Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
File: SXioZBznhb40aFAwUncj5f3OVio.cer (raw, json)
Hash identifier: f42yEBpSboVq+chVzE+pOC7johGaQ89mrOO/eI9huyQ=
Subject key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8B2A0DF5EEED79F9AC4023ED195F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215912
IP: 2001:67c:d60::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b2:a0:df:5e:ee:d7:9f:9a:c4:02:3e:d1:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4978a8641ce785be34685030527723e5fdce562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:4f:e7:48:15:7c:ca:b0:00:92:fc:43:c2:
b5:aa:af:9a:de:ea:78:5c:cf:b9:71:b3:8e:75:19:
54:d2:d4:aa:04:88:12:09:e2:65:f6:9f:e3:5a:54:
2e:71:e1:cc:ba:89:0a:9f:11:d0:1a:bd:34:2a:68:
7b:ad:68:ff:dc:69:b7:95:b1:f4:8b:41:b3:8f:a4:
f7:be:7b:38:8b:da:41:c9:37:a9:7d:cf:79:d4:a2:
65:56:09:ec:87:af:f5:6c:62:20:fd:22:ab:f8:17:
c1:0a:7a:56:4d:ca:2c:84:99:0d:b0:62:7e:2f:39:
be:eb:8d:05:55:63:e8:b5:a2:0e:47:0b:9d:5b:0e:
89:15:49:a8:b9:03:45:da:76:66:fe:6e:69:60:4b:
ea:71:c6:a9:12:2a:ee:9f:e6:f8:3d:20:24:08:86:
41:ae:8a:55:69:a1:2f:83:57:b8:50:5c:68:25:28:
93:a7:f1:fa:13:8e:b0:e7:ea:9c:82:79:ef:b5:fa:
b6:94:c0:48:5d:6d:78:77:af:50:14:bc:4a:04:1e:
8a:cc:53:60:10:83:c3:de:55:26:8f:dc:1c:7e:c7:
26:1c:1a:0a:90:f8:0a:bc:09:7b:f0:c2:25:9a:fd:
c9:4d:76:e7:5e:69:0d:80:fa:96:06:a0:59:d9:8e:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d60::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215912
Signature Algorithm: sha256WithRSAEncryption
06:ea:37:7a:4c:d6:d8:89:4c:1f:6a:95:36:ba:47:65:f2:26:
7a:23:7d:4d:06:98:90:86:58:06:e6:c6:62:93:57:c7:0b:c6:
9f:d3:47:8e:5a:4d:7e:1e:7d:48:a9:69:cb:21:c9:42:09:f6:
50:b2:b8:ca:75:d6:a1:b8:34:9b:44:39:c6:e3:62:9f:0c:a8:
2d:ad:5d:48:d8:47:c1:80:62:9f:bb:6e:bc:0c:c9:6e:b6:fe:
31:1b:e0:3c:7b:3a:b7:37:05:01:87:12:c4:52:41:ae:0f:2a:
d0:36:e7:dd:05:16:2a:55:f7:b4:04:fb:9b:31:f4:3a:a0:a4:
74:91:f4:4b:5e:b1:8c:c7:67:9b:77:09:98:42:a4:9d:b8:78:
d0:f1:04:98:56:18:ef:95:9f:28:ce:ac:9b:2f:8f:58:83:7e:
17:cd:71:8f:6f:0d:38:d2:df:17:06:c0:27:5f:6f:56:a4:d0:
be:15:c6:b8:5d:3e:16:5b:63:20:76:be:bb:63:74:3e:13:0a:
b9:53:57:56:c3:ae:90:a5:7d:d6:9d:47:bc:09:c5:22:97:3f:
53:0f:fa:dc:b1:68:55:89:e1:b3:32:9b:d3:d0:95:2b:66:36:
87:9b:74:b5:53:95:dc:b4:c0:24:c2:d0:86:f7:86:4a:1f:26:
ad:44:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:39 2024 by rpki-client on console-ams.rpki-client.org