Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer
File: CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer (raw, json)
Hash identifier: B0Xwa6fdzU+rNq0pTyq3C3eJY9l6FYLX6Pohb8mCdIo=
Subject key identifier: 09:B5:10:29:F5:73:FC:99:C2:A3:D4:B9:89:AF:14:5E:F2:13:BB:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8015358532D96DF78F4AF6C48726F5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:28c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:58:53:2d:96:df:78:f4:af:6c:48:72:6f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09b51029f573fc99c2a3d4b989af145ef213bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:48:b4:dd:2d:cb:1f:42:4a:43:ab:9c:bd:
f0:0a:da:cb:10:a1:96:42:30:72:85:b0:ea:6d:3d:
30:ae:dd:8f:5c:ed:c6:31:df:6a:fe:c2:37:b7:db:
54:f4:1b:8e:9b:94:5c:77:8c:64:49:6c:13:22:04:
30:5d:3e:f6:b9:6a:ae:56:78:5f:91:2a:28:d0:88:
73:fe:16:52:79:c0:2f:6f:e4:d8:b9:7a:8f:ea:d0:
e1:7f:bf:1d:fe:db:29:70:62:98:17:c6:44:07:93:
6d:93:14:40:13:56:88:48:f7:11:1c:df:e6:31:9c:
98:24:0b:5f:94:c4:23:a5:3c:a1:10:2e:4f:b8:a9:
59:ec:52:38:5e:56:31:4a:98:59:80:b5:f7:2f:6f:
44:de:b4:a2:92:d4:c4:1d:46:db:e1:6c:aa:55:ba:
4b:4d:b5:f1:71:6e:99:ac:fc:ad:e6:ea:4b:30:a4:
7c:71:92:99:2e:ca:d4:94:14:69:29:78:61:bb:5c:
35:62:2c:f1:2a:41:67:6f:a6:a1:db:52:f3:72:5f:
ba:44:3f:f2:d0:c1:c5:aa:d8:8c:c4:58:8f:0a:11:
78:39:bf:2d:63:54:4c:47:d5:d2:2e:5f:b1:dd:da:
11:61:41:bc:33:e4:93:bd:93:c1:ea:2a:19:0c:54:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:10:29:F5:73:FC:99:C2:A3:D4:B9:89:AF:14:5E:F2:13:BB:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:28c::/48
Signature Algorithm: sha256WithRSAEncryption
21:2f:85:74:2f:16:b0:59:c9:9f:99:c0:52:e7:0d:cb:4a:f3:
2b:e9:32:2e:cd:96:9d:ec:98:11:a7:01:44:95:af:62:6e:9b:
ee:20:a9:b6:aa:a9:ec:97:71:57:3a:7c:cf:66:c8:70:c0:da:
6d:09:30:bc:2f:c0:3c:99:73:98:15:73:ed:fc:71:ef:0f:ee:
b6:ca:d9:97:85:a7:f0:33:e5:47:1f:f1:52:d7:dd:92:e3:aa:
e4:10:dd:bc:14:87:0f:e8:89:1c:cd:a8:28:d5:71:32:a0:16:
45:84:09:63:d5:5f:cc:cc:15:de:97:12:e7:99:04:c9:7b:d5:
8e:dd:4b:91:f0:e0:bd:a7:ff:1b:a6:d1:ce:46:0f:5d:ce:8f:
76:24:ae:9d:f8:68:b3:98:66:ae:53:1a:c5:25:17:0f:b9:6e:
90:b2:08:dd:0d:79:31:f6:d3:65:a2:24:50:ca:f2:e8:f3:7d:
c9:2c:1c:cd:73:2a:43:82:9d:31:cb:30:53:50:bb:b3:aa:af:
73:c0:3a:4e:91:a9:9b:21:ae:23:24:a3:3d:ae:9c:7d:27:21:
66:7b:ae:42:98:47:ed:7c:94:8d:18:37:a3:2f:f5:9d:c0:f2:
56:5b:4f:0f:3c:a5:f9:f3:5a:db:e5:fa:c3:c3:bc:46:7e:2c:
9a:9e:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:15:44 2024 by rpki-client on console-ams.rpki-client.org