Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
File: SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer (raw, json)
Hash identifier: JIyB0/huYvflYapr4F5bLfcGF08I2rOoTkvh4D5tlT0=
Subject key identifier: 48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF231FB71A71F88645E77FEC2B1F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208711
IP: 2a0e:4380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f2:31:fb:71:a7:1f:88:64:5e:77:fe:c2:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48e5095da3579ca910a421d64e0c879c8fd36952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:06:03:65:fb:e1:89:0d:f0:8f:92:1f:da:
53:86:9b:fe:95:27:83:63:54:be:98:73:79:a5:e0:
cb:b2:ff:d7:f9:85:b5:a1:48:47:e4:45:3e:26:ad:
81:99:d1:85:29:cc:ab:6b:7b:ff:a6:e0:42:55:ed:
18:de:c0:cf:25:ae:bb:3a:5f:71:56:f9:ff:ac:d7:
2d:9b:0d:30:a1:28:a3:6a:d8:62:4e:cf:e8:c5:bf:
8e:f3:dc:44:41:cf:1a:51:7d:19:d4:f1:c4:e1:5e:
97:6a:2b:f8:5a:ca:4a:1f:20:65:37:1f:03:46:ed:
47:91:db:2c:19:2d:d1:1f:38:41:69:d7:6c:23:04:
32:e5:c2:cb:40:48:14:52:d1:53:44:aa:bb:29:86:
2d:a9:8f:c6:ea:73:f7:6c:8a:d1:99:6d:d0:52:f0:
44:8a:7a:ac:28:f4:0c:88:73:ca:c6:2b:87:b2:f6:
31:6c:01:be:0d:37:f0:cf:2c:43:7f:05:a6:1e:c2:
e4:af:7b:f2:0a:e7:be:9a:53:2a:c1:00:4c:a9:2b:
d3:27:c2:5f:9e:4c:9b:ce:62:df:20:2a:a0:8e:3f:
01:ac:9c:76:66:f9:64:b1:4c:4e:98:c6:5c:b8:58:
7a:16:4a:d4:77:24:e7:2b:3d:58:ab:24:69:5a:ea:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208711
Signature Algorithm: sha256WithRSAEncryption
5c:ed:4b:7f:43:30:22:93:21:97:bf:54:b9:73:48:2d:ff:4c:
2e:08:c1:f4:d4:e5:47:d5:c6:d5:8a:6f:c4:7b:7e:ec:23:46:
b5:40:6f:a7:f2:ed:ec:e6:14:15:48:96:c8:6f:78:b6:fb:23:
8a:ff:68:b4:ec:bc:6a:97:79:cb:47:04:43:7f:aa:bb:1c:0a:
0d:b3:24:1f:73:45:cc:b2:0b:1f:b0:bb:f6:35:b0:88:99:03:
08:c3:6b:69:6e:cf:34:01:c7:67:94:43:a5:8a:e5:d7:d6:3e:
bb:36:2f:7c:9e:0a:8e:8f:4c:93:77:1d:b9:9e:e6:94:69:f2:
be:6b:13:48:04:51:14:13:5a:a6:fa:5f:bc:c3:7e:2a:49:0a:
36:6b:d5:f5:a0:d1:58:84:e4:bf:6c:b3:b8:cf:31:7c:d9:de:
d8:23:22:37:98:dc:f4:d3:9a:d0:1b:b4:ab:a6:12:25:01:4d:
d3:34:9a:e8:7b:97:dc:57:43:e1:ca:d1:18:05:97:99:97:41:
d2:4d:79:3b:96:f7:ba:96:1c:fd:aa:6f:5a:a8:1b:1b:08:63:
46:9f:f1:31:9b:76:1b:5e:4a:8c:a9:b0:6d:d3:19:07:09:43:
85:15:d0:ce:56:2e:3a:a2:58:2b:29:7e:74:c3:e1:eb:b1:fa:
3c:e4:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:35:20 2024 by rpki-client on console-fra.rpki-client.org