Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer (raw, json)
Hash identifier: H9ZDLwUPHwElZw8wpiMT/T+Ge/3gU6qA25JuynSNjQk=
Subject key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726534113C928B017F2EABFE96AF709
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212377
IP: 2001:67c:98c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:53:41:13:c9:28:b0:17:f2:ea:bf:e9:6a:f7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:33:62:8d:61:75:75:73:80:1b:6a:9a:b6:
6f:58:da:c1:c8:e4:e9:ee:13:35:86:46:5f:89:4b:
40:f2:6e:29:d2:b3:c1:4f:bf:3b:3a:31:47:de:af:
76:79:83:ba:53:0a:65:21:ab:b6:12:65:c1:a6:cc:
18:a3:d4:a5:dc:31:1f:0b:a5:0a:f5:f7:c8:3e:fb:
11:28:f7:f1:85:b7:e8:3c:a4:76:68:bd:84:29:49:
ca:2f:62:e1:d2:92:51:e7:7d:78:a7:cf:b8:09:90:
ce:94:dd:6f:a5:7a:f1:39:b2:af:67:fd:ad:1a:6f:
f4:cb:28:e7:79:08:4b:85:63:81:9b:99:7d:2c:ef:
fb:69:00:6f:82:bf:70:06:8f:ad:93:e8:83:37:20:
5a:54:50:34:e1:5f:8c:f0:4d:ac:21:03:9f:5b:78:
fb:20:4c:50:e0:bd:b1:b5:92:32:19:cb:a8:45:15:
c0:7a:ab:a7:60:e7:cf:df:56:c5:dc:16:d8:33:57:
81:68:a1:17:f6:f1:12:9b:36:be:bb:88:33:e2:bb:
19:a5:bf:90:f7:e4:35:18:5c:72:7b:30:da:05:64:
f1:18:f0:d5:aa:21:10:43:3b:7a:af:a7:aa:28:5a:
29:74:d4:43:e4:e4:8b:4c:f1:49:c7:e3:2e:af:b4:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:98c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212377
Signature Algorithm: sha256WithRSAEncryption
34:26:01:a6:60:34:7d:d9:3e:70:3b:ad:29:dc:46:61:1e:b7:
46:35:dd:d2:81:62:9e:f9:dd:ba:9f:66:fc:38:60:54:5a:c5:
28:28:37:03:71:3d:89:0c:b4:c5:21:f2:6b:bd:a1:0e:ae:9d:
09:66:60:03:ff:08:5d:00:72:9d:ca:ea:0d:b9:ca:6b:7f:ef:
f5:34:34:4f:72:79:93:47:17:85:73:94:2d:f6:0e:a3:ff:65:
29:3a:2d:a5:55:eb:58:ad:a4:c1:29:89:17:18:02:4c:54:bb:
8b:84:0f:2d:d2:85:7b:dd:a2:93:fa:f9:f5:c0:9a:6e:67:d8:
10:dd:d6:10:55:11:fe:8a:38:7c:02:17:ef:d4:57:a7:f7:0b:
86:66:c8:53:f8:61:39:0f:8f:7c:88:c4:ea:d3:4d:0a:e4:f8:
3f:be:ea:49:c2:d4:aa:ba:d4:4b:d7:dc:4b:f0:67:59:89:ad:
db:d4:39:eb:21:b0:d6:e1:b3:d4:38:83:86:13:37:48:a6:05:
d4:47:bc:b9:3a:2b:00:be:97:10:5b:c1:98:2c:36:d9:6f:b5:
ff:83:51:c3:32:23:72:b1:0d:60:9e:30:ed:53:d0:96:63:20:
4d:29:10:0f:94:e0:2e:de:a7:30:50:80:6d:75:e6:92:91:38:
84:28:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:43:43 2024 by rpki-client on console-ams.rpki-client.org