Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
File: 1olx6h0itezaGpdZ8FwmyMVqRow.cer (raw, json)
Hash identifier: WxECO+BVigL8+/MNUtddgb/usz6a5PZTpuoYss1MfeA=
Subject key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ECBE2C2E11959DD9971C79A90FADA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208614
IP: 2001:678:aa0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:cb:e2:c2:e1:19:59:dd:99:71:c7:9a:90:fa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:96:f9:e7:e2:ff:26:fe:d5:34:4e:bf:f8:
6e:d2:18:d8:fc:01:30:25:9e:60:6f:82:e2:26:a8:
59:e7:1e:e4:04:11:cf:75:b8:9b:ba:5c:a3:2c:05:
c8:4b:7e:99:86:9a:b6:75:36:ce:cf:f2:b1:d7:ca:
b5:ab:2d:ed:92:a7:70:60:0f:49:6b:ab:a1:da:dc:
48:89:9d:21:53:3a:2c:c3:e9:80:a2:64:ea:16:3a:
a0:40:6a:fa:48:0e:7d:90:9f:f6:ee:a3:bf:bf:58:
07:18:41:2e:99:a6:d0:08:59:85:06:c6:bf:5d:73:
17:f4:26:7d:78:30:d7:0a:d2:e0:ab:19:4d:c7:56:
b8:26:b0:df:e3:7e:0b:a2:8e:14:72:13:b0:ff:45:
85:91:a2:ef:df:fb:59:c8:9c:e6:ba:6d:ca:42:fc:
1f:4d:17:48:3f:8e:23:82:cd:b3:fd:c4:9d:52:00:
83:32:a7:62:34:05:cc:8d:5a:30:4c:01:b3:f2:89:
1d:77:c3:03:3a:88:d2:48:20:4a:6a:d3:a6:37:2f:
d5:36:95:bf:51:06:5c:26:99:2d:11:54:45:a9:f4:
33:4c:97:f6:d4:98:25:d7:4d:32:21:c9:5c:ec:c9:
97:29:66:4b:1b:f7:ee:60:96:b0:49:42:a5:29:fa:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:aa0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208614
Signature Algorithm: sha256WithRSAEncryption
33:0a:a7:21:1b:10:19:de:d8:50:f1:95:c6:63:48:76:49:2a:
d2:96:62:7c:ff:75:2e:23:85:0e:c1:57:7c:45:aa:6d:24:41:
5a:73:d0:0e:c9:98:f9:e0:ff:4a:98:48:ea:b6:07:ab:87:3c:
ed:96:97:51:14:f9:0d:ea:53:dd:96:e2:0a:91:92:26:18:25:
c5:15:4a:31:65:bb:f3:b5:27:4d:ce:0b:8a:16:61:35:d8:8c:
5e:89:11:3a:0b:5a:da:43:6c:3a:04:bb:11:2c:90:5c:99:95:
d7:1e:3e:b7:f9:0d:06:d1:a3:a3:ad:fa:14:73:c0:5d:b8:8d:
78:e5:29:b8:c0:1c:3a:4e:e2:16:fe:70:a6:0a:be:09:af:8e:
ad:c1:bf:6a:12:a9:b1:a4:5e:0d:f3:02:e5:97:ec:e3:8c:f2:
ea:7f:cd:a4:a3:13:b2:ee:14:bc:f9:9b:8c:a3:fb:2c:ef:27:
0a:26:88:a7:a3:3e:da:10:78:2e:27:75:6a:a6:d5:ad:f1:4c:
df:9d:d1:90:45:39:c0:ce:7d:cd:54:18:7e:cf:9f:3f:dd:45:
65:65:29:19:1b:dc:85:39:c6:e3:77:b9:6f:54:69:19:bd:65:
6f:6d:c0:e9:77:79:ae:2e:1e:da:a7:5c:8e:67:13:b8:46:c0:
16:51:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:18:56 2024 by rpki-client on console-fra.rpki-client.org