Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.cer (raw, json)
Hash identifier: XWhWDT+RvSejBuafIHlmj0EB/mT89DlL408G9hHd6nQ=
Subject key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4251032A956B8538EC63D0805DA0C82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206384
IP: 2001:678:ce0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:10:32:a9:56:b8:53:8e:c6:3d:08:05:da:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:51:e2:b8:7e:ec:d3:02:2a:06:5b:5e:7c:
e6:ae:3d:da:c6:c0:4a:e9:15:9e:7e:3e:45:70:df:
a7:3e:24:42:41:54:ab:10:80:73:d0:06:38:e8:b0:
ee:6e:e1:7e:39:07:f7:e4:14:e1:70:e3:b9:08:9d:
b6:f5:2a:78:b3:40:27:5e:a0:60:46:85:b0:27:44:
40:19:0a:a1:d0:ac:36:b0:2f:ff:3b:b4:05:07:07:
b6:33:ee:9d:3f:97:5c:58:af:1f:02:a3:b6:ac:90:
4a:27:8e:53:61:3b:86:65:5b:4b:60:ad:59:62:9e:
d8:bf:71:65:64:89:63:d6:59:65:b4:0d:eb:41:a9:
0b:1e:b3:64:f0:64:f2:d0:a2:31:a2:9e:04:e8:73:
ce:44:50:66:7d:55:49:10:a5:37:9a:52:03:d9:16:
aa:cb:1f:db:f6:0a:67:dc:37:01:e0:71:ee:ea:b4:
0f:93:7e:ed:82:4a:fa:f2:5a:aa:bf:bd:8c:ca:3d:
32:09:bc:ee:60:8b:3a:4d:eb:a6:4a:39:fe:ca:d1:
92:ef:83:25:bf:ab:3d:3f:2a:a0:72:35:66:f8:09:
52:4f:06:58:78:6c:87:9d:dd:99:dc:ef:94:08:1b:
97:57:7d:6c:43:2e:b3:30:6b:16:b3:b8:7e:03:30:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ce0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206384
Signature Algorithm: sha256WithRSAEncryption
9c:10:dc:c9:75:12:24:88:ae:02:ed:94:ec:0f:3b:42:bb:b1:
05:3a:19:5f:72:dc:3b:9d:28:b5:73:77:21:07:00:b2:eb:77:
e1:b3:ac:f6:3a:6f:4f:21:1e:c1:08:2e:dd:95:0a:d1:0e:c9:
33:99:cb:ac:e9:4c:34:59:52:25:0b:52:4f:f3:4c:7d:3b:67:
6a:d2:0f:62:3f:ff:59:41:33:00:9b:2e:56:69:dd:bc:6c:ab:
3f:37:35:fb:79:3e:c4:99:e6:b8:f8:0d:ed:1a:18:10:28:b0:
4b:98:09:7a:f6:64:20:4e:1b:47:8e:2d:b3:aa:02:c1:14:6d:
6e:31:82:80:65:55:86:8f:6e:29:6e:78:ac:47:68:07:e4:eb:
84:f0:94:62:59:ff:fe:26:d8:b9:b6:b1:d9:6c:95:c3:f6:cc:
50:5b:fd:21:47:01:7d:8b:43:fa:c6:53:95:5f:41:4d:6e:e2:
df:08:c8:a7:2a:08:47:8a:35:96:fa:6f:64:eb:68:72:1a:42:
94:ca:18:5a:56:c3:1e:3f:22:8b:0f:19:c5:75:b6:38:42:27:
83:06:68:9d:87:37:61:4e:8e:fe:29:ff:b6:e1:6a:77:9d:6b:
92:e8:1d:9c:b6:86:d2:78:0c:35:ac:97:0f:af:77:36:d7:71:
45:f4:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:40:19 2024 by rpki-client on console-fra.rpki-client.org