Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer
File: 6TEUABhy-ryTnba-3B5s1pFGIRc.cer (raw, json)
Hash identifier: ww+K86j/URGDIeEse+HaUq3mq7NFb1JIV1SRQV9dNOE=
Subject key identifier: E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC342335B6A32D120A8E58DCD81BA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207901
IP: 2a0f:5740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:34:23:35:b6:a3:2d:12:0a:8e:58:dc:d8:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93114001872fabc939db6bedc1e6cd691462117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:8a:8a:b5:e1:4f:09:57:a7:38:92:f1:22:
1d:32:b3:3a:c2:c0:02:79:6b:d7:fa:6b:61:e1:65:
be:db:c8:ba:b1:c5:5c:8a:a5:3f:24:15:f4:b0:72:
d0:65:d6:e2:f1:96:8d:84:2c:90:61:32:47:ab:b2:
9c:03:7f:5f:3b:00:f3:e7:fa:aa:05:1d:87:39:6f:
fa:49:93:b5:62:5a:5d:24:fb:cd:b6:10:ae:e9:2a:
f7:bf:8b:31:8c:4f:59:c1:e9:93:9d:a9:51:4a:6b:
1f:9f:e9:f7:7f:d1:2b:dc:a1:58:62:12:01:e8:c6:
4a:37:c2:51:16:01:f0:27:c9:d9:c2:bd:5c:8d:d8:
6c:bb:31:3c:b9:3f:65:6e:7d:3f:25:e2:9f:07:cc:
80:86:00:25:cf:05:df:9c:18:6d:0a:0e:25:71:ff:
6b:4e:4b:60:8d:87:00:9f:30:f7:52:0a:f6:b2:4b:
4c:96:ae:85:e8:34:56:80:9a:0b:64:8a:7a:a0:74:
eb:b8:f6:7d:b3:f8:1f:f4:96:8d:21:d7:db:ea:d1:
81:26:d6:99:3b:80:13:05:8f:31:30:f5:c7:97:c4:
b2:56:50:11:1d:cf:11:f9:af:bb:9e:64:61:4f:0e:
dd:26:7d:98:b5:bd:03:fc:ed:c9:92:2c:46:20:da:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207901
Signature Algorithm: sha256WithRSAEncryption
2f:66:7e:34:31:7d:76:b8:38:a2:85:be:d6:32:10:97:dc:88:
74:cc:3e:1d:17:00:4b:56:81:51:6e:c3:9d:0d:11:11:9a:1a:
db:d6:5e:bd:a5:6a:0d:1f:98:01:f6:03:ed:85:3f:d7:0d:e5:
89:3a:03:9f:6b:e1:25:ac:ba:b1:c0:e1:2d:3d:ea:1e:05:d5:
b7:45:33:10:ad:7a:14:cb:d1:f3:d3:1f:d4:d9:8e:ec:ce:d3:
df:6c:5e:64:f4:2b:5e:92:be:aa:99:ac:fd:53:35:22:f0:67:
9b:5c:39:b6:2b:da:00:7f:07:83:f5:36:64:a4:6a:97:e8:ff:
8a:ba:5d:0b:0e:2b:2b:85:0b:11:c0:0e:59:7a:78:2f:ee:c1:
18:fe:f4:c0:6d:d8:90:95:41:c7:fd:87:72:42:ff:0a:45:43:
b8:19:a1:43:cf:a9:16:70:8b:28:92:9b:59:5b:8e:43:ce:e1:
85:a2:be:1d:78:5c:d3:17:30:9e:6e:d9:fd:f0:8f:b9:20:04:
7e:82:a1:e9:9b:9a:d4:8d:2d:12:e0:a6:9a:40:bc:5f:93:73:
eb:10:a3:bc:e9:c5:dd:16:4b:25:6e:60:92:73:6e:13:bd:35:
72:09:11:0f:b9:85:39:45:58:8c:e1:3e:15:6e:18:1b:c3:4f:
c2:9a:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:14:19 2024 by rpki-client on console-fra.rpki-client.org