Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
File: F263G9VVdvRXY7retnbtWZkNOWo.cer (raw, json)
Hash identifier: WbaS1hcpB7VE8fX5w/X1DGHCCic2oFrlvXtq1u/p9n8=
Subject key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CA8890BE82AE1D8001B5C6F654418
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206020
IP: 2001:67c:9b4::/48
IP: 2001:67c:9b8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a8:89:0b:e8:2a:e1:d8:00:1b:5c:6f:65:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=176eb71bd55576f45763badeb676ed59990d396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:5e:8a:63:e0:7e:c3:14:0d:0a:9e:88:40:
13:33:d5:55:e6:3c:69:69:23:48:02:4b:7d:63:b7:
2b:9d:60:da:2b:70:91:bf:d2:8c:40:f4:26:19:aa:
3d:e7:34:18:d1:e2:fa:cd:be:e0:ff:da:b8:2b:d8:
cf:25:a6:0f:5f:6f:b9:9e:10:14:6a:c7:8c:2f:97:
7f:38:71:ad:f6:51:a1:fd:fd:7c:9c:ba:59:a0:cb:
7f:5d:10:37:9f:da:15:93:a6:b2:4c:b8:d5:b0:16:
be:83:48:4d:36:8c:eb:7c:2e:75:24:12:6b:7c:a4:
02:6f:dc:b0:5f:16:de:72:c6:67:e3:d5:bf:0e:13:
ff:35:8d:a1:c7:1e:63:b8:33:f3:cb:73:55:31:43:
3d:3c:34:f1:db:0a:e8:30:4a:fd:e4:97:ee:78:78:
52:f3:1d:1c:2c:6a:8c:e6:7d:3a:b8:a2:b3:fe:b3:
6b:97:71:d4:cb:28:76:af:8d:b8:a1:27:27:1a:79:
fe:cf:38:74:57:20:fc:3b:3e:0c:ad:cd:3c:c9:e8:
0a:0e:92:99:5a:14:fe:92:5c:32:8d:85:45:5f:b7:
a9:4d:68:f8:43:d9:c3:0a:4e:7a:5c:f1:8c:37:17:
11:ca:d2:d7:06:d7:7d:62:1b:e7:4d:07:9e:e3:a3:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9b4::/48
2001:67c:9b8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206020
Signature Algorithm: sha256WithRSAEncryption
64:a8:0e:63:6a:96:b1:e3:e5:04:f2:a4:f5:d8:c0:ba:a4:ce:
1f:cc:33:fb:e0:d4:fd:6e:d0:34:bc:ed:30:e3:be:dd:bd:46:
d6:23:ff:d7:5e:fd:28:fa:96:3e:cd:2e:b3:46:1c:2f:f9:87:
e4:a8:05:34:70:ae:98:f9:03:bc:b1:46:9f:45:48:5f:2f:46:
1a:74:f4:1e:3d:89:e2:6d:5c:c4:a6:cb:79:7f:74:3c:49:07:
cf:98:b1:d4:15:de:cf:8f:1a:6f:03:8f:c7:a8:21:d9:40:f1:
3b:8a:d7:b7:8c:76:47:58:2a:5c:74:97:c5:5a:3f:b6:93:55:
7e:d0:b4:2c:04:62:8e:79:1a:7f:5d:86:35:ee:7e:3b:b8:0f:
07:9a:ef:5e:96:88:39:de:28:da:8f:ed:90:14:84:db:ff:bc:
a4:69:70:70:a9:45:a2:5e:66:ac:a0:77:75:43:e8:be:97:0e:
d4:5b:06:72:57:91:98:d2:4e:91:79:bc:e7:92:bf:ed:cc:67:
3c:fb:ad:e3:b3:53:76:7e:7c:8c:ed:cb:1d:5d:95:bf:2c:78:
ba:3c:05:1c:35:64:1b:b5:5e:21:1c:33:5e:b9:92:20:86:60:
95:1a:08:98:96:2a:c4:16:eb:1c:d2:b5:42:f9:4c:d5:98:a3:
66:f4:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:02:56 2024 by rpki-client on console-fra.rpki-client.org