Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
File: EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer (raw, json)
Hash identifier: HIfeP3imkJOtKivw9lZ/kHHIxgzapUVihA2g5cdgLhc=
Subject key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8710B92BFD1777AA4917E7CCCD0E0B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:4d4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:0b:92:bf:d1:77:7a:a4:91:7e:7c:cc:d0:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12e64042b6e7288a485db270c551329b802fd8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:9f:2f:2f:bd:84:59:a7:fc:d5:37:61:ef:
0b:15:96:a8:13:76:da:d5:fc:30:be:6f:be:f1:1f:
ca:25:87:0a:ef:d3:79:a7:c7:a9:c1:80:f9:b9:b4:
92:3a:e6:1f:a2:03:03:87:d2:fc:13:59:69:4c:4c:
7a:e0:d8:b3:b4:89:1b:e2:3b:96:8a:7a:7c:ad:5a:
63:ae:56:17:5e:fe:c3:2d:4c:18:74:f0:6b:d1:f9:
4e:5c:1d:f5:14:eb:7d:09:cd:05:72:53:05:19:6d:
ea:55:60:3e:2e:99:14:9f:23:ee:90:6a:49:80:c5:
15:ae:8c:8d:4f:7d:6f:39:14:b0:de:dc:98:5e:af:
4f:1b:75:c0:80:a8:9e:53:c8:e5:a1:61:94:e3:a4:
60:99:09:63:9e:42:f4:db:74:7a:2f:de:ca:59:b0:
ef:db:54:79:89:67:0d:2a:fa:4b:df:6a:1e:b8:03:
d1:b1:d3:c3:b6:ea:4f:ac:b3:e3:57:d4:67:96:2d:
78:6a:db:94:86:ab:41:c2:7f:49:8a:8e:22:2a:77:
56:75:8b:9c:15:86:4d:bd:0b:f2:7a:d8:ea:38:a0:
77:e5:f6:db:c0:2b:7a:38:52:de:7d:76:f6:c6:9f:
55:8d:ff:59:58:e1:d3:88:97:af:68:9b:6e:85:38:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4d4::/48
Signature Algorithm: sha256WithRSAEncryption
60:24:5d:cc:e3:62:c7:0f:4f:7c:60:c6:87:79:f9:43:cd:20:
8e:7a:9d:b0:46:83:0a:6f:fb:1e:b2:51:47:d1:6d:a2:d6:51:
0a:0b:46:31:4d:01:15:8e:15:c0:8b:01:b7:20:49:a7:dc:2f:
48:22:ee:5b:aa:de:8f:2c:38:ad:91:c6:24:bd:7f:90:dc:4d:
e2:b3:3a:ab:e4:b9:e7:89:ea:df:6a:69:25:2c:47:48:a6:e2:
e2:3a:6a:56:5e:e5:ca:eb:2a:97:1b:ca:9d:a3:91:88:cd:e6:
e8:e7:f0:9f:f1:c4:d4:d7:b3:a9:ba:39:5b:38:d8:b3:e2:59:
0c:c1:d3:c3:d4:14:aa:58:8b:ff:34:64:99:e9:4c:f4:a0:16:
50:39:a8:ae:6c:d5:08:9e:7c:a3:2d:b6:cb:27:dc:e9:01:b4:
fe:18:aa:8d:48:d7:8a:ab:84:57:ae:5c:5a:38:2a:32:fb:cb:
75:48:fe:91:8e:d0:ad:e6:2f:dc:7f:9f:59:27:08:1c:eb:26:
58:d1:67:ce:67:a6:87:0c:7f:a4:f8:d4:25:3a:f9:83:b9:32:
fa:12:1f:37:c4:8d:7a:22:85:e4:bb:d2:97:7e:bb:32:98:6e:
dd:fa:a1:34:d6:07:9a:b7:77:a4:96:cf:3d:29:cb:23:c0:e6:
b9:74:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:30:25 2024 by rpki-client on console-ams.rpki-client.org