Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
File: cFtQehAZ98Rlc33FlzbAb93c7-c.cer (raw, json)
Hash identifier: KHUOUCwzB9pE2beM+hxCX0T8Xh2TLb2MsV3NyhtWcRk=
Subject key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC4850131768C17B16F08DD5D68F25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:d68::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:48:50:13:17:68:c1:7b:16:f0:8d:d5:d6:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:c1:0c:ba:dc:0e:57:2e:11:d0:29:a5:94:
9f:ef:f5:28:53:15:8c:f2:78:41:83:40:d7:68:35:
43:c4:e5:d5:22:14:7f:b8:7a:68:d6:b8:8b:9e:e5:
d5:ed:75:5d:f6:d9:77:df:34:8a:d3:73:c0:6c:2a:
50:a6:f4:21:51:b4:9d:10:21:a2:94:08:e7:ff:bc:
e5:c6:e2:d8:b4:ff:74:a8:18:0e:1a:b7:e2:e1:49:
5a:27:30:90:3e:84:a4:33:39:f3:13:37:aa:87:31:
d9:a2:0b:5a:3b:5a:a5:67:57:bd:c2:a2:a1:ea:ff:
29:30:2b:72:22:d4:44:c0:bd:77:3f:d5:8f:aa:d5:
a9:2b:91:a5:7c:c9:90:aa:7c:e1:b1:ce:cc:2f:09:
9e:1d:53:95:a9:f1:0d:b7:c7:8d:42:9d:b2:df:52:
df:ba:79:c8:ed:5e:eb:7d:cc:53:29:8c:7b:45:ca:
78:54:7f:93:e0:62:56:a5:ad:b5:a7:4c:a7:de:92:
67:16:2e:f8:ce:b8:64:c6:0b:ba:d3:89:d8:02:9a:
30:27:35:e2:37:35:81:cb:23:b4:a8:1a:ef:bf:43:
27:56:99:ef:be:46:04:56:e0:78:e8:ba:3d:09:9f:
03:eb:36:0b:73:55:7b:d8:ad:d5:2a:2d:aa:ee:83:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d68::/48
Signature Algorithm: sha256WithRSAEncryption
53:ea:2f:59:b5:35:01:9f:91:1d:c0:a0:28:1d:84:06:91:65:
6c:70:fb:3f:69:cb:eb:12:86:eb:af:46:35:11:ee:ec:82:70:
7c:dd:a3:77:cc:15:a6:2c:0b:91:e7:68:12:f1:73:6b:1f:5d:
44:7b:f0:b0:20:3f:50:17:e3:28:bc:6c:15:50:4b:f7:02:72:
92:7c:2d:3a:66:57:9d:e1:b6:06:f8:f7:07:16:10:8e:3f:fa:
bb:0c:a6:22:53:fe:b9:43:93:39:f1:d0:de:94:5c:5d:20:25:
26:24:b9:95:2a:fc:e6:5d:fe:07:e0:98:b8:2d:33:7d:e4:df:
22:df:81:97:8f:54:f4:44:52:be:6f:54:6e:38:4e:61:dc:ce:
74:89:aa:34:7e:83:08:0d:b7:cf:a1:96:75:d7:0b:aa:7e:4d:
43:af:a9:09:3d:c8:92:ed:8c:a6:9f:64:26:5c:80:b3:b8:c4:
11:55:6d:a7:07:2f:c4:f7:01:ff:a9:c0:66:c8:e5:be:c3:8d:
42:e3:20:98:23:9c:f9:a2:f9:1e:3b:4e:5a:bb:db:73:9e:ba:
3a:a1:ae:3e:17:1c:1d:2b:ef:23:39:1d:42:58:6b:b1:d6:3c:
8c:87:3f:74:b3:1a:54:ec:c0:06:74:e8:41:02:ff:41:0f:6f:
76:89:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:54:47 2024 by rpki-client on console-fra.rpki-client.org