Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer (raw, json)
Hash identifier: oDfh1rfKLO/jPzWmSQoDPDL6ovqgoAjQYkgcJWvebtw=
Subject key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72840CFF35984EBC70E1AE7CCAB51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59570
AS: 208454
IP: 2001:678:d30::/48
IP: 2001:678:d34::/48
IP: 2001:67c:2148::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:28:40:cf:f3:59:84:eb:c7:0e:1a:e7:cc:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:23:35:e3:a5:9e:7d:de:cc:59:d9:d9:49:
bd:78:03:d9:a1:9a:1c:fb:9d:ab:49:78:c7:cc:f4:
07:6c:72:22:43:e4:ee:94:45:90:cc:90:52:1f:b8:
a6:ca:a6:4f:46:8f:a2:55:98:c6:d3:32:fa:a8:57:
d4:96:d2:41:0a:bc:d5:a3:27:79:50:7e:97:77:39:
60:49:94:82:10:db:ab:0e:e7:ba:5e:0f:63:87:fe:
aa:5f:5d:2d:17:30:4a:0c:fa:f8:6c:eb:81:87:86:
3e:b0:33:d4:cf:60:d9:e2:2a:a8:a4:71:e6:e4:d8:
9b:79:1e:a2:0b:bc:44:ad:71:11:fa:48:9b:6c:a9:
01:8d:b3:dd:f2:85:6c:82:37:8d:e2:31:a2:a3:39:
07:fd:6f:f8:bb:4a:8b:c0:78:52:9c:83:66:e5:1c:
ad:21:0b:32:0e:7f:d3:fe:fe:e0:d7:4a:7b:8e:58:
ef:8d:12:ad:f7:c1:50:b7:39:96:e2:dd:d8:eb:5d:
64:2f:dc:4f:c9:3f:ef:40:51:17:a2:aa:bc:79:24:
50:a3:34:13:11:1a:19:dc:61:6b:85:9c:d7:04:ad:
94:51:97:de:64:0d:8c:30:24:4e:f6:4b:ae:b3:db:
01:90:7c:e1:e7:03:e4:22:a9:b0:b8:1c:3b:2c:61:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d30::/48
2001:678:d34::/48
2001:67c:2148::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59570
208454
Signature Algorithm: sha256WithRSAEncryption
0b:c3:59:35:f8:bf:e2:51:27:94:d1:ac:13:c5:f9:1a:ae:94:
f4:79:60:1a:39:15:fa:e7:a7:63:70:59:4c:56:5d:40:ea:6b:
72:7f:69:f9:2a:6b:45:e1:be:65:9a:58:70:1d:8a:71:32:ca:
54:db:77:b0:08:8e:27:2b:15:12:df:b3:f3:1a:10:90:8a:14:
ce:14:f8:45:1e:9f:e2:5e:7a:2a:ea:da:f2:d6:5b:96:ae:36:
24:70:c3:b4:f3:de:1d:b0:16:f4:70:41:10:6a:59:f4:b0:6f:
eb:89:f4:8e:90:5d:48:e4:57:c9:45:f4:73:35:ce:2d:d9:96:
8b:39:59:03:e7:0c:a4:06:e9:63:b7:ff:e1:82:81:f0:18:76:
39:aa:45:9a:4a:f0:58:6f:5d:8b:33:c2:9a:2d:0b:f1:4e:ed:
3e:fd:c2:c2:7d:17:2a:33:b4:41:f4:fd:e7:06:7f:73:4a:c2:
66:d3:60:7c:0f:92:79:25:cd:b0:b8:b6:69:af:9e:68:52:51:
38:ee:f3:3e:cf:fa:bc:09:05:b5:22:0a:da:cd:9f:03:a9:f0:
33:e0:16:24:3d:59:35:d0:4e:3b:0f:8f:c2:a7:77:a3:2b:e4:
ce:6d:ed:82:0f:15:b4:82:fb:78:f8:94:60:38:74:4e:57:6d:
4d:96:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:07:04 2024 by rpki-client on console-fra.rpki-client.org