Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.cer (raw, json)
Hash identifier: Cbwc/00X+NDU427SAybEKhoCqlrTYI1DP7oZyOlen8E=
Subject key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AC8CBB20813A7264EF619BE42D724
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:868::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c8:cb:b2:08:13:a7:26:4e:f6:19:be:42:d7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:ec:61:49:5a:d9:0a:99:cc:bf:60:57:0a:
d6:fe:97:6e:d2:aa:ce:32:bb:cc:77:26:2a:ad:9f:
bd:78:c6:09:55:49:b3:13:ad:f4:59:f7:6b:8e:0f:
2c:1b:81:80:56:a1:0d:30:69:50:36:0d:90:ea:5b:
b7:85:98:cb:a6:2f:ac:39:d1:28:da:f2:ea:de:85:
7c:24:a5:3d:79:86:f9:0b:87:b4:5c:fd:88:ad:58:
cb:c8:47:0c:2d:0d:e4:bd:32:5b:95:30:56:32:d2:
ad:9b:ac:c8:e4:2e:66:fb:ed:0e:5c:0d:54:eb:91:
3a:a8:eb:4a:fd:4f:98:67:a7:07:4f:0a:52:a4:e3:
8b:14:c2:a1:bd:dc:ca:2a:03:ce:2e:22:e2:f5:4c:
07:ca:0c:51:fe:ae:c9:00:70:b3:50:5b:84:0b:8a:
1f:c4:45:31:2b:4b:33:dd:ab:10:ca:30:df:46:21:
43:2e:f6:fc:d6:43:43:85:81:db:7d:c0:fc:67:28:
0f:0f:72:ad:22:00:37:81:5d:28:6c:87:47:76:68:
d4:42:42:60:74:99:f5:4c:46:40:cb:5c:99:9c:bb:
e3:fa:5b:8e:cd:50:01:47:9b:5f:94:d0:95:6c:09:
46:06:9e:09:d4:f3:7d:be:82:e2:5c:a2:c4:e4:8e:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:868::/48
Signature Algorithm: sha256WithRSAEncryption
30:c8:01:02:a9:00:bf:f9:58:7f:71:70:b1:dd:68:81:64:f5:
d5:ce:4f:e3:1a:64:3d:89:13:69:16:6f:71:2d:f7:0b:f0:53:
6c:3f:88:94:25:c9:ba:ca:16:d9:93:7b:7a:62:4e:fc:7f:3f:
fc:48:5f:fb:05:7e:86:6c:03:f8:97:6a:5e:24:cd:2f:c2:7f:
f3:01:fa:e1:ca:31:42:f4:33:c2:ff:72:cd:84:69:fb:9f:54:
39:be:e0:d7:c9:c5:8c:cc:e2:4a:c4:4d:98:b4:85:30:45:01:
7f:8b:19:c0:51:58:37:8b:0a:63:da:77:ca:17:9c:db:8e:d0:
6b:3a:70:05:16:92:c2:fa:af:27:90:9b:d6:40:99:a7:c4:43:
a2:df:25:a8:0c:35:8d:93:18:3a:fc:39:30:b3:7b:7c:51:31:
77:0d:c4:c4:0f:6d:94:c6:48:25:bb:4c:c6:53:22:45:f7:a1:
40:f4:e7:13:7b:4e:e2:d9:8a:f4:c5:b2:59:30:9f:0d:b8:c3:
2f:9c:90:ab:fc:3e:64:dc:c4:89:a6:83:04:89:f9:5d:07:08:
ec:9f:3e:64:8d:ed:20:7d:79:68:f0:ba:fc:16:34:6f:b2:10:
ce:b5:fb:64:f7:48:d2:0c:3d:13:57:62:4b:76:ca:4c:b2:14:
68:bd:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:36:57 2024 by rpki-client on console-fra.rpki-client.org