Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer (raw, json)
Hash identifier: IlPeQIHfCoKg3h6Gidi4UhKW4yW6x/goCkL9uW+xGqY=
Subject key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB1EA484AF81A7CB17CEE95186EAAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204896
IP: 2001:67c:4e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:1e:a4:84:af:81:a7:cb:17:ce:e9:51:86:ea:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:ce:cf:4c:57:ed:24:02:28:c7:97:96:af:
2e:2d:da:62:cf:a9:07:24:31:32:98:82:9d:03:0f:
68:26:e6:94:b6:58:4b:6a:3a:fc:07:70:fd:f5:fe:
04:02:46:e7:ca:43:30:f0:2e:74:2c:16:95:37:ef:
18:03:b7:dc:d9:08:d5:f2:c5:54:79:0f:fb:bd:66:
4b:05:27:90:04:38:c2:c3:cf:5c:9c:3e:9d:e5:5f:
e8:ef:b6:fa:f1:0a:1a:ff:52:15:de:79:b9:b1:7f:
e7:e2:68:44:e6:cd:e5:57:f9:cc:e1:da:a6:a9:d4:
74:e9:3c:ba:34:68:d7:f1:84:6d:c4:0a:fe:d9:9e:
9a:93:f1:b3:d2:1c:a8:25:f3:8a:32:7c:51:e6:63:
bf:a0:00:68:c6:74:83:48:f9:b2:ef:91:13:a4:c9:
dd:2f:6e:0c:e6:65:bb:f2:86:46:83:25:37:6f:61:
e1:8b:2b:7b:a1:17:39:eb:7f:6e:49:3e:09:88:c3:
7b:bc:aa:74:9f:78:92:96:25:a9:71:89:ea:63:84:
a8:c5:8f:0d:1d:43:a1:3d:31:85:d3:40:ce:06:60:
98:04:63:fc:79:1d:26:8a:02:89:92:d4:66:cc:ae:
89:28:64:2d:7e:64:69:66:9d:f6:16:31:05:e1:85:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4e4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204896
Signature Algorithm: sha256WithRSAEncryption
60:62:5e:c9:4b:6b:bb:d6:d5:0c:12:52:75:c4:6e:61:dc:c0:
53:51:f4:00:f9:2f:6a:05:f9:d3:b6:8c:49:7c:f0:ad:b5:cc:
bd:10:7a:0c:6e:91:ae:e5:b0:da:39:34:cc:a8:b8:cd:f1:88:
c3:84:cc:73:43:8b:08:25:7b:c2:8d:7a:01:ff:d9:d9:8b:e5:
90:62:ee:9a:63:7f:2e:95:7f:46:70:91:f0:19:f8:b3:cb:3d:
71:de:86:2b:71:b7:67:67:10:76:6b:d5:8a:27:dc:37:49:e0:
96:43:37:65:8d:86:0e:8d:73:9d:65:07:cb:c7:3a:f5:a1:4b:
99:f0:fc:62:f5:80:7e:e0:94:76:fa:a9:54:6b:8b:f7:ca:49:
a7:4a:6a:e6:7a:67:15:63:9b:fc:70:70:d7:b7:b3:37:be:c9:
5b:c1:20:2f:97:54:a9:46:9c:9e:42:25:b7:a8:9a:5f:7a:f8:
1e:23:1a:15:91:7b:e9:16:7b:b0:0a:07:a9:37:2d:cd:34:7e:
e5:ce:fc:82:b6:b5:e3:5d:a0:92:f0:83:bd:ab:96:f9:f0:bf:
0d:42:3c:e2:c4:a7:6e:77:f5:da:e0:e6:97:b5:cd:0e:12:5e:
3a:68:81:1b:ff:21:8f:3f:cf:3c:b1:2d:b7:48:cd:ab:f7:be:
48:9a:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:38 2024 by rpki-client on console-ams.rpki-client.org