Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
File: C9-ByZHNkAh58f27jO5mHdLcCJo.cer (raw, json)
Hash identifier: cnu6KV3Z/CTnGAuMDqkPjBTe7dEkiAVNsV0bit/eL40=
Subject key identifier: 0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B86A8173C2A12D9114044EA60F116
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/C9-ByZHNkAh58f27jO5mHdLcCJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212966
IP: 2001:67c:2480::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:86:a8:17:3c:2a:12:d9:11:40:44:ea:60:f1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:4f:f4:63:3d:04:8a:14:da:2c:f6:ae:ef:
bc:87:5c:38:a2:f2:1a:4b:2e:39:67:f4:ef:0e:25:
19:59:22:fd:85:1c:6a:ef:79:98:50:98:1a:cd:eb:
ab:23:13:24:a1:11:11:34:39:48:d2:ad:39:3a:16:
b3:63:22:e1:0b:7c:1e:d4:5e:0f:8c:54:74:8e:4c:
71:26:b8:af:70:fa:51:50:7a:e0:06:e9:4c:2d:4e:
e1:68:70:80:01:1c:57:65:2b:4c:60:18:34:8f:3e:
0f:0a:bf:63:b9:8a:47:36:64:24:18:9b:99:ac:28:
94:77:96:22:e6:cb:a8:9a:4b:60:92:15:d5:08:dd:
7e:f2:62:35:b5:fb:43:d7:b4:8b:09:f8:6e:f6:53:
a3:11:a6:19:f9:c1:bc:aa:92:1c:f7:6d:2f:cc:93:
f4:79:1b:bf:d8:a0:26:05:1c:2f:2e:d8:1e:ee:e3:
d3:29:a1:1d:7a:74:4d:bd:83:4b:96:91:09:60:8e:
bc:f6:c7:34:50:f5:d7:f6:72:d7:49:a8:e8:d9:8b:
55:09:d3:03:e5:64:5e:87:c4:57:59:0c:4f:2c:bf:
d0:ec:17:0d:86:6d:3e:f7:8a:43:db:70:46:5e:e7:
0f:a0:37:0a:af:6a:18:84:ef:16:80:54:a9:5d:c4:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/C9-ByZHNkAh58f27jO5mHdLcCJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2480::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212966
Signature Algorithm: sha256WithRSAEncryption
3c:db:eb:e7:ad:4b:d2:47:dd:fd:2d:b5:e1:80:17:a0:f6:09:
71:60:f6:05:53:77:44:33:fd:11:b3:71:88:18:1a:d8:d5:36:
12:d5:02:a7:12:28:91:c7:a5:a9:e3:6f:dc:ef:d3:bf:b1:96:
85:ae:cc:0d:79:86:1a:94:b4:27:54:f5:25:61:a4:ff:64:b2:
b9:b6:29:06:d1:4c:8d:b1:88:11:30:eb:06:d5:76:aa:c8:0e:
85:07:cd:1e:fe:f6:e9:b6:1a:e7:65:0e:38:03:05:0b:ff:4f:
ba:62:4b:97:88:0b:0c:d6:b6:24:06:27:1a:6d:e6:2e:3f:57:
b8:c5:3c:31:50:1e:ed:d7:c3:3e:4f:b8:b2:59:95:da:2c:51:
18:f6:3a:28:1c:82:07:cd:96:83:c6:a0:31:99:22:b3:9a:ea:
2d:c5:f2:77:86:8e:43:dd:43:dd:18:85:d1:86:16:cc:fd:86:
b2:1c:59:dd:14:e0:b4:de:3a:06:f4:fb:8a:09:54:e4:2b:73:
e1:4f:0f:5b:7b:a6:6e:db:6d:6a:a7:13:b7:0c:7c:95:dd:05:
0f:48:ef:5d:ef:c8:c9:73:da:69:37:2e:91:25:e7:bc:b2:ff:
78:87:e2:0d:21:ed:a6:fc:43:af:d3:51:0f:e3:3b:74:58:01:
26:b2:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:10 2024 by rpki-client on console-fra.rpki-client.org