Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
File: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer (raw, json)
Hash identifier: 2E7+ek6p33BIlOUP0tQEpsYKcq3iYenCF7rYZMpz5v8=
Subject key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01935103394523569E084D63C3DC7DFC9A8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Nov 2024 23:16:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215629
IP: 2001:67c:da0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:03:39:45:23:56:9e:08:4d:63:c3:dc:7d:fc:9a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 21 23:16:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:49:52:6a:7d:13:f9:b4:86:a6:0b:84:77:
aa:39:8e:72:ac:12:bd:05:97:9b:89:79:25:19:b4:
14:14:88:8d:4f:eb:68:f9:69:57:e0:87:9b:28:45:
a1:ad:87:4d:28:ca:fb:5d:18:38:3f:d1:2c:0d:62:
45:b9:09:74:fc:c3:49:05:ca:3a:e7:28:5c:cc:3b:
d0:3b:5a:62:de:f2:27:1f:59:72:08:3d:77:f7:ec:
a6:67:8c:e8:52:e0:ac:e4:15:f7:de:4c:32:b1:11:
2b:93:2a:21:0e:dd:3d:da:0f:6f:8d:b3:f6:8b:1a:
68:0b:b0:12:8e:04:2c:3c:41:72:fa:02:e6:b7:0f:
6b:e2:b5:b3:60:c7:9c:0c:81:f0:ac:06:e0:f0:38:
df:c8:17:32:f7:88:0e:68:11:81:06:c7:09:73:72:
ea:5b:c9:22:71:f9:8b:82:80:fc:5f:10:82:18:21:
35:4a:2f:80:27:4f:40:16:80:d7:e9:19:e5:3a:42:
87:ba:5a:69:ae:32:ab:a5:c0:3e:d1:7e:0f:19:f2:
d7:3f:d9:96:5f:2e:20:5b:b0:6d:84:02:84:38:08:
78:cc:2f:0a:90:da:a6:f2:b2:0c:5c:43:15:e6:6a:
1e:91:21:7b:58:b7:64:5e:2e:01:a9:08:f8:67:bc:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:da0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215629
Signature Algorithm: sha256WithRSAEncryption
43:ba:14:ce:8a:aa:8e:88:91:6c:0e:12:fc:92:b2:e8:07:f9:
21:dd:36:2a:8f:8d:27:18:b2:99:0b:f7:ec:c4:ca:d7:b7:bc:
d3:bf:af:da:82:d6:15:17:33:4f:76:df:1d:21:a0:56:b7:1e:
41:3c:24:f9:0c:57:10:ec:69:27:d8:aa:98:75:de:33:03:25:
2d:35:4d:80:45:e2:50:1f:20:31:cc:75:50:70:f3:8b:75:e8:
3d:9b:da:76:ae:18:91:5e:5c:f5:d5:db:da:b6:6d:b8:4c:cc:
50:27:1d:34:43:8f:e7:fb:a6:d1:c4:4b:51:93:ea:8d:6c:d5:
e7:31:d2:11:59:d2:93:65:a3:4c:5a:fa:de:b7:bc:4a:d9:89:
2d:b0:c3:49:5a:b8:77:7d:d3:13:28:2c:df:cd:e2:4a:5e:b0:
2d:9e:85:40:93:b9:e8:a8:bc:d3:c5:94:84:c2:34:c2:47:57:
55:06:d9:52:a4:f2:b1:6c:75:95:08:81:bb:0d:6f:c5:6b:9f:
e2:f6:0d:74:4a:5c:16:60:87:91:4c:87:30:26:62:c6:63:d3:
6a:92:0f:45:f0:3f:fa:15:bb:10:11:ce:12:2f:c1:96:5a:8c:
31:1c:d9:a5:81:44:c4:b5:69:ee:c5:0c:01:92:a4:88:f9:78:
a8:a5:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:05 2024 by rpki-client on console-fra.rpki-client.org