Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer
File: V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer (raw, json)
Hash identifier: 5Gcp82Y5Y8/VOlATW+GM+s8sX8Ch8krzSK0DPCh2cSI=
Subject key identifier: 57:B0:2B:5F:68:2C:09:55:F4:CF:47:A3:5F:8B:B0:C2:B5:7F:3A:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CB49E7E93E6A7F73D040D72125D16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39259
AS: 204328
IP: 2a05:c680::/29
IP: 2a0c:e6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b4:9e:7e:93:e6:a7:f7:3d:04:0d:72:12:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57b02b5f682c0955f4cf47a35f8bb0c2b57f3a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:98:47:ba:25:3f:cb:9c:05:3e:0b:e6:ad:
69:9d:84:37:b2:41:75:ee:39:dc:23:34:bd:80:82:
8c:ab:d3:6f:db:26:3d:d1:c7:92:22:4f:45:03:f8:
11:af:62:60:66:6a:22:05:6a:90:01:1f:31:40:f6:
dc:5c:3a:2f:bd:db:66:a6:6c:9a:7d:ab:18:39:5c:
be:3c:f1:7f:ab:91:2a:e3:fc:0e:aa:b2:6c:8c:9a:
be:68:96:b3:57:0d:17:bc:d0:e2:b4:86:aa:13:41:
31:cb:2a:34:6f:00:74:a4:06:ef:3e:12:ba:63:55:
27:75:6f:5d:2d:19:c8:a4:40:47:c8:e9:82:a8:f1:
2f:6b:93:04:06:6e:c3:21:36:38:e2:70:9d:dc:a4:
51:b9:ac:c0:fd:04:52:c7:8c:b8:9c:65:f8:c6:ca:
d0:a7:1b:fb:e9:69:41:12:2b:09:68:35:32:67:5e:
26:d8:08:85:44:4e:1e:79:9a:08:95:57:c0:70:93:
e2:4b:c0:84:3c:68:58:42:aa:88:27:40:a5:c0:0a:
8f:6c:6b:2e:29:54:83:ee:6f:00:7d:c5:af:5f:29:
66:b2:e4:32:df:c9:2c:08:fd:b1:2d:ea:e3:84:10:
fe:86:b1:03:e8:ec:30:e9:a2:a6:9e:db:af:be:92:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:2B:5F:68:2C:09:55:F4:CF:47:A3:5F:8B:B0:C2:B5:7F:3A:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c680::/29
2a0c:e6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39259
204328
Signature Algorithm: sha256WithRSAEncryption
3c:6e:20:1a:e2:fa:23:77:a8:6d:ba:82:a7:05:78:0e:20:ee:
34:13:84:ec:11:cf:81:72:d8:2b:64:b7:da:02:94:d1:3f:9d:
e9:cb:49:d7:76:b9:10:7b:96:f5:ce:ab:3d:77:9c:e1:bc:6a:
cf:7c:e5:b2:4c:5d:ef:d9:ab:c2:57:6f:3e:ed:c4:16:ac:32:
31:22:2c:ee:64:97:2d:43:3e:b5:92:62:28:f7:41:8b:04:16:
80:e5:83:10:4f:32:65:f0:7e:c5:ae:35:40:32:86:d8:9d:d0:
59:0b:de:3c:08:8a:28:5c:6a:a6:80:0f:9b:52:51:33:c5:a7:
58:a1:ba:a8:ec:80:9a:23:01:57:17:81:c1:f1:b0:1b:b0:e5:
df:57:5a:ec:74:a3:4e:e7:dc:c3:6c:54:2f:15:25:0b:3a:ce:
c8:aa:80:1b:dd:b5:03:4d:f6:f1:dc:ef:57:51:7c:c2:48:fc:
08:7b:7c:ee:73:70:b7:a9:8a:2d:be:03:ee:44:1d:8f:1b:d2:
09:9d:ae:9e:af:53:bb:7f:6b:ad:04:f5:24:cc:52:64:3e:63:
e9:6f:d9:fa:ed:c2:3e:7c:03:c4:c8:ff:e4:61:14:aa:7e:2d:
d2:14:e5:dc:d3:29:b5:cf:4b:7f:6f:66:b4:65:6e:93:ac:79:
c3:dd:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:34:44 2024 by rpki-client on console-ams.rpki-client.org