Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer (raw, json)
Hash identifier: p1sQ7rdhuwHIDPdsYijHkgetUznU5vkfwzx5TSgFsD8=
Subject key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D739AD79183AD81DA1DE705E8F996
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205384
IP: 2001:67c:11e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:73:9a:d7:91:83:ad:81:da:1d:e7:05:e8:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:c2:81:1c:a7:d5:e6:ce:5c:23:65:55:b9:
a8:24:ea:c0:48:fc:ef:78:bd:c2:2e:ad:d8:0f:7e:
7d:92:35:11:8c:8c:61:d0:4d:5a:91:36:8d:6c:8d:
db:37:74:89:c4:90:eb:c8:a6:cd:4f:97:59:5c:00:
49:c8:b7:7c:2f:26:bc:40:98:f4:c1:8c:69:6a:8e:
c7:4c:a6:35:db:31:4a:29:54:30:dc:ad:de:f1:72:
2f:04:b6:b1:69:78:e8:58:ee:30:18:3c:a2:18:58:
9b:e5:f1:79:b4:4e:7a:95:b9:13:43:c0:d2:22:4b:
5f:25:3d:e9:3f:bd:19:c7:79:68:86:23:71:20:0e:
3e:5c:6a:9a:04:28:a1:30:a7:4f:cb:93:ff:d2:0a:
64:8c:f8:a2:94:4d:eb:1d:04:4f:2e:47:e5:52:15:
65:1b:a2:0b:d5:a3:f7:35:66:54:78:a1:ba:c9:da:
ca:bd:87:3c:2f:8a:f8:5f:1d:78:f5:d0:a5:02:4f:
d8:b3:55:e2:f1:59:29:f9:63:12:88:28:39:1e:dd:
35:cb:9b:d3:5d:46:e2:18:a0:34:b7:04:2c:a1:f0:
19:49:4a:b9:2c:78:9d:4d:5d:55:07:48:4a:25:e5:
26:65:f1:c7:66:bb:90:59:e4:e1:4a:75:3f:68:b2:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:11e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205384
Signature Algorithm: sha256WithRSAEncryption
80:40:c7:a3:cb:b0:16:a7:31:2e:a7:c8:1e:b9:cb:0a:0b:41:
3a:62:7c:f8:f8:8b:19:9c:8e:41:34:1c:ba:cd:f5:a6:8a:4b:
b8:be:46:27:fa:14:e2:98:33:1f:04:96:0a:2b:fb:05:81:04:
b2:73:14:78:e9:fb:bf:95:ff:23:36:a8:3b:c9:62:f5:51:79:
ba:ad:d9:73:91:59:09:1e:d5:91:8a:c6:40:9a:41:fa:bc:73:
e8:3b:a2:af:41:bb:ed:d0:13:3b:86:ca:f8:34:b3:2f:04:b8:
4a:8f:54:d5:8c:e7:d1:2c:09:67:79:46:cc:f1:cc:a4:86:d5:
ed:2c:de:3d:87:c0:a4:40:5f:95:4b:17:5c:54:7a:a6:0f:66:
d8:4f:06:ec:2e:fd:7e:7d:66:90:96:9e:87:af:ce:7d:30:e3:
3f:e4:a3:21:dd:7e:3b:f0:e1:6a:12:ed:60:bd:4d:1d:40:4b:
64:e8:15:ef:17:26:f2:10:24:ee:81:0b:0b:0c:af:ca:91:e8:
dd:f0:98:5d:a7:33:6d:2e:11:91:83:95:43:84:fb:55:9d:d2:
f3:12:d9:23:96:2a:e0:df:c9:b6:bc:5f:99:15:b3:c8:ad:70:
b2:e3:c3:e6:ee:0d:54:72:f9:77:18:5b:f6:5e:87:fa:ec:32:
83:f5:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:23:51 2024 by rpki-client on console-fra.rpki-client.org