Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
File: a8Szt0G7W1thchrTBscRR8TfK8E.cer (raw, json)
Hash identifier: fYd9VilGWPKHtg2RcPaGM7GFp9feR/Twp2Zh458ZRQM=
Subject key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC0807E447AB092779F538AB3775D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209933
IP: 2001:678:888::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:08:07:e4:47:ab:09:27:79:f5:38:ab:37:75:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:3e:7d:ee:01:d8:e3:20:4b:ae:da:00:e2:
1a:c9:a0:0f:8f:45:8a:63:a6:0d:30:85:19:b6:53:
dd:af:70:14:ef:04:3b:50:25:cf:2e:0c:14:48:58:
6d:b6:94:cf:03:66:e9:30:f6:db:59:5c:26:f8:e7:
43:87:10:2b:e2:88:4d:35:65:a5:73:9b:cd:62:ec:
07:1b:a8:d1:5a:00:14:5a:96:50:70:54:6e:6d:b4:
51:85:cf:82:8e:82:3a:b2:5a:03:6b:c5:d9:e9:41:
ff:6e:cc:04:06:0f:46:b6:82:3e:30:6b:f4:db:38:
7a:89:fe:fa:36:61:41:27:14:d2:3e:8d:11:75:9e:
36:73:d1:e5:a7:7e:63:d2:62:ac:eb:60:5f:6b:01:
fd:1b:cd:5d:09:81:0b:37:de:bd:93:a9:64:6e:38:
a5:63:e2:32:fc:8d:84:03:0e:0b:c1:0d:ab:d7:57:
33:eb:10:8b:bf:db:05:c1:54:e3:23:d6:e2:50:8b:
37:2b:f8:e6:4f:0d:91:c6:e1:dc:06:75:ac:b4:ed:
95:24:b0:aa:4a:15:5c:5b:ac:0e:7e:80:d0:6e:b5:
76:58:96:75:50:89:a0:e3:6d:cd:71:0b:79:90:1f:
d2:5f:a7:51:21:c5:13:bf:c3:da:85:4e:48:ad:80:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:888::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209933
Signature Algorithm: sha256WithRSAEncryption
91:f6:ce:21:00:cc:7e:0a:46:90:f5:94:03:7d:50:eb:c2:ff:
0a:bf:49:39:d6:96:1c:3e:42:99:74:5c:2e:49:a5:2f:ba:b4:
fc:82:c3:3a:72:45:44:52:f9:9b:b8:a3:5b:70:cd:2d:2a:92:
82:fc:bf:9f:6d:b3:0d:3c:6b:79:0a:2e:e5:93:ee:ce:72:df:
76:62:22:39:94:ee:ac:04:f8:32:bf:3b:32:4a:98:f0:5c:b1:
26:f1:2d:6c:69:9d:64:5a:96:05:c9:ba:f0:d5:5b:1f:fc:5c:
79:78:76:bb:5d:a6:92:17:b6:39:d8:ae:3a:76:86:b2:3e:ac:
6d:b1:e1:91:e5:99:bb:dd:1e:c1:34:6c:43:74:de:14:62:96:
6c:e4:59:ea:37:4c:99:63:fe:d6:3d:0b:b4:c8:1d:b0:97:97:
dd:39:20:74:58:1c:7d:c5:78:2e:66:3f:3a:3e:b8:89:db:91:
4b:30:29:33:16:c6:df:a8:36:24:14:4c:5c:9c:23:71:37:26:
9a:39:d4:55:a9:2a:9e:98:1a:07:8a:bb:b7:96:41:9e:bf:d1:
2d:f7:72:cd:d6:fc:6e:38:ba:e6:22:44:d6:5e:7f:8f:b4:a8:
50:e9:bf:e2:2a:01:ee:12:70:24:3e:07:2f:0a:b8:13:b1:55:
36:09:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:25:53 2024 by rpki-client on console-fra.rpki-client.org