Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer
File: 2IDADSXlp359M0zt-eDyaixaoyg.cer (raw, json)
Hash identifier: ibDFIntM81kur0yBRf2CrwIAQNXSgxylhQE+BupWuOo=
Subject key identifier: D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE30952F5E5B4C576B229742B8A56D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35456
IP: 2a0a:57c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:30:95:2f:5e:5b:4c:57:6b:22:97:42:b8:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:62:80:16:77:b6:ad:2b:fa:66:5a:46:3c:
9b:3e:12:73:da:d7:ad:af:14:38:b5:8a:eb:eb:1d:
f2:65:d0:e7:c2:64:e4:fa:dc:94:69:1c:35:25:97:
87:4b:b0:19:55:64:a2:b8:c5:01:29:99:bb:b0:fe:
00:c2:c8:5a:25:5a:7f:6f:66:0a:af:01:fa:29:12:
18:68:3e:4b:ce:05:44:16:e9:76:ab:53:d0:0d:c3:
1d:39:60:5c:9a:25:4a:72:f8:a5:99:64:6e:03:53:
4a:b4:5a:54:24:00:1d:00:59:b7:23:f0:f5:e9:c1:
1d:67:c5:a5:70:8b:6e:71:0c:c8:51:fc:a1:85:f8:
cc:6e:52:95:62:67:e5:86:09:bd:69:d5:de:98:b5:
06:c7:07:84:00:68:af:14:28:48:26:e1:3e:db:4a:
a8:9b:f5:bd:6e:cb:5a:9a:b2:13:90:4a:f4:42:76:
2e:5b:98:25:d2:bb:dd:f6:fe:81:23:49:b3:e3:fd:
bc:1d:c8:82:a5:b0:aa:33:23:33:56:e5:0e:6d:41:
c2:03:83:6d:bb:da:fa:bb:2c:86:0f:45:14:55:ee:
38:49:cf:31:93:94:24:8d:3f:6a:2e:4a:af:60:75:
4e:08:de:81:b5:14:61:14:76:87:33:f8:49:85:1d:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:57c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35456
Signature Algorithm: sha256WithRSAEncryption
42:cc:ba:03:7a:84:95:12:98:99:67:17:e9:f2:df:8c:17:fc:
07:c6:a2:52:0d:e0:69:6c:0a:2c:51:10:79:7e:3f:f7:dd:7d:
03:17:99:b3:68:8d:a9:dd:b3:0c:cb:ac:24:1d:f3:c0:e8:5a:
0b:6b:ad:23:c2:55:a2:b4:b8:e2:a0:59:a5:56:13:08:23:bd:
0a:58:e4:23:bb:06:11:ce:e8:4a:32:00:a9:7b:b6:6b:9d:ca:
47:a0:0a:27:ba:3e:83:c2:59:59:ae:69:a0:2a:28:6f:05:ad:
a7:a9:84:01:4a:9a:f4:af:c1:50:c5:ab:d2:07:d1:5d:17:6b:
33:20:11:1c:d8:37:10:2e:d9:c4:ae:02:1e:e9:d8:4c:56:b2:
c8:05:fd:9f:52:86:dd:82:f5:b1:c1:bb:27:4d:18:f8:96:29:
6d:d5:34:9f:a7:b1:14:f0:07:c3:47:e2:81:52:5a:db:6d:2b:
f5:ab:d9:6a:bc:20:8b:fb:f2:6c:81:58:8d:d5:bd:6b:24:fa:
0e:4b:5a:09:5e:e1:92:ae:40:ee:c6:61:fc:eb:2c:73:f2:48:
55:98:03:e4:65:35:d7:30:1e:74:c9:bb:eb:1a:57:44:0f:15:
1c:8a:a1:f8:d1:0f:ab:79:86:66:b1:02:e5:f8:00:29:7d:8e:
ee:21:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 19:20:54 2024 by rpki-client on console-ams.rpki-client.org