Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer (raw, json)
Hash identifier: HsTLArgevU+brXKvAkHdLQnjDwUzxlH7E/fXiCeZa8A=
Subject key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B734579834E6428F141B92F989068F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204654
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:34:57:98:34:e6:42:8f:14:1b:92:f9:89:06:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:b8:76:75:3f:68:c6:28:71:f3:37:72:69:
61:cd:16:22:45:11:98:bd:a6:c5:a7:e0:a8:64:82:
15:50:1c:84:0a:bb:5a:36:36:fb:ea:ed:1d:11:63:
32:f0:b9:33:90:3e:e8:c6:59:e8:01:f5:d8:fa:90:
5c:62:56:9f:f6:8b:0b:ec:97:98:b2:27:b1:b8:dc:
51:35:87:9f:38:50:2d:21:b3:c9:62:8c:cf:a5:f3:
3d:cd:93:1e:50:11:55:dd:d0:5f:0e:5c:fe:51:6d:
c2:9a:87:c1:17:c1:fd:90:d8:72:ae:0c:fe:0f:ee:
75:70:73:03:3c:04:94:a5:75:4d:26:57:e9:40:82:
21:97:01:a9:23:5e:4a:b1:0a:80:74:70:22:24:09:
07:21:2d:9d:64:e6:89:31:0c:14:15:77:30:36:73:
3b:89:2f:42:41:6e:f8:8b:12:79:e1:be:e0:74:81:
53:34:b2:dd:44:97:97:58:91:94:4c:25:22:38:b8:
a9:6d:5a:b2:72:00:62:43:8f:e8:54:10:3d:51:f5:
2a:bc:f9:dc:39:f7:f0:ae:da:7e:65:51:71:e2:47:
79:ea:d2:22:96:0d:13:57:77:2f:c2:d5:31:74:51:
19:ad:94:60:51:0d:78:5f:fe:fb:69:11:16:cc:e3:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204654
Signature Algorithm: sha256WithRSAEncryption
8d:46:e5:c8:32:a0:61:b5:05:93:66:ba:42:9b:9c:67:dc:62:
bd:6e:23:78:04:7a:f9:5c:2a:51:7b:43:9e:53:ed:cf:b3:f4:
6a:0b:d6:4c:96:9c:ea:92:0b:a4:22:af:55:42:db:68:1b:e0:
e8:3d:03:42:04:90:2f:a4:2c:d5:a2:45:88:db:fc:2e:b9:06:
69:8d:3c:bd:be:39:6b:17:dc:4a:de:6e:70:39:be:df:c4:71:
b7:5e:22:0d:3a:d8:f1:f8:10:fc:41:1d:5c:34:e7:f8:6e:22:
9d:91:6e:88:59:75:af:cc:90:5c:a9:4c:29:ef:04:56:2a:2d:
f3:e4:60:7f:ca:4f:27:fe:7a:be:d8:9c:69:ea:92:a8:7e:d2:
f8:10:2c:ca:22:20:b7:74:47:cd:f1:95:d1:a0:ca:16:6c:54:
13:8a:26:be:0a:59:17:22:39:78:57:ce:b6:89:5a:a9:ce:bb:
a5:68:3f:ea:83:2d:f4:70:78:ed:35:2b:a9:0d:83:05:1f:08:
48:76:7b:30:54:33:2a:fe:a6:f8:a1:9e:15:c0:03:7f:b0:b8:
a2:43:89:d7:60:43:9c:20:db:f8:58:d0:43:83:23:2e:95:98:
ed:50:79:9d:e1:bc:7f:07:2a:cf:86:1a:a5:46:bf:ab:81:1e:
6a:7a:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:12 2024 by rpki-client on console-fra.rpki-client.org