Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
File: C6VqvctPbwyGuDLswT9eJJch1vg.cer (raw, json)
Hash identifier: 2iPv8riintwVq8kYE9z73m9tRii9JZ5Lct8DTQ0zqqQ=
Subject key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010D41EA7B635FD145A5B91EE34386
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201909
AS: 212192
IP: 2001:67c:624::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0d:41:ea:7b:63:5f:d1:45:a5:b9:1e:e3:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:01:b4:13:f3:5f:3f:bd:38:78:89:c6:53:
e1:87:95:fa:99:3c:d9:34:4e:c6:90:a5:2e:9c:14:
18:ec:1a:cf:15:7b:af:c7:5e:64:41:28:63:48:05:
fd:18:a7:51:de:6b:40:b5:72:1b:c3:cd:0d:f1:8d:
32:41:31:1b:6b:58:e4:20:b4:81:5b:13:fd:0c:ad:
86:c0:1e:29:63:70:21:62:a1:d6:6f:08:2c:ea:fe:
2d:a9:cd:f5:0c:25:9c:91:6e:5d:61:35:40:28:de:
bf:ee:69:0d:a0:81:93:98:64:1c:67:72:bb:69:ef:
0a:dd:9f:f8:10:1b:b3:26:91:0b:cb:ee:de:7b:6c:
1a:a8:f2:4c:d4:11:cc:7d:e3:f0:b8:83:34:3f:54:
69:b6:b1:84:5b:cd:17:9d:c9:71:f4:a3:e7:93:32:
93:70:18:4a:7a:37:b6:88:47:9f:a9:3a:fc:2b:40:
9b:16:18:20:f0:b4:4b:cb:f8:8f:be:3a:e9:17:5d:
37:ff:e7:55:e6:67:da:7f:ec:05:b7:69:d6:09:ac:
b5:38:8b:a0:81:06:f3:75:76:88:38:60:92:09:5e:
0b:66:ea:f5:2d:7b:7f:11:60:ea:21:59:13:78:43:
ee:45:5c:b2:93:60:59:3f:85:b1:6a:bb:29:58:87:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:624::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201909
212192
Signature Algorithm: sha256WithRSAEncryption
66:ce:0c:cb:6d:6c:22:47:73:04:07:49:f2:b0:b2:33:11:54:
4a:a1:36:67:f3:01:26:c9:33:25:33:a3:ee:14:30:ae:bb:b2:
e7:d9:c7:b0:91:e3:4e:81:f2:04:6c:bd:44:52:7c:71:b2:11:
08:18:ca:1f:b0:96:90:b0:97:ce:47:d3:a6:08:88:8d:33:4f:
ad:6a:f8:eb:b4:60:13:99:d6:f9:f0:a1:e5:97:cb:5b:2c:7e:
f9:a7:a8:c0:d9:3a:3a:0c:6d:89:cb:40:68:71:df:53:ae:7f:
bf:1a:44:e8:f0:58:29:18:f9:2d:bf:90:70:f4:59:c6:01:4a:
b2:fa:07:fc:65:b7:24:27:f4:71:50:27:a7:b8:fe:c0:de:10:
8c:8b:e1:f3:83:35:44:c3:ba:b7:ba:c9:22:1e:ee:a6:8d:3d:
fe:4f:f1:59:9e:9e:bf:ce:c2:ec:09:f0:f7:87:fd:ad:e9:98:
97:92:c6:08:49:39:dc:73:30:e9:83:ac:ae:d5:4b:18:5e:a6:
27:6b:2b:c5:df:d7:0c:21:11:80:f3:9a:bf:b7:87:75:cb:8a:
2c:a8:03:b5:7b:2d:93:57:53:a4:c0:20:51:fd:c3:a2:0a:57:
33:20:e7:48:64:9b:72:2f:5b:54:07:f2:06:82:27:0c:a0:44:
ff:9c:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:09:55 2024 by rpki-client on console-fra.rpki-client.org