Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer (raw, json)
Hash identifier: 69kWQMLH1YDXQGPmmNtXSnPL7GeiCnl4qGbIVHZPCRk=
Subject key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B734C9263015EBB27FE0D0D6B75E23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:1a00::/42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:34:c9:26:30:15:eb:b2:7f:e0:d0:d6:b7:5e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f896c3489feebbc094255d27edcd8655121027bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:e0:19:e9:46:bc:23:68:eb:19:bf:a0:d6:
18:6e:3b:d2:89:dc:e8:71:2d:4c:88:3e:1f:ad:e6:
0d:94:79:6f:21:09:af:73:9c:93:60:37:92:da:0d:
e4:29:a3:7c:2a:46:99:b7:09:e9:f4:f6:c5:8d:fc:
a4:61:f5:fe:68:4f:89:9a:68:c0:7b:4f:d1:eb:78:
53:90:51:df:40:eb:04:80:d9:89:6d:11:45:ad:88:
bf:71:f7:d4:d7:a0:30:d3:8f:68:c5:c8:bf:0d:44:
8f:e6:58:8a:88:13:92:0f:17:64:17:ff:86:d2:15:
88:d6:53:f1:42:c9:4a:a1:17:e5:13:4a:b9:ae:3c:
43:4b:a9:b4:62:0c:b4:fa:c5:3c:8b:95:e2:e2:0f:
69:a2:7c:fd:a1:d7:eb:27:24:a2:51:d3:84:7a:c5:
c7:33:ee:3c:42:e3:98:97:83:c4:3b:12:23:b6:61:
bc:f7:62:31:40:ef:8a:eb:37:d8:98:d3:39:b6:6e:
da:1d:de:46:39:2a:22:f4:26:dd:96:7a:79:2c:a4:
d7:2f:b6:cf:66:fe:11:fa:d2:9f:db:43:99:ce:f9:
e7:2b:29:df:f9:79:7e:42:e0:13:30:7a:4a:a0:ff:
7c:e1:68:41:0d:f5:73:e3:49:82:d4:c6:34:a9:60:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1a00::/42
Signature Algorithm: sha256WithRSAEncryption
86:93:db:a3:8f:c7:0b:e8:c2:11:13:87:ec:5c:87:81:c8:58:
4c:ba:1a:86:9a:10:d2:1d:8b:9b:47:ff:d6:29:c6:e3:e1:86:
81:18:c3:da:e9:ad:85:df:fa:08:a9:0e:e8:eb:e1:90:8f:8c:
c8:9c:9c:0e:58:20:52:17:47:a1:eb:ad:27:5f:0c:df:69:4d:
b0:45:3e:d4:f7:75:bc:8e:08:83:fa:fc:2d:89:35:e4:e3:01:
23:42:55:b1:a8:2e:2a:e7:03:af:be:6b:d3:96:6b:cc:53:2a:
2a:53:02:52:64:36:c3:88:b9:9e:8a:87:80:74:25:cf:9c:8d:
ec:a0:48:94:63:02:d1:25:fd:56:4e:f6:41:21:22:a7:ca:02:
ed:0b:90:14:f6:81:00:40:ea:d0:55:b4:e6:bc:97:22:29:87:
6c:70:85:34:fe:2f:c7:5c:45:b4:30:1a:b9:db:51:b1:9b:bb:
a8:b5:44:74:2c:50:c7:e0:7b:8c:41:d5:f0:a2:03:13:97:cd:
9d:47:ba:4d:6c:b7:73:ea:d9:02:1e:5b:f8:b0:3b:b5:b1:5a:
f9:20:e4:2c:f2:e2:10:ac:f0:6d:1b:ac:c4:8f:45:f2:c8:95:
98:b6:5b:97:3b:20:a7:86:ad:ab:e1:f7:10:fa:c3:89:d2:1d:
6c:63:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:04:40 2024 by rpki-client on console-ams.rpki-client.org