Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer (raw, json)
Hash identifier: LvRIbvhNNJayD2RCZK6TuwLL+qb2A73Us92y1H9CkRM=
Subject key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191E18BB94BCC05828AECAD27A6794035FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Sep 2024 14:45:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212604
IP: 31.42.178.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:8b:b9:4b:cc:05:82:8a:ec:ad:27:a6:79:40:35:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 14:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e90391d244173f3e1aa821db77484b1ada53557f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:23:94:25:c9:36:ad:c7:04:8f:23:51:27:
cd:84:d2:37:8e:11:67:c0:fe:b1:9a:19:8a:e5:d4:
4c:e5:f7:48:12:7a:f6:a3:80:e9:76:9d:26:63:bc:
b7:31:e1:af:2f:75:fd:1d:af:df:1d:19:93:52:45:
d4:b6:7f:f9:7b:aa:f8:69:6d:11:f6:26:f9:9e:23:
f8:ef:d7:89:14:6f:1a:46:3e:56:a8:2b:e3:e9:e7:
53:b3:65:b2:bf:d3:54:7c:b5:b8:7b:d9:b5:59:5c:
fb:e4:73:a0:7c:14:8d:94:a9:35:a3:22:25:87:97:
23:44:c7:17:2c:39:56:fd:be:79:17:37:e9:61:04:
30:36:91:df:29:79:c2:90:cf:ad:66:62:76:82:07:
c9:52:6d:cf:47:88:fd:ab:28:3f:df:2c:e7:3f:66:
9a:08:5b:ce:0a:0e:36:17:b2:8b:8c:dc:4f:59:24:
c6:ef:2e:c8:59:12:af:05:e1:75:db:fd:56:fa:af:
dc:92:a5:c4:4e:0f:1c:e7:07:c3:c8:e4:0b:1f:1b:
fb:43:85:14:00:14:10:86:30:58:2e:75:81:1e:3a:
d4:28:f8:1a:3d:8e:fd:1b:38:cd:da:57:3d:21:e0:
8a:c6:8f:b1:6d:8e:47:d6:04:a8:f0:b4:1c:3c:0a:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.178.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212604
Signature Algorithm: sha256WithRSAEncryption
84:d5:5b:c8:8a:e0:a5:3c:02:49:a9:b4:7b:f7:1b:18:c7:e9:
60:11:4e:80:95:2c:ec:6c:3f:a4:ca:07:ce:21:24:11:a5:d1:
18:5d:ab:c8:76:b3:3e:02:3f:1b:24:3f:75:b5:f5:3d:55:87:
3c:ec:78:b9:2c:a6:6d:ae:00:88:43:43:50:18:82:52:ac:f9:
ae:9e:c5:37:8f:d7:03:3c:1c:50:e4:e9:bc:87:44:20:f8:13:
1f:09:df:fe:10:04:ec:9f:64:56:57:c9:ec:e6:8e:b6:66:19:
8d:dd:ba:c2:95:db:79:4d:33:d2:a9:ad:64:1a:91:50:0d:3f:
4e:36:58:65:25:62:aa:c9:77:d9:0c:03:d7:9d:19:5f:aa:dd:
d6:bb:9b:03:87:3c:8c:94:fc:a2:10:c6:c4:b6:26:d7:a3:45:
e1:f0:f7:d2:5e:7e:97:f1:14:fb:88:a7:f9:ac:60:a7:e1:e4:
19:fc:40:99:9b:07:bd:a0:6a:8a:83:cf:b2:6b:b4:c6:d0:57:
7c:9c:85:e9:e1:43:e3:64:a9:5d:18:7e:b7:6e:a4:bc:da:48:
e1:9c:7e:f6:eb:44:93:e9:a0:85:39:cf:db:ef:bd:5d:04:65:
a3:fa:18:82:60:98:ae:35:46:f6:b1:1d:a3:a2:f6:18:40:0b:
61:e1:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:10 2024 by rpki-client on console-fra.rpki-client.org