Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
File: C047O4QkIliGMULtOhl5LZfLvHQ.cer (raw, json)
Hash identifier: /+lFIeVYqeN0ALvY/l6YFoGpwETT9ZUtPn2EnRRh6B0=
Subject key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01930B4DB354461BC766AAAE9C3D3E8BDF4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Nov 2024 10:24:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215443
IP: 2a0d:d940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:4d:b3:54:46:1b:c7:66:aa:ae:9c:3d:3e:8b:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 8 10:24:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:1a:36:74:40:23:be:7b:78:20:a0:f1:d7:
e7:63:53:96:ba:cb:9c:98:16:4a:6c:be:02:4e:0f:
79:af:25:b4:9c:13:0f:3b:40:95:4e:63:41:55:09:
5b:f2:ce:cc:1e:49:83:c0:e6:62:e9:73:30:c0:91:
ed:37:bd:65:b0:72:23:05:53:b5:89:c5:65:09:89:
15:c9:ba:eb:81:4a:5e:36:0f:fc:f6:aa:af:63:4c:
59:20:1e:38:c5:20:69:10:4b:47:53:61:ba:33:68:
59:9d:c6:22:df:9a:0d:0a:be:35:56:3d:96:08:dc:
88:15:83:db:42:d3:fa:b3:41:25:33:99:d1:e6:82:
f4:05:e3:7a:76:31:65:14:ae:39:f5:0b:78:68:25:
a3:fe:34:dd:55:ab:cd:a5:71:0a:26:32:df:71:47:
46:54:8a:61:8c:21:ab:57:e3:c7:59:46:ec:7b:96:
52:cf:5c:02:72:b8:5a:2c:c6:78:0b:e7:de:30:0d:
96:ad:42:1c:cf:9f:6b:96:88:7f:9b:67:f1:f4:bb:
cd:0a:d1:39:70:40:2d:af:4b:4f:13:5b:82:69:cb:
59:dd:bd:2d:d4:4b:d1:fd:23:3a:8e:ab:7f:6c:e8:
a9:9d:cc:ca:7a:7d:21:4b:e6:d9:10:87:dd:1e:27:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215443
Signature Algorithm: sha256WithRSAEncryption
88:d8:d4:61:79:db:85:56:d4:46:58:c6:61:8b:a2:69:78:b0:
52:57:47:ce:1b:8b:6b:0a:d2:6a:ba:f9:63:80:06:e8:89:c1:
0c:08:49:12:45:80:35:e7:a9:99:c3:9b:a0:2f:25:0b:e2:b4:
a4:7b:c0:ca:99:25:b8:f2:9b:e8:44:28:12:2b:71:53:04:be:
1c:e7:8c:95:a5:d7:84:a0:3f:05:4d:d8:8f:a1:31:8a:fa:87:
23:34:5c:32:bd:25:b9:1f:6c:cd:e6:ad:db:c3:8a:31:46:43:
56:92:78:d1:39:35:80:c7:a6:34:a4:45:9a:f0:93:a6:26:2b:
3c:98:48:b9:13:99:8c:43:0e:20:62:2e:f5:8c:5d:cc:27:a8:
b1:30:22:ce:48:34:9c:0b:76:e8:04:b6:51:40:45:36:bd:45:
b9:15:4e:d6:0e:54:4a:c7:22:86:bd:19:56:2c:8b:55:f0:ef:
b1:fd:91:0e:c1:07:4e:65:c7:c2:fb:bd:97:44:3d:c4:51:35:
31:0c:8c:b2:68:6c:d4:7e:d5:14:b5:9c:31:6a:fb:bd:63:fe:
c9:ac:72:67:12:46:8f:d3:f0:3c:32:30:41:c2:2d:cf:7d:f8:
14:82:84:0d:ce:02:ea:b4:01:bb:04:54:74:72:de:7c:1e:ad:
ee:d9:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:12:24 2024 by rpki-client on console-ams.rpki-client.org