Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer (raw, json)
Hash identifier: NLtCM8oweEYcO+JUvfhGqqNraDKji4U6aMKIcHfXB38=
Subject key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F15B18F3242015F9A18FB3D39C150FF60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Apr 2024 14:38:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:e20::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:b1:8f:32:42:01:5f:9a:18:fb:3d:39:c1:50:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 14:38:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7870621fc0afc8ec18eef20633f6148813279976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:ad:20:c9:47:58:c9:08:b0:a6:66:66:5f:
1a:91:9f:f6:15:a3:be:1c:c9:e9:46:3f:99:1c:4f:
cf:3f:2d:13:cf:33:6b:b6:e3:c6:9c:6e:2d:38:d8:
4f:94:c4:51:c5:7a:eb:6a:29:d2:82:be:35:f2:72:
1e:d5:0e:17:89:15:48:99:18:49:02:13:0a:b4:8c:
3c:83:cf:c9:18:92:9d:bc:f5:00:a7:7c:ee:65:6e:
fa:ff:0e:c7:77:a2:a0:e8:e5:6e:6b:5f:c0:74:2d:
56:07:7e:10:3d:46:57:4f:b2:c8:f5:60:8a:2b:89:
e2:56:9a:76:b5:9d:92:5e:4a:55:99:1a:1b:40:c1:
95:a7:b7:6b:12:3a:45:29:22:eb:3f:ab:72:28:03:
4e:3e:a4:95:84:fd:b3:ae:fe:68:ba:c2:bd:12:d4:
ef:1a:b7:5e:ed:f5:6d:79:7e:53:b3:30:f6:fd:20:
34:82:05:b4:8e:a7:fc:38:f3:ea:dc:5c:09:f3:82:
c3:cd:d4:b2:bb:6b:62:83:22:94:ed:e5:ff:e4:a5:
19:4c:03:fb:d9:ba:89:3b:9f:5a:f6:bd:8e:e1:5a:
c6:1a:a5:69:6c:ab:84:07:b2:c3:8c:a0:4e:86:b7:
f4:6a:00:1d:1b:f7:c4:60:57:50:6e:3a:d5:88:8b:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e20::/48
Signature Algorithm: sha256WithRSAEncryption
95:ef:36:dc:63:d9:f9:29:16:88:ab:ea:ff:95:bd:76:0a:64:
61:f5:3d:55:00:e6:c3:62:dc:1d:f7:26:21:6f:0f:3b:61:4e:
16:5d:68:4f:0d:cb:7d:c1:d2:ae:7b:5f:51:cb:78:f2:8c:2b:
6c:e0:cb:67:71:89:d2:47:0d:9c:15:6e:60:3a:d7:94:f9:6e:
6f:6a:f4:44:09:66:b5:0e:d0:0a:fd:84:c8:02:ee:6e:4c:ad:
8b:8c:4b:84:d0:08:bc:4e:cd:eb:67:da:eb:35:5e:d3:20:d4:
8d:76:0a:e1:61:88:15:ee:af:eb:81:92:b9:f5:b4:04:ee:6e:
8c:05:a9:fb:e3:4c:1d:0a:ae:d0:84:fe:c5:d6:42:16:0e:53:
c3:08:e3:09:f8:42:3f:cb:af:31:2e:2c:42:79:f6:93:bf:06:
73:db:1e:3d:bd:a2:d1:84:af:61:27:69:97:db:be:b2:49:32:
fd:05:30:50:9b:a0:9c:57:3e:1c:6f:21:1b:8d:33:66:fb:b3:
9a:fb:8a:5e:79:55:c9:d2:65:34:93:b7:d5:fc:36:bb:84:0a:
49:de:40:de:4e:10:8f:04:bc:74:87:b5:ca:77:7d:ba:d7:6f:
88:00:5c:73:1f:69:6b:a9:71:3c:4c:04:9d:67:f4:df:11:92:
a4:e5:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 19:19:34 2024 by rpki-client on console-ams.rpki-client.org