Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer (raw, json)
Hash identifier: qIqw+LHq6+HUYOEBVUFgKO4p8mtiXI5iU2DcIFDlH0I=
Subject key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B7E94D68A1B48F491FB3619F7B9D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202553
AS: 211636
IP: 2001:67c:262c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7e:94:d6:8a:1b:48:f4:91:fb:36:19:f7:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:de:3f:3c:6c:a8:2b:7b:fd:1c:87:46:4e:
0c:32:57:92:8d:6d:b5:91:3b:24:ef:41:50:01:4b:
5b:52:c6:16:87:9f:48:0b:a0:83:23:15:8c:9a:13:
3e:07:41:51:df:e1:a1:d8:72:b4:ff:53:7f:b6:e8:
d2:a7:c3:1b:6e:70:c4:18:e4:5e:4b:6e:1a:49:05:
37:c8:1d:5c:de:6a:d9:8f:86:3f:b6:90:c3:2c:48:
ab:af:17:08:66:80:5f:e3:79:ee:95:3a:f7:29:7c:
29:f8:0d:d6:a9:65:99:a3:d4:5d:f7:7b:0d:90:8e:
e1:e0:c4:fc:6b:5b:14:4e:ba:65:8b:32:38:03:33:
7e:98:27:91:55:7c:a5:4e:42:9a:2c:7d:24:c3:33:
b0:70:64:98:72:a4:94:0a:03:70:a5:ac:f2:ad:53:
5a:2f:df:b8:48:d4:be:35:93:dc:28:d8:01:67:ed:
cc:3b:a5:b1:6a:5e:71:31:25:ae:e9:de:48:05:8f:
d7:ff:0f:c3:6a:24:e1:20:58:57:77:77:a8:d9:03:
bc:fd:61:e8:b0:53:e6:2b:a3:5b:db:4d:cf:a8:8d:
95:21:6d:11:96:34:ca:b2:70:ce:2a:e8:aa:f8:c7:
2f:9c:19:03:42:ec:40:7a:85:fd:5b:b6:e5:30:93:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:262c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202553
211636
Signature Algorithm: sha256WithRSAEncryption
57:09:e2:7a:e5:78:be:46:85:3a:38:4c:3b:fe:ba:3d:a8:33:
ee:be:99:46:a5:ec:a7:18:f1:84:7b:29:7b:06:ca:54:35:19:
57:67:d4:29:a1:e0:d0:f6:d0:a7:3a:86:3a:4f:6d:fd:13:a9:
59:54:d6:88:de:c7:e7:84:7a:88:c7:eb:87:e4:0e:09:ac:be:
4d:d5:7c:dd:1d:cf:46:3f:39:ea:ad:6a:70:ee:b1:97:26:b6:
13:61:8e:09:03:d9:a3:b3:dc:92:72:93:99:9c:0f:b2:83:7d:
69:1b:98:00:17:a7:35:64:d7:5c:39:ca:d4:57:b4:fe:95:80:
17:da:ff:4d:8b:5f:2e:c0:16:bd:ef:d8:df:a5:d2:cb:2a:e7:
df:f9:03:32:44:88:68:ae:84:de:30:d2:5a:57:13:b5:b4:7d:
55:cb:fa:d9:ed:3a:22:7c:94:6b:84:9f:db:79:77:78:8e:c2:
59:6f:88:4c:5b:37:36:1b:b1:7c:eb:98:ce:b3:39:4d:50:80:
1c:c2:71:fc:64:34:4a:67:a0:52:f2:a6:64:d5:60:00:d4:c1:
b2:84:62:56:93:d1:82:70:fa:7f:10:b3:17:3b:c6:62:de:93:
b7:5a:d7:36:18:61:f8:cc:7f:84:04:6f:1c:9c:54:c1:d9:c7:
be:d7:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:28:49 2024 by rpki-client on console-ams.rpki-client.org