Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer (raw, json)
Hash identifier: rQyZFQ8n5mn6unraU/sLbQnQ3Z7wU4NDpu4x+Rfe20M=
Subject key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29570F82C917C02CE7A1ADE0A9EC42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:814::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:57:0f:82:c9:17:c0:2c:e7:a1:ad:e0:a9:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:b3:0b:8e:af:d9:e5:e7:00:de:7d:40:b1:
05:a6:6c:70:61:d3:76:fc:ad:e3:31:87:70:e6:b2:
a6:16:88:9f:43:20:73:c7:e0:67:38:c9:5a:2b:14:
6d:33:54:b0:24:fd:d2:58:93:ce:ec:eb:d9:60:5b:
19:b0:a1:51:b9:dc:a3:ab:6a:ad:30:27:48:00:4a:
8f:64:4e:53:b2:40:0d:27:d4:2e:ec:00:1a:80:98:
3f:cd:15:9b:2d:d8:e4:59:20:59:d6:f9:5c:dd:79:
e9:84:10:41:23:da:1c:de:21:8a:08:bd:c1:39:bb:
ef:df:08:04:6e:76:83:28:30:38:a3:94:ac:51:b5:
49:cb:8b:48:ff:50:7a:b3:fa:6c:5e:0c:70:89:60:
0b:fc:75:cc:9b:4a:a2:3a:cd:b5:6e:87:62:dd:1c:
14:e1:8a:24:ad:c4:15:4a:04:18:a6:91:7b:d2:35:
94:d9:1f:19:24:e1:da:c6:e5:58:4c:61:79:82:cb:
57:4d:14:11:64:8f:24:9e:1b:9a:8d:ba:0d:31:3f:
9e:ed:03:4b:39:a1:ca:68:f9:6c:62:f7:e0:12:63:
57:5a:83:d2:e4:c6:2a:0c:eb:53:7a:16:cc:ee:51:
41:e1:a4:d0:bb:ec:51:11:05:13:77:86:33:be:ab:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:814::/48
Signature Algorithm: sha256WithRSAEncryption
6e:91:05:49:67:31:5d:4d:b7:0b:94:6d:24:de:61:c6:a2:04:
69:9b:06:37:e5:cd:b8:4f:1e:04:ca:d3:3d:da:c6:29:36:dd:
60:b1:21:8d:d0:bc:84:8e:42:bd:41:42:5e:f1:b9:9b:a1:7d:
b4:68:55:45:f1:30:6e:a5:a6:b6:65:c7:ae:51:c1:eb:1c:08:
5a:bc:3f:d8:fb:d2:29:a7:7f:49:21:9a:ff:36:07:d5:d8:f0:
dc:69:0f:9c:74:e0:33:6a:de:0d:62:e2:ce:ec:02:23:18:6d:
e6:14:9d:90:64:4b:db:3f:6c:b0:72:e1:dd:da:5d:fc:07:92:
80:0e:cd:c7:eb:cc:7b:a5:3f:8b:eb:d6:0b:25:5d:31:da:db:
e8:8b:dd:44:55:3d:25:41:4f:1a:85:83:50:4b:3d:a2:bf:4f:
50:12:d8:5b:33:72:38:65:73:c9:13:9d:e6:53:32:6e:43:86:
11:53:bf:9c:5a:95:6d:cb:62:f5:bf:3d:6e:13:15:48:40:75:
7c:4b:ba:0b:ce:d1:eb:23:96:64:12:cd:18:b4:e0:6d:44:7f:
67:21:b0:57:60:6b:20:64:ed:96:80:fd:b8:d0:72:b9:ca:3a:
39:98:cc:d7:5a:2a:4b:36:6e:7f:1d:10:c3:72:fb:63:68:63:
f8:d9:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:54:34 2024 by rpki-client on console-ams.rpki-client.org