Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P2Bb87wivxCkXKJmDO-ap-KaXsg.cer
File: P2Bb87wivxCkXKJmDO-ap-KaXsg.cer (raw, json)
Hash identifier: 0B2z+xInf6Vtzmp/1VJAY/AMEJ0UgZoBZ381EkGL4rE=
Subject key identifier: 3F:60:5B:F3:BC:22:BF:10:A4:5C:A2:66:0C:EF:9A:A7:E2:9A:5E:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC344CBD0A880447A8594A14D3B744829
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/0/3F605BF3BC22BF10A45CA2660CEF9AA7E29A5EC8.mft
caRepository: rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/0/
Notify URL: https://rpki.caramelfox.net/rrpdp/notification.xml
Certificate not before: Mon 01 Jan 2024 04:25:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211169
IP: 2001:678:f68::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:44:cb:d0:a8:80:44:7a:85:94:a1:4d:3b:74:48:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:25:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f605bf3bc22bf10a45ca2660cef9aa7e29a5ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:e1:98:ce:04:24:cc:96:75:78:bf:b4:33:
d8:8d:95:38:79:c1:e9:e1:dd:e6:61:9d:e9:b3:dd:
47:79:f3:37:bf:86:43:2e:01:7b:79:52:26:11:d3:
11:56:9c:66:e3:02:b3:49:68:3f:b3:5b:b0:eb:e3:
31:a6:3b:36:f8:e4:be:18:9a:41:a9:5a:ef:85:18:
ec:39:1e:a1:c5:8b:31:28:48:49:bb:36:0f:c0:35:
3c:56:70:49:3f:2f:6f:81:63:6b:bf:fe:cc:ec:87:
03:7d:83:a8:1d:43:0d:59:15:85:d8:6e:15:37:cc:
5b:68:3b:e0:fe:7f:35:c9:23:ed:37:32:5a:b9:92:
c5:5f:26:77:c4:a9:51:44:f4:80:3c:85:a7:65:7a:
1d:0d:73:fe:93:8c:d0:62:3a:da:91:d0:f4:08:e2:
36:66:bd:54:54:bd:3b:c9:4e:cc:1f:76:74:07:a2:
4c:12:d4:ad:4c:71:02:46:66:6f:0d:f4:e9:d8:73:
7f:2f:be:b4:77:53:b2:6a:0a:6b:13:65:75:d3:27:
1a:11:4e:c4:7d:73:a1:5f:9e:96:d7:9b:64:d7:d8:
d7:f0:c2:fe:27:81:ce:94:4b:59:54:b5:38:aa:95:
d2:cc:9e:dc:3a:e9:8b:bf:df:33:fd:a2:5d:c1:b3:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:5B:F3:BC:22:BF:10:A4:5C:A2:66:0C:EF:9A:A7:E2:9A:5E:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/0/
RPKI Manifest - URI:rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/0/3F605BF3BC22BF10A45CA2660CEF9AA7E29A5EC8.mft
RPKI Notify - URI:https://rpki.caramelfox.net/rrpdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f68::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211169
Signature Algorithm: sha256WithRSAEncryption
a1:d8:7e:5b:fb:da:63:12:cc:b9:6c:d6:c3:bd:98:46:be:65:
6f:99:2c:2d:bd:f0:42:a0:a0:f2:03:2e:14:a8:db:8e:42:27:
25:54:b0:24:69:c4:11:43:fb:91:cd:3b:ac:1e:ae:52:0f:c4:
dc:32:f3:c6:86:ca:5c:7f:c9:e6:41:58:1e:6c:65:44:47:b3:
39:54:7e:34:e5:ab:53:8f:20:8e:d1:42:c5:4b:a0:8f:1e:f6:
7d:cd:fb:2e:a4:13:b6:f1:6d:36:25:b8:35:84:42:9a:a9:f1:
00:bd:cc:98:e9:ee:70:7a:fa:47:aa:4e:07:1f:bc:30:18:9d:
a5:68:e9:85:fd:fc:f0:3c:0e:51:25:81:5c:eb:81:9b:39:6d:
9d:a5:78:6f:d3:17:2b:02:8c:f3:7a:c2:f3:f2:7a:ae:c5:97:
da:5c:df:de:ab:50:9a:2f:bd:1c:dc:91:d9:94:7e:55:18:3e:
b0:da:d8:97:c3:ec:57:f2:fa:32:b5:31:14:27:10:5a:2f:2d:
77:05:aa:15:3f:c1:21:03:65:ac:cd:e5:cc:85:23:6f:67:58:
bb:a0:f0:3d:fc:3a:05:86:e0:1a:7e:4c:44:dd:c5:e3:46:ba:
89:24:d6:36:5c:61:fe:31:77:51:44:d0:14:2d:24:08:42:35:
b2:a0:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:43:33 2024 by rpki-client on console-ams.rpki-client.org