Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
File: 59eZrg792Ybd53-zWtChCCPLly8.cer (raw, json)
Hash identifier: uC1ypH8ClXBr+atdIpPRmUwQ5dtLEmTNZWEbsUXEfPM=
Subject key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D71E826CE9B043C34A83D47875682
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3261
IP: 2a02:300::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:71:e8:26:ce:9b:04:3c:34:a8:3d:47:87:56:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:61:ff:a0:48:70:d6:2f:a8:e8:8f:81:cb:
b6:6b:23:5c:13:c3:6c:38:ca:d1:95:62:e5:d4:8f:
53:96:0c:41:71:e0:e0:90:c3:29:c8:2d:c2:17:8b:
31:f8:ae:94:8f:fa:e3:e3:25:b1:2c:a7:c7:37:93:
fb:eb:25:a9:43:38:1e:e6:ee:a9:66:ab:05:ec:4f:
a4:16:9d:e0:35:49:55:cd:0e:57:91:91:df:d7:e4:
ac:ae:b4:a7:96:a7:8e:9e:9a:41:5f:78:ac:87:3a:
00:a8:07:f2:06:b9:34:d7:a5:63:f1:a4:27:29:bd:
c0:a8:3d:96:37:2e:65:f7:d1:b8:50:13:cd:17:44:
3c:4e:e5:39:d6:48:2a:1d:e9:6d:22:d1:62:b5:20:
b9:4b:0f:e9:bc:59:88:bd:2b:72:19:0f:59:34:bf:
42:69:24:e5:76:fb:6d:d3:f6:42:43:81:84:db:9a:
b3:54:29:46:70:3b:f0:fc:51:7f:5b:11:1b:d8:f7:
f4:83:5d:04:2d:e4:8c:d8:38:76:ee:43:26:81:6e:
33:3b:f7:c4:c0:a9:72:a6:07:a9:f3:c6:20:77:bc:
a8:ad:c2:70:b1:2a:7f:c9:f1:cb:94:84:1a:ad:09:
73:cd:ba:27:14:1d:3e:7a:d0:1e:85:04:bb:d3:7f:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3261
Signature Algorithm: sha256WithRSAEncryption
93:69:f3:d5:42:ce:a2:d8:52:db:58:bc:16:cb:d5:47:4f:c9:
08:5a:8f:55:ac:d9:5d:b0:46:d4:de:05:56:13:e8:c4:f0:c4:
72:a2:e2:0c:b9:2e:7f:b7:bd:f3:5d:78:a4:6a:2c:60:4d:4f:
2e:55:0d:7b:20:c4:f2:c6:77:d6:ea:5f:aa:40:ac:b2:07:ef:
a6:b5:2c:fa:35:de:1f:10:e0:fb:96:7b:18:04:f3:d8:89:25:
6f:a1:2b:c4:6d:87:bb:4f:86:e0:71:17:a1:b6:a3:e8:33:cb:
d2:6e:95:c8:e9:f7:4b:b3:e8:00:91:29:83:58:72:08:12:52:
71:19:81:68:d5:95:68:96:2e:56:ea:47:80:ea:96:1c:6b:20:
90:8f:2e:63:77:e7:b1:b0:33:68:f4:0a:72:ec:34:fc:92:33:
20:4b:08:60:c7:44:b0:01:ea:c9:49:bd:57:19:96:09:97:16:
3d:b6:88:a1:42:70:6f:d9:b3:b3:c5:18:2f:26:82:81:5c:3a:
57:c8:35:e3:47:64:ce:64:3e:91:30:2d:c6:48:2d:5b:e4:ff:
01:ff:00:a2:d6:41:cf:1c:42:c3:d5:69:f3:49:1d:4d:ce:2b:
fc:a1:ea:58:61:89:03:1d:60:d0:4d:70:1b:87:4e:77:bb:32:
de:69:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:37 2024 by rpki-client on console-fra.rpki-client.org