Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer (raw, json)
Hash identifier: 02ZppURc84amgoD7bxY5NrauVAJpW3pFWLEtBtJm4tw=
Subject key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E64A1540D1FE48B69CC6F82A0E839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56736
IP: 2001:67c:225c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:64:a1:54:0d:1f:e4:8b:69:cc:6f:82:a0:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:0f:26:60:86:14:9d:8c:4b:54:27:dc:24:
30:2e:5a:d9:82:44:a0:b6:9d:ec:db:ee:e9:09:94:
89:17:3a:bc:84:fd:c5:26:a1:eb:46:f7:43:d6:6e:
39:96:b8:c6:f6:b4:c9:2a:fd:f6:2b:fe:41:2f:23:
e2:b5:ae:0c:d2:82:8a:5c:da:57:bb:6f:17:dd:2b:
93:1c:8b:ab:12:e7:a0:d1:53:4d:c9:f3:62:18:b8:
96:13:26:39:69:9f:43:d6:10:63:d2:e9:92:70:4f:
18:87:54:f4:2c:22:af:33:87:59:26:76:54:90:2c:
fc:0b:55:84:c0:95:7b:6f:ca:22:05:c8:e0:52:77:
30:12:77:63:7e:e7:16:22:e3:96:96:de:27:02:d0:
1f:ce:6e:83:9a:8c:5a:45:af:1b:98:5d:a5:10:0c:
44:d7:60:dc:e0:a3:d6:03:67:e2:72:ee:02:15:ec:
95:2b:4c:c9:be:e4:1a:17:44:e9:18:35:88:ea:f5:
5e:35:9a:40:96:48:a9:fd:3a:94:f2:61:4f:80:fb:
68:7f:da:ce:08:88:d9:63:2e:de:95:de:58:4f:14:
3c:7f:2f:21:27:f8:d5:c7:43:39:5f:0b:0d:70:95:
f3:c3:85:44:59:bb:76:19:1c:a6:93:79:8c:55:f3:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:225c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56736
Signature Algorithm: sha256WithRSAEncryption
37:5c:d3:2b:86:4f:c7:f1:4a:2b:ae:de:9e:16:1a:d6:23:34:
20:97:97:45:0e:55:05:f7:2e:78:91:c0:73:d7:1a:e3:77:36:
c3:76:93:e8:64:a3:16:7a:62:f4:2b:d2:57:a1:fc:77:8f:d4:
c4:d1:ea:ef:8d:a4:d3:6f:c3:f5:40:6d:8e:b5:9f:45:29:78:
cc:41:de:2c:a2:6a:54:65:e7:82:e8:95:8e:e3:24:c0:74:86:
2a:8f:44:f9:26:8c:c6:bf:e8:1b:3a:2a:ef:4d:93:ed:ea:0e:
8f:6c:ea:c7:27:77:62:af:41:ee:8f:47:1e:be:ec:6a:a7:bc:
fd:11:96:1a:86:98:e8:cd:b0:30:9f:f6:6a:97:54:73:4a:13:
5f:48:da:1d:b2:71:15:b3:a1:b1:1a:91:0a:df:56:23:9b:41:
06:d4:4b:3c:63:fe:5e:fd:a2:1d:56:9e:85:8a:f6:54:9b:19:
1a:59:36:8e:bb:e0:de:76:3f:9b:5e:81:c4:15:95:3f:51:a0:
bc:0e:ee:b7:cd:8d:a0:3a:f7:cb:13:4a:d2:0b:8b:28:61:1d:
0e:9c:ab:b7:10:cd:b6:34:9c:77:87:9d:2f:d0:10:de:59:be:
0b:cf:e3:43:0f:86:0f:54:fe:3d:f0:f8:bd:15:84:82:58:19:
95:c0:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:44:09 2024 by rpki-client on console-fra.rpki-client.org