Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
File: fEStUyVA0tLa66leE9YUt4Va1iI.cer (raw, json)
Hash identifier: oGaB7JwoW/MyrpGlHaP0hgmfwQRSRKGCKnusRKKgJSY=
Subject key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D8DBA4DDE25BADF2A691DAC8249D02C63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Feb 2024 11:56:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52212
IP: 2a07:f880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:ba:4d:de:25:ba:df:2a:69:1d:ac:82:49:d0:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 11:56:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:1f:d2:26:e5:59:a6:a1:5e:ad:a9:ab:0b:
45:96:ac:01:eb:f3:b1:81:ab:e4:b2:36:23:63:3f:
80:d4:ba:f4:cd:83:c0:f0:9d:bd:50:a3:0e:2e:8a:
78:ed:9f:c9:e0:da:65:9a:de:f9:33:ae:b7:4e:d1:
ab:ea:88:63:0e:52:52:ee:24:83:e6:43:42:4f:c7:
0a:9c:f5:a2:bf:e2:4b:88:9d:b5:01:e0:95:12:27:
81:31:2b:80:be:09:d7:22:69:1e:13:c8:86:da:2f:
96:33:23:7e:c8:bb:37:46:e3:9b:c6:aa:35:ef:8a:
b6:27:c2:6a:c0:21:a5:f5:42:a0:06:f6:5f:fa:1c:
5c:4b:87:1c:10:18:b9:a3:d7:4c:98:e8:de:9e:94:
7c:89:b7:d8:81:f9:05:25:49:d7:61:55:61:95:9b:
02:38:13:f5:83:8b:78:ba:be:49:b2:41:7a:87:87:
a0:b6:54:93:c1:21:e1:50:41:f2:1f:3e:f9:e4:a3:
b1:61:65:b5:c3:42:4a:b4:63:7e:1b:e0:7c:e6:d7:
11:73:9e:41:cd:5d:40:16:9a:a7:d9:0b:4c:83:4d:
50:4e:e3:8e:68:db:cd:b1:19:15:2d:9e:d3:0a:af:
3d:29:99:4c:60:30:7a:1d:e4:4a:e7:2f:30:40:b4:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52212
Signature Algorithm: sha256WithRSAEncryption
ab:64:92:69:9b:90:5b:69:19:0e:3b:5f:62:27:4c:e5:19:2f:
4d:af:48:f5:25:40:19:65:10:96:1c:bb:dc:5a:9d:90:f0:88:
aa:42:32:52:63:bb:02:f4:5c:80:85:05:1a:b0:c6:3e:11:10:
4c:c8:7d:e3:fd:d7:45:46:87:2f:e6:33:20:a9:04:26:04:23:
eb:c8:76:17:99:ef:2e:e8:5a:8c:1a:fb:2f:78:2c:88:8f:ff:
e5:d0:59:b6:7d:8b:3b:df:9c:27:8a:69:16:cb:39:e5:f6:f2:
42:6e:2b:4f:e6:a7:fa:78:4c:ec:76:a6:e7:da:85:fd:cf:cb:
c0:34:e1:b2:7e:e6:82:af:85:70:15:8e:14:f7:f0:12:ef:e6:
e4:ce:f5:19:84:a7:fd:de:b4:74:80:9a:16:94:63:b9:8a:e8:
dc:01:a1:c3:b3:e5:b2:4f:74:01:1a:06:81:e0:aa:19:78:17:
ce:97:21:51:07:68:ff:b7:d2:7f:66:1b:79:52:b6:a2:ac:8b:
6c:d9:5c:24:94:3e:85:f3:f9:49:79:1f:26:e0:1a:b1:73:24:
13:a4:6b:ef:ed:b6:7e:62:a0:8c:a9:a6:be:09:e6:d9:e3:24:
a1:23:84:28:eb:5f:71:3b:14:b6:09:e9:f7:1a:c1:58:63:f5:
39:70:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:32:44 2024 by rpki-client on console-fra.rpki-client.org