Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
File: GNl5-JL-uBmXaiX-lH9devN-zH0.cer (raw, json)
Hash identifier: fyiWMnV4vyYY4S7A8itMx5fEX6Mapv01nub0c4LHON0=
Subject key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7940897906F815CA7EE95E62875AFB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:654::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:08:97:90:6f:81:5c:a7:ee:95:e6:28:75:af:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:7f:50:4a:79:1e:af:5b:9f:df:7c:a0:5e:
59:f2:1d:4a:8e:d1:22:f1:96:fe:e3:fa:24:ac:9c:
d9:9a:83:ce:5c:4d:99:57:b0:5e:c1:8e:31:e4:7b:
1f:73:af:2f:16:6d:b4:5f:7a:ba:63:b7:c8:0b:4c:
e5:4a:99:63:2e:72:fe:55:6e:47:ce:5f:fd:7b:4f:
f2:31:6a:ba:ff:48:19:10:df:7d:72:58:b2:f8:fc:
91:eb:c5:17:3a:ac:67:7d:fe:83:96:0d:47:00:a5:
d1:e1:6f:70:a4:45:41:fd:cd:62:83:1c:c1:4c:c8:
d9:48:c7:26:a2:a9:9f:ec:b9:62:46:17:00:1a:cd:
74:c7:c8:c7:d3:23:b4:d1:91:a5:46:4b:e0:62:15:
e5:df:64:dc:f8:cf:f2:d1:7e:97:a7:f4:a4:e9:77:
81:b3:d0:6e:17:cc:62:ea:77:04:e8:c8:b6:26:36:
09:c2:21:35:22:e5:ce:06:44:4e:80:72:a0:ed:52:
53:ba:fd:10:c0:c1:59:14:35:9e:c3:0a:f9:a6:a6:
5e:8e:80:9f:18:1b:35:1c:fa:4e:e3:b7:1d:7b:55:
a5:28:2b:8d:c0:a6:30:02:ff:81:4e:81:7b:63:fc:
4e:84:44:ea:c0:d3:24:16:36:13:c7:80:64:76:09:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:654::/48
Signature Algorithm: sha256WithRSAEncryption
6f:df:81:2e:59:a6:a7:3c:f3:e7:af:d2:93:98:c2:b9:31:24:
4a:6c:34:1d:3d:ca:c6:15:28:90:90:9c:04:13:61:35:1c:8b:
70:5d:c0:46:ac:06:2b:8c:8d:df:93:92:e9:62:a3:22:b8:4e:
8a:f0:e4:cc:e6:5f:98:20:40:f7:42:fa:d9:21:8c:91:92:f0:
ea:35:39:8a:dd:02:5b:78:af:06:d2:f5:df:ee:c3:20:85:e1:
ac:2f:c2:b9:2e:03:d5:21:5f:c7:cb:f8:b5:ce:89:9d:56:b6:
cb:34:d6:77:ab:91:7d:d8:4d:f5:eb:21:4d:e0:d4:d2:02:9f:
24:d7:47:ea:78:c1:d8:ba:d8:05:db:13:7c:16:f3:d6:0b:d5:
cd:9d:c2:d1:52:54:0a:3c:7c:4e:0f:6f:51:dc:26:84:e8:70:
ef:a6:41:4e:09:69:32:d9:80:5b:fb:44:6f:ee:4d:bb:9c:89:
b2:21:18:a1:5f:0f:f5:a1:cf:1b:5f:c9:c6:d8:03:a2:1f:36:
f6:6e:aa:96:79:da:2e:5b:b8:7f:2c:77:a6:87:4c:63:cc:0e:
dc:a5:76:e7:b9:29:c2:f9:79:42:8a:8c:4a:89:9f:a4:37:34:
59:e5:46:94:52:5c:18:eb:32:e6:d0:7b:fc:7f:84:5d:79:d5:
14:04:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:30:48 2024 by rpki-client on console-ams.rpki-client.org