Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.cer (raw, json)
Hash identifier: BdtfUZX5avA6tyBo9MPXDAsWss8g/MhkSrMZA1RwhLo=
Subject key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D55EDB72C90054F71FDBA2507BFB58C2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jan 2024 15:54:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200605
IP: 2001:67c:dac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:ed:b7:2c:90:05:4f:71:fd:ba:25:07:bf:b5:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 29 15:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:aa:2d:52:49:a6:3b:8e:4e:2c:28:21:fe:
30:ec:9c:c0:36:dc:5c:e2:4a:9e:d5:c9:b4:1f:57:
ee:b1:0e:f3:ce:ad:9d:22:99:d8:b3:19:7e:20:9f:
8c:98:e2:d4:5e:90:51:18:6f:a7:e9:a5:e5:6d:bb:
6b:36:1f:af:36:95:6f:bc:82:57:59:1d:99:3c:46:
f7:d5:79:77:4d:29:f7:ee:0a:b8:4c:c6:b1:0e:73:
bb:13:ec:16:0d:c2:7d:9a:50:c6:28:1c:aa:88:c5:
61:1c:cc:17:a2:29:ad:09:28:a3:26:70:c8:6e:4d:
4d:08:9e:76:4c:6a:a9:32:31:78:e9:56:2f:00:3f:
09:db:42:0d:6b:ce:b9:e8:76:c3:56:a2:ae:8b:92:
70:82:d1:78:6b:57:ed:d5:b3:b8:d6:9a:91:6a:85:
00:0c:64:a0:5e:34:a0:77:6c:1b:74:36:fc:f3:34:
cf:63:db:5d:b7:8b:db:e0:cf:13:91:13:73:82:b2:
b0:4a:46:ca:09:85:cd:51:94:b5:da:6f:ba:1a:3b:
ed:b0:4b:99:13:ca:9b:d1:91:a4:4f:95:b9:ea:30:
e4:7f:6d:0d:3a:d9:d7:7a:d0:35:68:0b:72:17:c1:
f0:d5:2c:0a:6c:38:78:07:f2:49:e1:45:1b:06:62:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dac::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200605
Signature Algorithm: sha256WithRSAEncryption
5e:4c:fc:19:52:32:93:c0:77:e1:13:7e:7c:cc:94:07:e8:08:
d7:c3:99:d4:e0:41:71:57:61:e7:07:17:c7:dd:fe:d3:89:a4:
ed:b7:41:ea:23:36:9b:c2:3b:46:43:1f:5c:db:1c:d9:92:73:
7c:c4:11:f2:8a:77:e9:ed:30:53:27:0e:d5:d1:66:2c:9c:c0:
79:d7:da:1c:6d:82:6b:ca:34:9a:eb:c5:80:c0:67:7a:09:bd:
5f:9b:3d:3f:80:7e:d8:e7:ab:c9:0f:df:38:74:be:c3:f8:dc:
45:59:2e:0a:28:57:62:ad:05:16:c3:9f:5f:ae:4d:d7:3a:67:
6c:09:cd:68:67:7c:7a:1a:9c:c8:2f:d0:27:c6:50:4e:3e:ba:
34:49:b8:2f:5f:92:6e:b6:cf:c8:43:8a:d7:06:6c:fe:90:d9:
03:35:30:3a:22:50:2e:1a:4a:70:a4:f1:e2:04:5f:4e:d8:b9:
d5:92:c3:38:86:b9:69:30:04:bb:f0:b8:fc:92:6d:0d:8a:57:
4f:ca:37:63:4b:5c:85:a6:e0:07:8d:94:00:13:28:b8:6e:f4:
89:12:4e:4f:7d:c6:f3:ad:a9:3f:81:d8:99:90:af:f9:ac:c3:
6c:75:a6:cb:97:ff:90:4e:0c:8f:61:35:4b:5c:99:99:60:7a:
39:bb:e6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:32:29 2024 by rpki-client on console-fra.rpki-client.org