Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.cer (raw, json)
Hash identifier: 951Jt0bzJqUYTov13N7jtfTU+8gxiixLC4Z9gS2Z8NE=
Subject key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B693C05A40DCA73255B5C1E1C084CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49491
IP: 193.169.80.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:93:c0:5a:40:dc:a7:32:55:b5:c1:e1:c0:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:ad:98:97:28:b7:13:fb:fb:28:61:83:b2:
57:18:69:04:8d:73:39:20:46:de:f0:c2:ea:70:c2:
83:91:9f:9d:dd:0d:95:b8:27:dd:a8:3c:04:cf:6e:
0a:34:d8:bb:80:2d:02:67:08:4c:46:90:d3:6e:a1:
ef:26:36:93:9c:75:03:a3:09:e0:38:92:cc:2f:91:
dc:ce:93:28:eb:71:16:58:d8:a0:ce:07:7c:b4:38:
65:e3:98:60:3c:41:27:90:68:f7:31:d5:2a:b5:68:
e3:3b:b3:1e:f6:b4:25:dd:cb:9d:c8:fd:c4:b5:9f:
51:51:c7:d5:4c:ba:7e:7d:92:69:5f:4a:63:80:34:
90:16:95:81:d1:52:95:ba:f0:84:36:26:a4:8d:97:
62:32:61:5e:e5:e0:bf:0d:62:8e:ea:dc:24:24:d1:
c7:f6:57:7e:bd:24:96:d7:8f:3a:85:50:e6:59:e2:
5e:56:74:59:43:9c:99:f3:ec:14:53:82:a0:49:c3:
5f:5c:b6:62:db:f9:8a:fb:e2:ce:96:26:74:1c:49:
be:3c:47:29:54:6a:38:50:28:05:3e:61:f3:88:37:
f0:9a:2b:7a:04:96:56:1f:10:2c:7d:56:35:09:7f:
d2:f4:44:30:d0:7a:6e:e8:f8:64:d2:85:5f:29:db:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.80.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49491
Signature Algorithm: sha256WithRSAEncryption
2e:9a:0c:59:ae:8d:3b:1b:ea:c7:af:1c:22:a8:98:c8:40:26:
c8:f0:08:01:98:97:bf:b9:32:85:ec:61:00:29:62:c5:6c:ea:
7e:29:fc:e1:cb:c0:16:38:d5:c3:3b:1f:ae:46:15:aa:81:e0:
b3:69:3b:38:4e:0e:28:d7:36:32:05:ee:b5:46:70:67:a1:7a:
bd:02:25:8e:55:ed:cb:a1:b0:f4:20:ad:ec:3d:01:3f:d6:ba:
07:8c:f9:7d:92:e8:27:66:34:98:42:41:89:6c:56:e7:45:54:
83:46:17:df:77:e7:f9:54:4f:fd:c5:fd:ff:58:1b:c5:1b:d3:
21:a2:4b:33:56:d9:52:3e:04:b4:dd:19:78:7a:de:2c:32:c3:
af:f5:e2:d8:01:29:64:06:ff:cc:24:11:d8:97:34:db:bb:95:
f2:c2:e3:87:71:71:3c:5e:01:8f:1b:31:36:a9:34:85:02:c5:
a6:77:c1:d1:4c:56:2b:c1:04:3c:88:31:f6:79:f9:ee:23:6a:
65:fb:c2:89:ed:c8:98:66:81:e5:04:87:87:ed:5a:0b:b8:6e:
18:74:be:ba:81:3f:95:29:8f:75:a4:cd:18:53:d7:80:8d:88:
a2:64:b4:bc:36:4e:62:ad:29:68:ad:63:3a:5c:13:97:65:58:
b0:08:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:21 2024 by rpki-client on console-ams.rpki-client.org