Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.cer (raw, json)
Hash identifier: ji3Ws8km75e9CxApazRzvWn5C9KaLPZOYD3IjGVoO98=
Subject key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424D390F5592ACA5D39708FA15EDFBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16375
IP: 2001:67c:2568::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d3:90:f5:59:2a:ca:5d:39:70:8f:a1:5e:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:2d:3d:65:77:2f:6c:74:8f:fa:87:00:26:
c0:03:2a:2f:15:40:9c:77:e5:a6:a9:23:c0:82:bf:
f1:68:f8:bb:90:de:ca:e6:89:50:29:fe:2f:d7:9d:
8c:44:28:3b:ad:b8:16:8a:51:54:9f:f6:7e:89:99:
35:93:48:eb:3c:aa:7a:4c:4c:0c:7a:14:78:22:35:
8e:39:7f:78:44:b8:93:70:6c:f7:87:ba:d4:6f:3a:
10:38:04:23:9e:c2:f7:81:b2:97:c5:e1:29:3d:b3:
e8:06:64:fc:1b:aa:19:26:b9:11:e7:2c:a9:22:b6:
6f:32:0a:ec:12:a9:c2:15:47:59:a7:68:be:e1:32:
80:3a:9e:6e:53:42:df:fa:d4:93:d5:5e:fa:46:1d:
aa:41:ec:5d:0f:13:07:34:3e:07:60:e5:e1:81:e9:
f2:7f:f5:ff:ea:03:d2:f9:85:69:54:b4:66:7c:d1:
6b:35:8b:1c:cc:3e:9a:e8:a3:a8:50:28:62:fc:b7:
ec:f2:2b:9e:fa:17:f5:13:06:0d:4e:b5:c9:8f:80:
96:ea:1e:d3:bf:16:1c:24:51:5a:67:a6:9d:13:49:
ad:0d:2c:42:c7:49:49:65:e5:8f:a3:19:f8:90:3c:
2c:a9:43:63:3c:ca:f5:28:e9:12:61:df:02:d8:39:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2568::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16375
Signature Algorithm: sha256WithRSAEncryption
4c:73:c4:38:ff:d6:18:c5:0f:99:98:bd:9e:bb:36:46:da:0b:
3e:8e:1b:ed:97:bb:fc:1f:f2:90:bd:82:fb:38:b6:ff:b0:ea:
3e:0d:ff:d5:8d:38:e0:cd:07:9a:a6:24:1d:f3:75:98:b8:c9:
b7:69:61:1d:4b:2b:1f:0a:b7:0e:7a:ac:eb:1c:d5:e9:42:d1:
ef:d9:d7:ae:a6:ea:09:81:f1:be:53:1d:a4:b6:66:f6:f7:8e:
51:10:fa:da:a5:ef:4c:6b:4b:e8:52:38:4e:e6:e6:7e:0d:9f:
16:1d:2f:cf:e4:a0:a3:26:1f:f9:51:94:03:b7:2e:1c:a0:da:
44:6c:d9:bb:ea:65:2e:88:a3:01:00:7f:f2:13:b6:c6:02:55:
bb:fe:75:92:01:60:a3:fb:ee:28:33:8d:14:ad:2d:88:01:2e:
9a:3f:b8:61:6d:64:71:f6:2b:37:bd:df:95:8d:fe:ce:f3:29:
62:ed:e4:a7:ab:35:d7:5d:93:a1:de:d1:bb:1a:db:27:0b:91:
f9:48:14:92:39:25:a0:a6:89:9b:c5:46:0f:26:a9:04:d9:dd:
c0:08:2a:a0:63:4a:8d:0d:a3:86:92:30:72:73:91:b5:3d:9b:
f0:2a:44:65:b5:a8:d9:ea:6e:91:2a:f8:06:40:66:f0:e1:19:
39:d6:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:37:01 2024 by rpki-client on console-fra.rpki-client.org