Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer
File: SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer (raw, json)
Hash identifier: yQDVu+1JFSlJ/sbJE1ibuUlKM8Q8r58YC3+iMEIWmcs=
Subject key identifier: 48:A2:70:02:04:C8:E7:82:09:27:BB:E0:BC:D1:20:C0:C2:41:0C:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC4AB3ECABCEE6B38C3227A05E5660432
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Apr 2024 21:02:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215131
IP: 2001:67c:e5c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:ab:3e:ca:bc:ee:6b:38:c3:22:7a:05:e5:66:04:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 21:02:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48a2700204c8e7820927bbe0bcd120c0c2410cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:48:a9:08:f3:64:07:73:0d:b5:aa:84:b7:
9d:55:13:cc:8f:a4:9e:b8:1e:d3:ea:dc:dd:e3:64:
f5:19:40:77:72:d8:5a:15:3c:e7:b9:83:d4:92:86:
b7:d8:81:97:cb:4c:07:c8:9f:24:e8:a7:a2:44:fa:
b5:63:03:50:02:a4:67:c0:56:ee:17:7d:1e:8a:99:
3f:97:f2:b4:be:79:a4:16:ec:49:77:05:6c:37:b5:
c1:48:ac:29:63:ce:39:cc:ca:fc:02:05:a2:df:f0:
ee:25:02:7b:0b:44:cc:54:9a:a9:09:9e:c3:44:02:
54:74:e9:9e:3d:e1:c9:b8:94:da:41:bd:d5:49:c9:
e6:9a:0e:17:06:f3:6c:d9:80:94:8b:8b:32:8b:29:
b5:de:cc:a2:83:78:f4:c4:f7:41:b9:49:92:40:fe:
a2:15:42:96:0b:d7:c7:42:84:5a:0b:d5:a8:9d:31:
b7:ed:3d:78:44:51:b0:5b:c0:47:d4:0a:1b:82:c1:
aa:0a:11:1a:3f:5d:6c:51:8c:c7:f9:21:5b:9a:d4:
7f:28:dd:16:44:1f:e7:da:a7:06:ae:2e:aa:fc:98:
1a:6f:d6:19:6d:f1:69:41:d8:3a:86:8d:a3:6a:f7:
7c:27:9a:2e:33:e6:6f:c9:d2:35:39:cf:17:24:df:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:70:02:04:C8:E7:82:09:27:BB:E0:BC:D1:20:C0:C2:41:0C:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e5c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215131
Signature Algorithm: sha256WithRSAEncryption
99:50:59:16:f3:e9:3e:4f:cc:1b:ef:73:b6:cf:c2:63:41:ef:
fc:98:40:2a:24:c3:14:d0:2f:34:08:53:d9:58:5a:18:97:56:
a4:ae:05:05:3b:df:3a:38:22:01:d7:e1:db:97:69:76:bd:88:
92:3e:46:35:45:39:c9:28:32:a7:24:5a:11:bf:d3:4f:f2:d0:
54:17:ac:82:eb:61:e0:39:b4:c4:50:9f:9c:7c:a7:4c:14:e2:
61:e3:d1:4d:49:99:ca:6f:d3:d1:fc:25:62:50:5b:61:33:03:
22:99:15:5b:a9:fa:c4:c5:5a:d5:15:c2:17:d9:f4:72:25:94:
80:cf:75:5c:12:8e:c0:cf:97:ff:a0:e2:c4:2d:5d:43:29:e4:
ca:bf:d5:e9:a6:4f:d5:2f:1d:0f:da:af:24:46:cb:b8:7f:1e:
64:e8:74:60:37:e2:19:73:1d:40:6c:27:a5:15:85:01:95:72:
00:cf:7f:8e:ea:4a:e0:15:cc:fa:ba:aa:f0:72:ea:ba:68:b8:
87:ea:0f:b7:c8:0f:8d:f9:19:ad:05:2d:48:c1:37:c1:b0:57:
60:64:10:98:22:e3:99:4b:08:e0:8f:7c:64:4e:0b:23:ea:04:
74:18:6f:4a:13:d4:0d:e3:14:72:90:11:4c:bb:90:67:9b:1e:
a5:87:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:15:37 2024 by rpki-client on console-fra.rpki-client.org