Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
File: H7XBu67UTItq4_K1ZtAcwljfws4.cer (raw, json)
Hash identifier: SawM666187xl4TyIgLKknvYGhEXGY9AT0U31H4/rn+c=
Subject key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793FCE67A629202657B64C6EF418E95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211638
IP: 2001:678:f0c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:fc:e6:7a:62:92:02:65:7b:64:c6:ef:41:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:d3:7d:bd:d9:40:a4:f2:df:68:d6:df:7f:
0d:c5:5a:3e:bb:e7:79:1b:45:85:f1:4e:67:d5:c5:
3c:46:2b:65:70:b5:bd:52:11:6f:8f:55:d5:37:3d:
60:cd:48:b3:53:c9:c7:38:a5:6a:1a:61:6a:a8:45:
2a:ae:40:f8:bb:06:54:57:98:98:4c:b4:92:8b:44:
c8:42:4d:29:34:60:b5:ca:d9:3d:9a:eb:1d:69:66:
bd:3d:df:27:4d:42:e8:3a:27:84:84:85:b8:90:a7:
e0:c3:42:b3:bf:07:b1:84:96:f6:95:32:63:83:86:
7e:48:38:fa:ba:83:59:82:54:e8:67:10:41:f2:15:
3e:ca:63:80:6e:44:88:06:eb:07:1c:2c:e9:a7:f9:
c1:7e:f2:89:4b:70:5d:6b:92:bf:2c:9d:fb:54:78:
c2:67:80:37:50:2e:5d:16:6e:42:60:ad:11:9c:1a:
94:c3:93:31:23:cd:71:f7:cc:a7:bd:d0:95:9b:38:
0f:0d:a8:42:4e:0f:e1:d4:1d:6e:90:11:f8:6a:16:
27:94:c8:ce:25:ca:f8:55:1f:ad:e6:5b:aa:e7:c3:
99:de:69:49:78:7f:35:2e:ba:49:d4:32:8e:e1:8d:
f0:06:a2:6d:c1:e6:b7:6a:2a:64:ec:bd:cb:a8:e5:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f0c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211638
Signature Algorithm: sha256WithRSAEncryption
90:b5:20:e3:95:29:c9:e1:66:a3:8d:28:cd:1b:f8:0b:ab:ce:
83:54:ab:0d:7c:2f:05:2f:91:09:46:b6:c8:d4:fa:9d:86:48:
80:3a:59:52:79:c1:f4:cd:18:fa:e0:6e:74:1e:c3:8d:39:14:
4c:5c:93:5a:12:3d:ac:6b:14:99:e5:a3:03:ee:04:74:66:3e:
9c:c2:2a:07:d9:10:92:4d:b3:8b:6b:08:a3:4e:06:68:30:e7:
25:fc:fc:5b:94:4a:0d:3f:cd:5a:c3:bb:b3:ce:6c:07:03:6b:
80:59:c1:ea:7f:66:ca:1c:e6:8a:9c:78:37:11:85:63:1c:10:
65:af:7f:fb:fe:22:75:6c:ec:f0:a4:69:dc:db:55:ae:5b:95:
0c:fa:ec:5c:bd:73:a6:03:94:5e:c3:aa:d4:64:4e:f0:9e:09:
7c:ec:9c:f0:65:6e:1d:30:0b:2e:10:04:39:15:34:f6:d3:8b:
ad:b3:c1:6b:b8:67:4b:46:fc:55:91:c2:1c:79:aa:32:e5:89:
1d:d7:0c:1e:f7:87:b0:7c:0d:ee:db:9a:bf:11:ff:95:17:da:
5b:00:40:3b:a5:83:e8:c1:09:4d:24:7d:3e:b6:36:fd:6c:df:
d8:6c:af:73:b8:02:3c:86:dc:60:bb:a8:77:7d:15:de:9f:44:
d3:ea:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:58:52 2024 by rpki-client on console-fra.rpki-client.org