Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer
File: ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer (raw, json)
Hash identifier: WWl+dFCGevyJPDVXrjbfQdIAQY4LM6HFwQTZzVAXzYs=
Subject key identifier: 7E:D7:78:DA:4A:3C:37:C0:59:92:9C:18:61:64:81:82:D7:38:00:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2C359CD068E1B312797452220548FDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:03:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208051
IP: 2001:678:b34::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:c3:59:cd:06:8e:1b:31:27:97:45:22:20:54:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:03:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ed778da4a3c37c059929c1861648182d738009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:2b:2a:61:45:9c:11:b5:36:e7:26:ec:9d:
1b:d1:4f:61:15:39:1a:ec:0c:6a:bc:9e:eb:98:14:
60:85:b9:63:f7:83:ab:38:7a:c2:c2:87:e7:f9:0c:
00:4a:5c:02:c1:fd:01:16:04:28:7a:0a:35:99:41:
ce:0c:1d:1b:32:b7:42:e0:46:4c:5d:4d:2a:67:34:
cf:9c:85:fd:95:df:f7:7a:80:27:ce:e5:5e:8b:1d:
c2:4a:d5:5f:fa:57:28:88:63:66:2c:07:f6:13:cf:
e5:90:df:f1:8a:a2:79:63:cb:82:4d:03:89:15:3b:
03:1e:df:04:6f:60:0b:24:99:77:11:b9:39:3e:ac:
22:99:51:cd:67:5c:d6:89:69:ff:cb:eb:39:db:91:
12:2a:67:f1:95:63:53:09:1e:96:d3:ac:05:14:52:
90:62:fe:4d:40:6b:f9:94:a0:87:46:cd:9f:f8:6c:
e9:5e:73:4d:01:db:a4:d2:62:d8:f4:20:b9:c3:cc:
0a:db:b8:dd:f3:a7:84:1f:99:8b:84:14:5f:c3:7c:
d0:f8:47:fe:f0:20:f7:1d:d2:bc:f2:5e:16:51:a5:
a4:47:ec:ac:a7:22:5f:66:32:cd:e2:a1:a9:70:c8:
3c:48:7a:d1:f6:f9:79:76:1d:6f:26:8f:ad:23:4d:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D7:78:DA:4A:3C:37:C0:59:92:9C:18:61:64:81:82:D7:38:00:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b34::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208051
Signature Algorithm: sha256WithRSAEncryption
53:25:88:25:0b:84:82:4f:a7:36:a4:dc:01:44:f9:9b:27:7b:
21:66:6c:bf:55:02:f1:b8:b9:d6:71:ea:66:45:e7:ff:a7:10:
1f:f1:af:36:42:40:72:cf:71:3f:f1:ca:c2:23:89:74:5d:e2:
b7:2f:81:18:4c:b6:c0:92:dc:1a:1c:d5:e2:cc:54:44:04:8d:
2a:38:6b:eb:8d:d1:a4:42:08:30:bf:60:8b:ba:38:c9:b9:18:
d4:92:0b:8f:cc:91:55:13:90:a6:cc:0f:ee:d0:c5:75:cd:0d:
d9:e9:60:a5:cd:9a:6d:62:3a:3d:44:e6:b5:02:ab:df:b7:2a:
7b:bb:de:a6:81:29:c6:bb:c7:92:2b:84:81:03:c7:e9:cd:96:
05:05:31:bd:2e:3e:67:9b:31:41:f1:6d:b8:e3:45:0e:4b:78:
35:65:18:1c:67:b7:e1:9e:f2:81:47:d3:79:27:53:aa:cb:57:
bd:34:f1:7f:a9:73:de:92:53:cf:a2:9a:f7:2e:c1:fe:ba:88:
5a:c8:a4:52:3c:39:05:38:97:0b:a5:4b:50:36:e0:00:af:78:
62:4a:3b:5f:c2:e5:a4:39:61:9c:9b:4a:8c:a2:d4:2f:dd:14:
95:ee:ba:6a:b3:8e:de:e5:c1:68:97:6c:b5:c3:81:9f:16:ba:
b6:f6:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:53:01 2024 by rpki-client on console-fra.rpki-client.org