Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer (raw, json)
Hash identifier: 05oUHHMbLLsxU7iewU4uzsen6e4Jc32Reya95vXo/dc=
Subject key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191A77B380CC1FA4D7C7BD49641ED00D8BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 31 Aug 2024 08:09:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47825
IP: 2a13:a140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a7:7b:38:0c:c1:fa:4d:7c:7b:d4:96:41:ed:00:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 08:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:33:7e:fb:fb:94:be:f7:89:9d:35:61:35:
1c:7c:b4:d3:c2:88:42:80:f2:d7:7e:e6:30:36:81:
e8:de:4a:bd:2d:d6:24:1d:47:3f:41:ae:e7:2b:bc:
46:c2:61:3c:b3:7b:40:dd:a8:7d:e0:06:1f:64:b7:
b7:18:80:d8:e3:35:b4:51:29:63:e1:d2:6e:60:a6:
fa:84:35:5b:cd:c0:7d:49:40:67:00:bc:49:02:1f:
47:63:96:96:38:e0:49:15:53:8b:e2:cc:30:b5:bd:
0d:39:79:8f:c9:39:da:9e:f1:0a:76:b9:71:3a:e5:
c6:5b:43:a2:22:a0:af:3b:e3:f0:71:bf:04:81:a1:
ba:61:ac:d9:8e:75:9f:4c:3a:21:84:df:f4:81:d1:
3a:90:da:d4:03:20:9a:e5:f6:e7:57:3d:32:ea:e1:
a4:44:5e:a9:47:bf:d9:45:88:fa:6d:cf:0d:b2:fb:
d0:9f:32:e1:6a:a2:05:48:e2:8f:de:e1:ad:4a:77:
42:99:6e:20:36:a8:30:02:04:2e:e3:02:96:d3:f7:
08:4c:f5:9d:e7:74:cd:e4:d9:9f:f6:da:49:ed:00:
43:5a:aa:36:78:c5:1f:9d:53:dc:6d:ac:eb:44:0c:
f5:78:89:e3:aa:67:82:bf:b2:67:2f:0a:43:ce:00:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47825
Signature Algorithm: sha256WithRSAEncryption
7b:75:f8:a0:b8:f8:ee:1b:11:44:af:da:59:df:b9:78:d5:2c:
6d:6e:7e:3c:82:23:0c:db:66:64:db:1f:97:d1:d4:c9:68:ed:
89:ed:73:c6:10:33:0c:84:47:29:f3:f9:96:b7:45:3c:ee:55:
d0:e2:be:bc:a8:0c:ce:b2:69:21:3e:8f:ba:6c:23:7c:5d:1c:
43:e9:f1:ab:c3:8d:48:43:f3:6c:47:e0:85:0d:a9:6e:1c:74:
be:9d:f2:8f:4e:2a:0b:d4:af:a4:c3:8d:b3:39:d5:cb:c8:aa:
c2:b3:62:87:68:5b:57:47:10:8d:cb:b5:5b:56:3d:38:0e:5f:
ab:22:6d:5e:48:dc:76:ff:ed:e6:35:1c:3d:d9:dd:e3:ec:e7:
9a:0f:82:1f:02:29:b5:5e:94:64:0f:da:21:54:99:9c:c3:cb:
12:0a:15:35:be:cf:c0:e6:37:05:4a:45:58:cc:ca:ff:75:dc:
0c:a9:61:20:c6:a5:b1:2a:df:78:2b:cb:e3:87:18:50:05:df:
fa:93:49:a2:90:3f:99:37:29:17:55:e1:27:4b:c0:34:aa:72:
a5:c4:49:2c:b4:b1:5d:21:8c:89:5a:3a:b8:e7:85:90:06:73:
4c:0d:9c:70:5d:d9:ee:45:7b:31:7c:f4:57:cf:21:4e:cd:f1:
bb:fa:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:50:07 2024 by rpki-client on console-ams.rpki-client.org