Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
File: JxyaxSXAuEK79l0-xnaJcDzKMls.cer (raw, json)
Hash identifier: 8oVI4Wn/nj/zI4x3Hml58ZJ2IVz20fVijzAB5pUd87M=
Subject key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72CE6DD7D88EBB799838C88E00F82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 64413
IP: 2a06:2ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2c:e6:dd:7d:88:eb:b7:99:83:8c:88:e0:0f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:60:3f:f9:b4:97:7e:4d:89:71:b9:33:6f:
4c:9c:da:31:d7:19:0f:82:36:9c:d6:7c:51:82:9c:
77:96:c0:a8:15:15:45:10:2a:4e:9d:2a:ad:ae:8e:
05:09:9f:12:8c:c9:a3:22:33:be:06:bd:99:d8:ef:
d4:40:8f:6c:8e:a9:61:bf:2d:b2:32:8b:f4:af:64:
51:61:9e:d9:39:41:5b:a4:dc:83:2c:75:8a:13:ba:
12:df:a9:69:61:20:ca:c8:3c:66:64:97:f4:bd:88:
2f:84:35:48:44:7e:8b:f6:f7:1a:2a:3b:0f:1c:5d:
0d:7c:74:10:6a:ea:bf:d7:26:32:b3:13:4b:71:2f:
91:53:f1:fb:c1:87:12:09:19:ee:6e:f9:5b:2b:cc:
2c:41:0c:da:99:07:f8:dd:c7:66:8a:e9:89:f2:1c:
33:55:c0:3b:6f:7e:c3:79:fe:f5:81:71:f6:6c:94:
fd:85:61:8a:f3:f9:1e:32:5e:09:21:2c:4d:ca:04:
8e:46:43:e5:eb:b9:b5:0b:5e:97:bd:06:1c:b0:32:
ca:d2:ec:bd:9f:f7:76:75:86:14:9e:09:ca:23:9e:
0d:3d:cd:38:f1:60:8d:2f:34:2a:35:d8:4a:15:22:
0c:ea:99:72:32:27:e9:85:83:08:0a:e5:06:90:2c:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64413
Signature Algorithm: sha256WithRSAEncryption
af:30:4e:5e:28:33:e0:b9:22:76:26:3b:cd:0a:cc:76:ff:63:
5f:93:a2:57:a6:44:89:c1:4c:7c:5c:7d:a2:f7:1f:9f:5e:39:
ba:f8:31:08:d3:9e:88:e7:e6:bd:ef:48:b0:bc:7a:c6:f2:ce:
9a:c7:1f:7a:21:cd:2e:51:01:ad:4c:16:da:bf:88:41:72:de:
88:51:56:fc:5a:d3:1a:c7:f5:f1:e7:19:ec:38:3d:d6:c4:ab:
01:61:92:86:88:f1:8f:48:3c:f6:50:34:31:b9:df:6a:87:ed:
9b:b5:de:f9:d3:3c:b8:31:72:a8:51:06:6c:41:3d:42:e9:6c:
3d:9d:6f:bb:98:b1:0b:fe:ab:98:9b:87:63:a1:63:53:5f:15:
81:81:bb:4b:a7:54:7f:a9:89:a1:6c:b6:b7:17:10:32:8a:7c:
35:ac:19:10:e6:09:f9:4a:96:3e:ca:52:de:ed:af:d8:7a:f1:
8d:ca:87:5e:22:77:1a:77:2a:a2:77:19:c0:6c:7f:e9:33:fa:
06:65:57:3e:aa:c6:85:79:43:77:74:a7:a0:f5:57:88:6c:2c:
53:83:e2:83:86:d5:7f:b1:d0:18:8e:a2:2c:a6:d1:53:cd:67:
fe:76:d1:63:e2:60:b5:be:57:2d:c0:a4:6c:e4:3e:6e:b5:89:
ac:e5:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:12 2024 by rpki-client on console-ams.rpki-client.org