Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.cer (raw, json)
Hash identifier: 4HmQnUk64eebZufeFoKFFeehgrC90qW9Oucu5Sr0p94=
Subject key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FED1FC061E276743EC50B2470DBF6A5FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Jun 2024 10:37:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47752
IP: 91.204.236.0/22
IP: 178.216.128.0/21
IP: 2001:678:c3c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:1f:c0:61:e2:76:74:3e:c5:0b:24:70:db:f6:a5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 10:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:fb:af:45:c1:03:44:b1:ce:58:69:13:52:
e0:6d:85:e8:bc:44:ef:84:f3:7b:26:07:a5:08:5c:
e6:d7:ee:16:d1:d5:14:d4:80:8c:42:fd:44:1c:a2:
d6:8e:16:df:86:55:a4:33:a7:e4:08:eb:0a:8c:fb:
88:c1:db:c3:2d:b2:7c:ce:fe:0a:99:51:bb:5a:e9:
96:cf:a7:a5:8a:87:cf:ae:68:0d:fd:d3:fb:4e:c7:
8f:4f:21:ec:6e:34:96:cf:1e:af:b2:41:6e:92:1a:
6f:9f:a2:e7:30:9b:61:36:97:9c:7a:ff:5b:73:2d:
21:dc:ba:1e:84:b1:31:f3:66:40:5b:2b:e4:59:97:
94:51:98:76:e7:95:c2:4c:c5:5a:95:4e:73:9b:c8:
03:c3:a4:e5:33:98:9e:0a:ac:9e:49:7b:6e:85:fd:
7c:68:33:93:f1:9e:85:fa:42:d9:d7:77:1d:4e:b7:
1e:48:ea:a6:bf:37:22:6e:41:5c:4d:72:7a:be:e4:
e5:39:64:a3:21:ba:90:16:ec:ec:24:9e:ad:bd:e8:
6a:69:b2:4a:57:7f:65:b8:fa:35:d3:be:95:47:1e:
e0:18:6f:61:cf:db:78:25:3c:7a:08:c7:1b:2a:ce:
45:9d:fb:2d:5c:0b:67:5c:ef:28:fe:b5:ab:1b:b6:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.236.0/22
178.216.128.0/21
IPv6:
2001:678:c3c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47752
Signature Algorithm: sha256WithRSAEncryption
1f:d9:bb:5f:bf:5f:cc:10:13:8d:97:f8:c7:a4:55:d5:f4:cf:
4a:92:b7:22:d0:d2:bb:07:4f:7e:80:d1:7b:64:4d:41:78:ac:
57:e6:ca:af:81:ed:18:34:b7:b5:3b:34:9b:ab:ab:93:17:5a:
cc:b8:58:c0:07:03:c4:63:65:72:56:59:3e:b8:00:5c:76:5e:
b8:31:7c:41:05:f2:13:40:ce:e1:42:65:74:f9:5b:37:b9:72:
73:a6:ef:5b:3d:89:cc:22:6b:d6:c9:8c:78:16:2b:e7:15:6d:
8c:ea:48:00:ae:d0:dc:c7:42:47:32:62:99:74:1b:8d:66:3d:
a5:ca:48:d5:9c:53:8d:b6:e1:1b:1b:16:30:1f:0a:23:db:82:
34:47:fc:ad:23:35:4f:21:99:d1:87:f3:ff:94:71:ac:40:80:
71:69:68:24:97:fb:47:6c:33:f5:20:89:e4:99:0d:20:66:e2:
58:0d:f9:95:ce:2d:69:56:8b:4a:01:f6:6b:9a:de:e0:10:28:
c1:f5:e5:a1:e5:ce:1d:2d:6a:21:74:a9:6b:59:2a:b1:fb:2b:
c2:73:df:c4:66:d5:fd:cf:49:75:d0:7d:82:6e:31:1d:6e:0e:
e6:f2:b3:91:f3:db:e4:b7:9c:0e:d0:f1:5b:f7:31:87:8e:19:
b4:19:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:05:48 2024 by rpki-client on console-fra.rpki-client.org