Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
File: a4d_CC_1_vSwfPj3wPcTNLyLhII.cer (raw, json)
Hash identifier: h05e3Bw9ocJ22hcU2O8z9dwy9fOAzwxx1EiLEy81hb8=
Subject key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A806598B9C8EE48CF6CF3C293173B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a10:d000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:80:65:98:b9:c8:ee:48:cf:6c:f3:c2:93:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:60:ea:66:2b:39:2d:b5:08:e9:45:2b:ae:
0c:20:b4:00:e5:07:9a:7f:98:4f:3a:bf:3a:90:fd:
01:5b:c7:55:fc:35:1f:f0:e2:68:7a:be:2e:8c:a2:
c3:c8:37:85:36:24:63:d0:75:a8:a0:dc:94:31:f3:
e6:da:75:2b:e0:37:a4:0d:7e:ea:55:be:5d:13:4f:
b5:af:b1:db:c3:53:3f:cf:4b:9e:58:f8:01:b6:52:
a0:4b:e0:f4:96:39:7a:e8:1d:6e:c9:29:52:ad:30:
90:83:41:a3:85:37:50:a8:de:cb:09:65:c7:63:cf:
74:e3:c6:26:0a:65:53:c3:ee:94:da:32:c7:ab:f2:
2b:ec:4b:c0:42:c1:75:2a:b1:ef:22:35:ce:a9:26:
23:00:09:76:0c:ec:c5:c3:a7:4a:9b:c1:21:1e:61:
9c:c5:1f:2e:d6:ec:05:6e:c1:b2:cb:fc:f7:77:32:
3e:aa:8e:74:df:ff:65:33:88:5a:0a:c4:98:da:73:
ad:e5:4d:b4:1e:71:ed:dd:d0:6b:5c:54:92:f1:9b:
60:c9:59:98:2a:09:ff:9d:a3:67:77:4a:55:fe:b2:
f5:cb:96:2e:2b:2e:0a:12:64:d5:e8:ed:53:c1:e1:
1f:36:69:d5:14:12:42:09:b9:3b:e6:3e:3b:dd:91:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:d000::/29
Signature Algorithm: sha256WithRSAEncryption
5d:6e:03:21:53:0c:87:a6:8e:94:e0:4d:7a:3a:e7:02:7e:c2:
68:3b:ed:10:81:32:ac:91:ce:08:7c:3e:52:b9:dd:4a:73:ed:
ad:21:12:72:0a:03:88:8b:bc:00:29:e3:2c:5b:b1:75:b6:81:
5c:f0:0e:b8:8e:e2:f2:01:b2:22:e5:2e:be:e4:31:9b:82:1e:
87:f9:8d:59:fc:89:4b:89:04:ec:45:9d:6b:05:c5:a2:37:01:
d7:f8:bd:f7:d7:f6:21:e6:0d:a0:b0:ac:1c:a5:83:e3:e0:e4:
f8:a9:1f:8a:86:51:a6:82:47:fb:a3:4a:53:dc:8e:a8:db:40:
c8:a5:01:fe:01:f8:d5:88:36:b3:ec:36:49:6b:28:fa:3c:5d:
9b:2b:75:94:62:f9:e9:bf:78:21:ca:96:86:14:b6:b8:6d:96:
de:62:94:63:6a:b1:5c:03:1c:de:49:c1:3b:50:e0:b6:0e:11:
65:81:85:79:bc:f0:41:e4:2e:9b:70:dd:f9:f9:9c:62:27:cc:
dd:37:40:41:b2:56:71:f5:b4:4c:96:64:25:4c:21:64:60:51:
bb:43:08:d7:83:f9:87:0e:84:f4:5d:4b:18:1a:74:16:e2:c8:
c7:f1:34:ee:bb:04:43:8b:8a:33:c1:ed:b2:ce:fc:0a:92:5d:
a4:cc:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:00 2024 by rpki-client on console-ams.rpki-client.org