Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.cer (raw, json)
Hash identifier: eccv2Qzt1h+cqHFxOiP0h50gpQpTpQuyuS5DUNuOs1I=
Subject key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCF071EF7698CAA04BA650A3AEDDD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206072
IP: 2001:67c:9bc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f0:71:ef:76:98:ca:a0:4b:a6:50:a3:ae:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:09:ae:82:94:2c:3e:84:3e:33:c7:e4:3c:
f7:98:13:d3:3a:cb:83:4b:ef:75:b0:5d:b9:94:29:
90:2a:a9:b1:f7:be:e8:d1:9b:df:b1:2e:15:44:a8:
3c:45:fd:0b:f2:2c:67:0f:be:02:27:53:0d:69:94:
1b:97:ae:0c:42:c2:76:1c:f6:19:af:b5:db:71:b8:
f4:73:98:36:b2:12:89:3f:c3:d9:48:2d:e8:54:91:
db:b0:b6:6d:c3:61:15:0a:98:a8:23:bd:ae:9f:2f:
68:5b:71:9b:35:04:43:cb:04:bf:5b:d8:05:d0:5f:
6c:15:68:f5:df:d0:4d:f0:3a:50:ec:6a:e2:49:ed:
78:1d:cc:2f:19:ae:3b:53:3a:d2:bf:e5:5b:61:e2:
6a:a8:5c:f9:62:9d:64:bc:1b:1f:be:d8:59:08:c5:
71:6b:cb:de:04:10:a5:65:74:db:5f:73:8a:a9:07:
31:bb:f9:2c:b4:ce:d9:5b:93:a1:d1:ce:56:2a:7f:
5b:74:2f:68:d2:50:d8:7d:76:55:53:67:4a:d8:32:
34:ab:79:ff:03:c2:fb:98:67:d0:7c:1d:13:ca:98:
dd:08:71:a2:93:19:ca:17:69:e5:65:e1:32:cb:a0:
64:2f:fc:31:cb:32:fa:1b:25:8c:7b:1b:b6:67:d9:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9bc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206072
Signature Algorithm: sha256WithRSAEncryption
0c:4c:27:44:66:9b:d2:34:06:84:6e:f3:ac:27:c0:7f:24:fd:
ed:6b:5d:e4:0b:fd:03:da:03:9a:a9:74:1b:4b:08:ec:40:99:
77:26:86:8e:bd:16:94:61:e7:ca:65:85:f4:d1:28:b5:9f:ae:
90:23:b0:5c:17:f3:05:77:59:8a:3f:93:23:da:6e:c5:0d:16:
80:43:1c:a2:62:c3:d8:60:88:f5:6f:47:df:75:09:d8:3a:17:
1f:b6:f2:f8:0c:c2:56:5c:bb:0f:8b:56:f0:47:b6:ae:16:59:
11:07:5c:32:c8:88:3c:ae:34:d4:5a:30:1c:f4:50:68:8e:2c:
d9:2b:70:05:0a:d1:c7:4a:58:5a:e7:b9:d3:35:2d:a8:21:14:
47:bf:81:5d:05:1c:0a:be:18:74:3d:a9:9d:04:43:1a:5a:34:
30:0f:90:d1:c0:34:05:2b:47:be:cc:87:65:01:7a:9c:aa:c0:
55:fa:00:9a:47:3f:cd:9e:9f:31:11:de:91:4f:2c:f3:3d:09:
f0:ab:41:e4:99:93:06:e4:b4:dd:a7:c6:cb:e4:b9:a6:32:8b:
e7:fb:35:ef:d2:ac:b1:8f:b6:62:fc:47:6f:9a:d8:83:e1:f4:
e3:3e:46:76:08:9e:c8:e6:31:51:03:09:48:af:49:ef:41:fd:
1a:ac:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:24:41 2024 by rpki-client on console-ams.rpki-client.org