Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer (raw, json)
Hash identifier: dgmlrjyYxoeuHKi4x7eS9GuTAExDUREdyIOvokgxELA=
Subject key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019006592D0EA50CF774CC52430E971FA9A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Jun 2024 08:10:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34236
AS: 41943
AS: 215331
IP: 84.246.128.0/21
IP: 217.25.32.0/20
IP: 2a03:f600::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:59:2d:0e:a5:0c:f7:74:cc:52:43:0e:97:1f:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 08:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:fb:e8:2c:fc:30:d5:4f:00:02:a7:f0:7b:
00:60:f9:4e:e8:c1:b2:f5:1e:27:4e:33:3f:bd:4d:
5f:dc:a9:03:82:64:9a:ad:86:f0:53:7e:cc:2e:b2:
4c:1f:f0:8f:b1:9e:2d:fe:3b:81:e6:a0:e0:79:89:
f3:bf:cf:3e:54:67:cb:c6:f4:f4:07:50:2a:d9:be:
22:8d:20:24:3f:60:ef:8f:ff:ea:90:7e:f3:28:38:
28:78:d8:6a:a6:78:2b:92:ca:f7:0f:45:f9:f7:c5:
0b:52:b2:6e:c3:bd:78:e4:37:2f:fd:af:c5:7a:7b:
30:1a:09:2d:73:a9:98:76:0a:cb:bd:d5:61:f8:72:
a6:a4:04:1a:86:a2:c7:5b:16:b7:35:32:46:6a:42:
04:80:0e:bd:1d:38:90:95:36:9d:ff:e6:2e:8a:19:
1a:9d:9f:70:9b:71:1a:2b:a4:51:8f:5b:b4:06:98:
b0:dd:a6:68:9d:51:e3:bf:eb:00:b6:0c:1a:dc:4d:
bf:f5:e4:a5:8f:47:08:57:c9:8a:a1:53:9f:30:82:
45:43:5c:3b:d0:56:67:37:25:e1:43:ed:f3:18:7c:
83:44:44:a4:7c:2e:cd:25:53:83:16:6e:fa:29:21:
00:4c:b4:5f:4c:97:31:e6:f3:7b:ed:60:76:39:6f:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.128.0/21
217.25.32.0/20
IPv6:
2a03:f600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34236
41943
215331
Signature Algorithm: sha256WithRSAEncryption
5b:9a:7f:45:5b:46:ce:e9:2f:6e:4b:02:2c:b8:f4:83:3d:c3:
5b:67:62:d2:e8:97:f1:00:c5:cc:53:e9:42:1f:a3:9c:2d:c1:
6e:55:73:b6:44:ef:fc:19:64:50:03:4c:07:ae:28:c5:75:c1:
3f:81:8f:5f:6b:18:7e:a1:26:9b:3d:99:9e:3f:12:f2:9d:0f:
52:98:77:8f:f9:6b:c5:f1:1e:ba:b1:09:a5:71:8c:e3:41:03:
a5:fa:46:c8:42:95:79:39:7b:e9:9d:74:5e:7a:6d:25:37:ce:
69:c3:60:f0:1d:f3:a0:7e:5d:97:4b:7c:2e:b9:60:c3:0b:b9:
00:61:e2:7d:2f:7a:13:cd:2e:f1:f4:60:fe:0e:38:ae:b7:81:
47:38:eb:d5:76:d9:0d:90:43:41:d9:34:19:aa:de:81:68:1f:
99:89:7a:69:7d:e8:5c:f0:78:9c:32:3b:4f:e4:7c:0b:6d:18:
5d:34:f8:f7:41:99:31:23:70:22:e6:0c:6a:1f:39:d5:c8:57:
7c:bd:f0:40:41:e2:49:b4:a9:b5:7e:29:81:b1:b6:db:be:f6:
98:74:41:9f:33:59:d5:a8:18:d2:55:0b:fc:56:3c:93:60:56:
d4:3e:db:72:ea:82:f4:49:3b:82:ab:07:78:33:21:72:85:8c:
08:83:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 05:02:29 2024 by rpki-client on console-ams.rpki-client.org