Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.cer (raw, json)
Hash identifier: l0aj3Bw2SyCo22IbeZf1KblYvTtlQ5EXyErwr1zj8wI=
Subject key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE34EEF342DAD2466FDEA69BDE1A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:10e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e3:4e:ef:34:2d:ad:24:66:fd:ea:69:bd:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:63:cf:86:cd:77:0a:14:d4:58:39:23:24:
71:54:26:6a:14:93:ee:2e:dc:b1:44:84:56:cd:e0:
49:9e:8f:51:c0:a5:a3:ce:71:bf:03:d4:ec:4a:85:
f1:fe:52:6d:b5:bd:a2:9e:4c:41:a4:66:84:1f:88:
38:7a:71:b9:71:c1:b5:46:d3:34:48:8c:03:cc:50:
7a:fd:45:02:90:cf:1c:6b:56:d0:2c:be:e7:a9:81:
41:4c:1f:70:08:87:af:b9:95:27:90:d3:a5:ee:2a:
cf:2a:d1:5c:15:99:ec:93:2b:76:70:64:a6:ef:1d:
d9:8a:1e:4f:cd:4f:75:1f:9f:42:63:de:04:45:d7:
cf:4f:a9:55:ca:cf:ee:fc:ca:87:f2:93:34:f7:25:
51:ad:c6:18:97:9c:d5:07:2a:84:a8:e7:40:ee:30:
71:ab:d3:2d:c5:a5:8f:7d:ae:bc:2f:0d:16:ab:2a:
b4:df:68:76:12:c4:e7:39:64:1e:cc:24:cf:ae:41:
26:fd:de:a6:fc:83:43:10:e0:e8:1d:1c:27:82:8c:
07:db:d0:84:04:65:1c:d5:ca:a2:2b:7b:48:db:93:
5e:72:3e:a9:30:fe:7e:55:2c:36:9e:95:dd:00:18:
d6:90:1c:09:64:b3:fd:85:14:41:06:d8:5f:f5:b1:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10e4::/48
Signature Algorithm: sha256WithRSAEncryption
2d:51:88:15:45:29:48:d0:44:d5:c0:1d:92:c5:97:dd:c3:f5:
67:ef:36:a9:d2:cb:1e:9c:1e:49:55:3d:f1:64:97:f5:fc:bd:
92:f0:cf:2a:5b:9f:eb:4f:62:39:cd:13:3c:84:9a:0c:b3:1e:
f7:c1:ae:29:16:3d:3d:fb:c1:15:13:0b:27:cd:04:17:01:ef:
c7:39:a4:d8:53:8c:6e:16:d3:40:e6:e6:fe:1d:7b:e3:1a:94:
a1:08:b7:f0:cc:b3:c2:f0:78:f0:e7:ea:9e:bc:0a:97:60:cb:
a7:58:9d:56:6b:78:bd:d2:72:ea:ad:34:a7:b6:f4:94:d9:37:
03:67:75:39:a8:bd:31:89:24:6d:b7:be:c3:76:96:c1:b4:7c:
36:40:60:c7:e1:44:aa:68:78:af:1c:14:88:2f:97:59:87:49:
27:15:52:ce:ba:e8:59:48:b9:ad:7a:3a:a0:4f:d9:cb:85:5d:
0d:37:6c:e5:54:c9:f9:a4:ed:7d:08:d4:1a:a8:3f:10:8c:6c:
04:cc:ae:90:b6:86:03:7e:0d:87:0a:1a:be:8f:3a:1d:be:a0:
07:a0:25:4b:ec:ff:d5:6c:b1:45:cc:53:09:9d:15:b9:1b:11:
09:17:f0:49:0e:ab:16:3c:3e:47:8b:23:0a:c9:48:dd:eb:da:
15:11:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:08 2024 by rpki-client on console-ams.rpki-client.org