Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer (raw, json)
Hash identifier: mNSzMSgWIERMMJmCcr5M6B55rJVAO5p53pAXGahWs7Q=
Subject key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424CF83772D1E1555B6FC7880A583DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41709
IP: 2001:67c:26f8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cf:83:77:2d:1e:15:55:b6:fc:78:80:a5:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:d4:dd:42:b1:f0:89:f8:19:73:33:59:c4:
c2:47:fb:5a:9e:34:c0:ef:1d:6e:57:8c:0b:3a:f5:
90:f1:de:d4:41:e7:3a:cd:ef:8d:75:c0:00:63:28:
80:65:8e:76:2f:34:80:58:08:03:9f:bd:47:8b:f3:
e3:03:b7:64:2d:2c:e0:90:28:2c:9a:06:c9:aa:99:
5e:d3:f2:ce:26:b8:1a:c5:78:b5:dd:a8:6f:42:2f:
94:6a:cb:a8:6a:2c:6d:1a:93:03:b0:86:65:76:38:
04:51:93:5e:08:2d:32:36:14:77:e0:d7:4a:3e:25:
60:e4:75:05:9c:57:54:26:d3:3e:f0:6e:bd:8c:d6:
4d:6a:d6:22:03:d9:dd:02:b4:6c:fe:0a:b4:03:49:
7a:95:25:9f:1c:7a:de:bb:96:6c:ed:22:da:59:96:
17:3b:0b:0f:e6:63:24:23:a0:f1:6f:d5:03:3a:55:
24:22:3e:62:f1:92:db:20:cc:a4:e3:9e:21:82:76:
f4:25:05:43:9d:b8:4b:93:ed:fb:79:c7:4b:ba:4b:
ec:61:a1:32:6f:6d:cc:4a:64:30:d0:6b:8f:fa:0b:
5e:2f:05:3a:27:d9:6c:d8:d1:dd:31:d7:9c:34:04:
17:43:39:79:2f:44:fd:b9:12:53:ac:38:6c:bf:19:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41709
Signature Algorithm: sha256WithRSAEncryption
39:a8:0c:b5:7e:9c:32:7e:23:99:d0:dd:ba:88:c6:ed:c4:93:
e5:0c:96:eb:fd:b8:c9:46:cf:88:c5:9e:a5:6e:e6:40:92:1f:
ed:ff:bc:bd:89:45:dc:d8:3a:69:a3:17:fa:15:48:8b:b6:9e:
b9:9a:c2:03:ed:1d:7e:f9:dd:fb:1c:fc:db:61:2c:78:43:be:
c2:11:92:3b:88:cb:39:2e:ed:f9:f0:e2:58:de:47:44:e5:3c:
33:72:1c:66:68:2f:03:96:a3:21:b2:4e:bd:45:8a:65:39:2d:
94:2f:f0:27:fe:81:bb:f1:45:56:a6:89:86:3a:37:45:f5:11:
3f:f2:55:29:62:07:12:82:0a:69:92:6d:a4:5b:1f:35:30:12:
0a:0b:ff:dd:b2:58:07:05:e4:48:22:4f:59:7a:11:25:c0:f6:
59:ff:49:29:bd:26:a1:ae:c6:2b:26:b8:26:d3:dc:11:63:6b:
41:48:24:82:60:0e:ce:fe:3c:16:f3:e9:53:54:2d:6e:1d:eb:
4a:f2:df:5e:f7:43:3e:2a:aa:d0:66:70:2d:d0:e2:84:0d:ca:
57:44:9b:4a:15:75:c4:49:48:1b:61:55:c1:75:7e:3b:00:dd:
80:81:63:bf:01:85:1c:e6:b2:21:34:6f:9a:28:bf:19:55:ac:
82:9d:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:10:46 2024 by rpki-client on console-fra.rpki-client.org