Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
File: cylEqFODVbKux2ZF_ZSUSIrnAuc.cer (raw, json)
Hash identifier: SbWkREpcPJSn1/Q/DVh+81x3562Fw9WZraIiLbyhOqE=
Subject key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5010ED78283751B2AB573C7BD57AEBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200559
IP: 2001:67c:2edc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0e:d7:82:83:75:1b:2a:b5:73:c7:bd:57:ae:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=732944a8538355b2aec76645fd9494488ae702e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:19:a7:b6:c5:72:c0:ae:2b:0b:04:90:b7:
59:e8:4c:04:5a:e9:09:6f:60:1d:db:98:fa:62:70:
0e:3a:6c:55:21:48:f9:35:f0:db:3a:95:21:e4:73:
4d:0c:5d:3e:88:f4:03:5d:ba:9c:46:7b:ef:88:dc:
32:20:5e:00:fc:0f:68:a0:0f:b8:5c:e7:9e:16:c2:
4f:72:a6:cc:a6:61:fe:e1:2c:96:3b:52:62:90:78:
96:18:73:6c:9b:4f:39:ce:a9:ee:d3:ac:71:dd:39:
79:48:fa:ec:e3:d4:57:a3:57:76:b3:56:fe:12:c3:
a2:34:3f:c8:13:9f:fd:e9:3c:b5:7e:9b:c4:ea:31:
43:9b:15:0e:65:2c:bd:17:4a:20:33:8f:dc:e6:75:
b2:9b:00:8a:17:e0:f9:e3:3f:4b:c4:d3:5e:31:1d:
ec:06:3a:4e:59:0b:b0:77:ca:ee:f6:2b:e2:a8:e7:
fd:b4:dc:47:6a:1a:40:85:3a:f4:d8:f7:25:59:97:
9b:a6:52:0d:c6:a5:16:23:6e:98:c8:6d:4c:fc:b0:
1e:d2:56:4e:67:f8:d3:0e:cc:9b:48:8c:2d:ac:f5:
48:54:5e:0a:27:61:24:ac:d0:0e:58:0a:30:29:8b:
33:8a:c6:d0:3f:d2:6d:17:25:e1:7d:4f:64:90:3e:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2edc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200559
Signature Algorithm: sha256WithRSAEncryption
7b:70:ad:aa:9c:b1:5e:bf:c4:2f:5b:7a:59:2f:c4:31:0c:cf:
83:f0:76:9b:38:2b:e7:17:60:d6:c9:79:19:84:3e:35:b4:d4:
bf:9d:da:74:a5:b0:17:a7:a3:59:e9:bf:18:8d:a1:95:42:1a:
5c:90:6b:db:02:ba:ee:31:d9:1c:49:f7:02:69:ea:b0:fd:de:
bc:9f:68:73:62:73:ca:8c:d7:4f:b6:1c:55:00:5b:5d:c3:2b:
24:c3:5b:44:fa:0a:a1:09:b4:80:5b:a6:07:28:0d:2e:37:99:
71:1e:14:64:09:62:fa:fa:9d:f7:26:0c:09:24:9d:10:c7:40:
84:03:3a:03:d4:7c:f3:a6:de:0d:76:c0:c6:0d:e1:8c:20:15:
3c:7c:93:f3:53:f2:4b:22:18:81:ab:7e:7d:9e:34:5d:59:8e:
8f:90:f9:3a:db:c0:28:93:ec:bb:80:73:8a:6b:d6:16:bf:6c:
8b:3e:37:d1:c6:f5:72:51:26:0a:ae:55:4c:1b:4a:98:2a:4a:
01:7e:44:ee:68:7c:86:98:a4:b5:17:37:97:83:6a:4d:76:44:
76:19:4e:6e:28:cc:18:08:aa:a0:6b:79:ce:b0:22:2e:5c:34:
70:41:54:62:f6:22:9f:23:64:ff:57:b0:28:f2:9c:89:a2:10:
b1:65:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:20 2024 by rpki-client on console-ams.rpki-client.org