Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.cer (raw, json)
Hash identifier: 6epiMM9WmhjGPGzvVqit0g/3qNGGTCPWUJuluOtHyTg=
Subject key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E9E6439ED0BBD19E3D53EC3B32687D46C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Apr 2024 10:39:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35372
IP: 2a0e:6480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:64:39:ed:0b:bd:19:e3:d5:3e:c3:b3:26:87:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 10:39:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:49:a2:5f:32:84:73:7d:99:d3:0f:9a:45:
72:7c:73:ca:db:eb:0d:60:f2:42:86:15:4d:27:e3:
b7:ae:6e:9f:ae:b9:74:48:46:f1:e6:bc:70:bf:36:
19:e0:cb:bc:8c:4f:0f:33:4e:32:84:52:a4:a5:94:
9f:50:02:5a:6e:09:f3:41:8e:30:ae:0b:26:75:85:
54:6b:dc:8e:fa:0b:6a:e8:62:ad:3e:62:90:e7:72:
ed:5b:b1:90:8c:e3:2d:e6:49:99:ae:49:60:40:3f:
aa:ef:3f:54:e7:62:fc:a0:57:35:de:95:02:1a:52:
b0:66:18:a4:18:04:43:ee:44:81:f3:a4:54:15:eb:
39:12:11:13:bd:c1:22:d3:16:03:75:b9:6e:20:ac:
32:18:3b:45:eb:f0:08:39:fb:71:78:ca:ae:c6:54:
97:c2:42:46:60:1e:c1:08:27:d5:59:30:78:5d:c0:
f6:30:ae:70:41:a7:86:9b:94:7e:04:74:7c:be:18:
97:20:f5:c6:89:39:f3:96:2a:eb:e4:82:5f:3f:6a:
50:61:c0:8a:a8:9a:86:45:ff:26:37:96:1e:5e:fd:
dd:34:53:9a:47:1e:0c:28:88:7f:f1:7d:d2:39:83:
17:30:ca:40:c0:7a:6a:56:a0:5b:19:3b:87:6c:6c:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35372
Signature Algorithm: sha256WithRSAEncryption
55:8b:5b:ff:a3:50:f3:c0:9a:6e:65:84:31:3b:5d:45:93:de:
a8:9e:32:63:c0:dd:18:1e:b5:b0:32:92:6d:40:54:ab:91:4e:
b7:3d:38:95:a8:4d:7f:00:11:5b:bf:af:60:92:40:06:bd:9c:
d9:f0:ef:13:a9:02:3e:75:68:33:b6:ba:b0:cc:9b:9c:0b:50:
5e:d7:c1:63:d0:51:65:3b:ee:f9:64:98:b6:a3:c5:4c:c7:e0:
b9:56:65:11:94:c3:74:1f:81:be:13:c2:79:de:f5:36:35:53:
15:01:0b:cf:9b:f9:07:d9:65:42:98:ad:f0:70:09:44:89:33:
89:e5:f0:56:15:5e:34:f6:ca:9b:50:fd:ae:cb:90:9b:e5:41:
de:c4:9c:0f:09:e6:2a:5b:dd:bb:1f:29:29:90:e9:60:8d:d5:
9f:e9:93:0c:38:e4:26:f7:fe:f2:8b:4e:c9:d1:43:88:5f:3a:
dd:47:4e:9c:7c:f9:15:db:25:34:64:7f:62:b2:a3:d2:00:8f:
23:83:7f:0c:3b:d7:8a:bd:b0:ef:0c:8a:4d:9c:78:0a:6c:dc:
fd:12:15:ce:05:e6:50:e0:ee:24:48:f3:a3:15:39:fc:48:83:
d6:c3:eb:17:2f:bf:b0:6c:1d:56:ab:d1:0e:08:63:67:6f:f9:
d5:c0:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:55 2024 by rpki-client on console-ams.rpki-client.org