:8b:d6:f3:7c:01:d2:a0:
fa:3c:b7:2c:67:e3:ee:d1:d9:4a:41:ff:e0:be:36:
21:2d:d6:d3:21:9a:62:b4:bb:09:0e:2f:5d:ab:dc:
c4:d2:79:c3:e8:b1:7e:90:fa:4a:8e:cc:82:0e:9b:
a6:b8:d2:5d:47:52:ad:fa:4e:58:54:c9:ab:86:98:
0e:e3:c8:3d:8b:fd:92:12:d4:47:b2:c0:76:0e:e0:
62:38:42:c5:db:84:69:cf:8c:d9:d9:2c:88:69:b6:
8f:8e:08:e9:a1:ce:ee:58:f4:cb:08:28:b6:2f:32:
82:d6:82:bc:c6:75:17:33:f9:a0:f7:6e:61:bb:93:
be:b1:1f:93:ed:d9:c3:3f:f7:c8:d3:3a:09:86:6d:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:EE:88:58:4D:6D:FD:9E:3A:A9:BC:20:1C:50:F4:4E:35:3D:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9f8fbe-b2e8-472d-9ebc-0b9885863ebf/1/GPTuiFhNbf2eOqm8IBxQ9E41PZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a90::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208723
Signature Algorithm: sha256WithRSAEncryption
3f:40:28:c3:cf:b6:f6:2e:3d:f4:cd:5d:d6:24:06:66:79:10:
45:b7:88:3d:ac:e0:2c:5e:d1:7f:2b:78:e3:d5:73:70:88:9f:
76:c1:7d:c4:56:a9:e1:e2:2a:bd:fc:c6:96:0e:ae:a9:13:5f:
b1:cb:4d:9e:49:09:02:ed:69:bf:9f:0f:9a:ac:3e:05:b6:54:
38:a8:17:d7:18:fe:15:40:50:ac:56:4e:54:e5:22:90:6d:24:
1d:da:c4:8c:6b:20:a5:7f:e0:5e:ef:45:73:c9:d4:28:e7:e2:
a4:ca:1c:cc:af:f9:c1:f5:33:8f:db:8c:be:04:5b:9f:15:0d:
04:07:51:c2:30:49:90:af:91:0b:33:54:23:fd:41:99:03:e4:
8a:75:80:98:7b:10:c2:21:95:3e:b9:c1:e4:e7:d5:0d:8f:bd:
8b:db:67:17:c1:ad:c7:ff:e7:17:72:57:2e:38:5e:1b:3f:30:
e1:76:d3:9a:81:83:6f:0d:71:57:43:9a:53:02:1c:a8:a2:02:
8c:c7:fa:69:87:13:43:43:45:64:15:b5:03:a9:37:49:d3:d3:
83:db:dd:d0:aa:3e:f4:44:a5:07:2f:52:91:44:92:c2:39:f7:
52:a8:be:65:0d:2f:b2:04:7f:96:91:e6:c6:f9:e7:86:ba:16:
f5:22:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 20:58:04 2024 by rpki-client on console-ams.rpki-client.org