Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer (raw, json)
Hash identifier: cRWRUZv0i7OwYdA8FB22e/clGHI9rv6hWZQg/6HWq0k=
Subject key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E2C2BF8DB647B1E3E6E0577ECE304
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215900
IP: 2a14:7b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2c:2b:f8:db:64:7b:1e:3e:6e:05:77:ec:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:fc:9a:c8:f2:12:9a:2b:30:ad:25:bc:ae:
0a:a7:c8:7f:14:66:8d:66:41:5d:df:ca:cc:8f:33:
b6:dc:d2:08:76:d9:1b:a9:6c:be:2a:05:5f:1d:e3:
8f:8b:85:93:b7:3a:b3:a7:e6:e8:91:31:86:14:39:
07:52:ae:e8:da:58:11:84:a6:28:71:f0:9f:7c:66:
27:10:4f:6b:24:77:33:15:ce:95:4c:fc:d0:92:55:
e8:62:5e:07:7d:26:b9:c4:12:98:8c:62:7f:17:4f:
37:b6:70:24:95:f6:fd:bc:4a:4a:a8:0b:c2:35:10:
f8:9a:71:01:c7:79:e8:bd:84:9f:92:af:1e:66:b9:
4c:64:90:04:19:1e:57:4d:60:b2:29:3b:b3:14:ba:
75:1b:fc:12:eb:c3:33:1a:90:22:84:e0:10:a3:f5:
9d:b9:31:36:a9:04:c8:fe:25:9b:f6:ee:5d:3b:6d:
f4:55:67:12:3c:b1:93:2c:44:7a:2a:cf:31:71:c0:
97:cc:96:73:92:94:ec:61:0a:7e:ef:1c:db:b3:40:
6b:0a:c7:24:77:48:8e:1d:f2:f7:60:0a:3a:e2:ac:
b3:a3:03:1c:0e:30:f4:bc:c8:25:7b:21:84:c4:6a:
33:a9:6b:89:a1:3f:e7:26:10:62:65:eb:01:e0:6a:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215900
Signature Algorithm: sha256WithRSAEncryption
90:17:ad:43:98:48:c9:68:bf:57:a7:c1:db:87:8a:2a:09:d5:
4f:44:c0:76:2f:36:c9:09:d7:fb:f0:a0:23:72:9d:de:e5:77:
56:74:a3:f6:79:b0:5c:da:72:15:89:92:0b:7a:0f:11:60:7c:
15:1e:68:48:85:a7:f8:d9:47:0b:c0:61:df:28:6e:f3:97:22:
aa:e1:2c:a0:a9:ef:54:4e:69:b1:bf:d0:d9:30:a5:a3:3f:4c:
2e:a1:09:22:8f:ae:75:bd:e4:f8:a9:6d:cb:38:21:13:b4:c8:
c6:80:05:02:84:49:fb:bf:53:94:c9:a3:55:a2:f6:6a:c4:9e:
ea:d9:0a:0f:72:0d:0d:8f:b7:5d:da:28:f3:89:8d:25:5f:91:
7d:d1:fa:7d:49:7a:17:7c:2b:15:be:6f:ab:0e:b4:50:f9:85:
be:69:79:57:30:92:36:cd:21:26:b4:01:10:27:b0:a2:b2:e8:
dd:4f:05:55:1b:61:60:3f:f9:a6:4c:f0:ba:8e:7d:c2:8e:91:
63:37:04:4e:33:98:3a:aa:a3:2d:da:99:bb:e0:8a:3e:7b:82:
e3:7a:77:cd:ba:cf:e6:13:09:9a:23:38:a6:39:61:e0:dd:6a:
6f:ef:bf:e2:aa:10:c6:ba:17:be:5e:57:26:08:42:1f:68:e5:
83:2a:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:28:06 2024 by rpki-client on console-ams.rpki-client.org