Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
File: j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer (raw, json)
Hash identifier: H1xsBdFkn5i6Q8fVS8ywqtgxkUyJssiubx3HY1yYy2I=
Subject key identifier: 8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9A1A584179D37E49E94442A008366A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a02:6580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:1a:58:41:79:d3:7e:49:e9:44:42:a0:08:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:a3:26:a4:44:63:12:63:38:75:6b:33:75:
37:33:3d:e6:97:4a:bd:19:d4:00:0b:ef:04:b8:d5:
52:d3:61:4f:82:13:22:3c:65:13:78:d8:29:6e:83:
4b:1d:6c:23:18:94:31:a8:8c:0c:af:4e:f7:44:8a:
65:d7:2d:fa:a4:dc:e6:20:c1:76:62:90:45:20:49:
f8:d3:05:a6:d2:08:1b:7b:44:70:c8:69:6b:38:19:
61:6f:12:7b:33:6b:4a:48:b0:6b:9c:d6:d7:a8:6d:
6c:88:aa:6f:86:09:15:f2:d6:dc:70:ec:1f:c5:54:
5e:e4:6c:27:9e:ad:68:2f:cc:17:85:51:d7:85:c5:
79:69:bd:d8:16:ff:02:36:54:07:f7:7d:61:2b:a3:
a0:89:08:60:1b:53:fe:ea:83:ee:a6:fc:8b:22:52:
55:78:ab:e3:5b:f8:5a:a3:eb:2c:1a:62:88:80:0b:
d4:d1:71:20:46:4b:ff:6c:c0:51:2b:8c:7a:f0:d5:
5f:a7:8e:46:f7:bc:41:70:34:cd:10:73:f1:d5:94:
19:5c:34:89:1a:53:72:f3:80:a4:92:ee:b8:82:42:
62:ef:e5:6b:87:d2:d6:50:05:7e:ae:47:a4:6f:44:
02:5b:74:c0:71:7e:7d:55:2c:64:cc:b7:69:e8:e5:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6580::/32
Signature Algorithm: sha256WithRSAEncryption
3c:85:77:61:70:9a:64:d3:33:65:ac:69:c6:b4:b1:50:37:66:
3f:a5:02:be:f0:88:c0:60:3a:cd:2b:76:87:06:b8:92:c4:eb:
45:d0:c0:0a:be:6a:f3:84:35:26:2b:fa:93:8f:b8:9c:d7:be:
c3:cc:90:03:d6:92:85:e4:f9:35:72:d8:53:ca:0f:04:35:01:
2b:1a:bc:43:82:2b:4b:cd:4a:d0:20:18:ba:f7:65:9a:4c:81:
31:ba:44:d3:c7:3d:a7:91:ce:bf:8a:17:7e:fb:0a:b5:88:98:
0c:22:e4:a4:5b:d4:78:eb:2d:b8:02:17:7d:96:c4:9e:f8:bf:
09:34:71:16:f6:de:be:6e:a2:69:e8:c4:97:7e:5d:de:27:66:
0c:bb:8a:be:f4:f3:4b:9e:47:80:b0:a2:2c:26:d8:9a:3f:d4:
bc:a5:4d:b3:ba:0f:da:ae:a5:61:98:45:75:63:98:70:30:05:
64:ba:1d:28:ac:cf:34:ae:3c:6f:38:60:34:d8:53:64:c9:4e:
83:43:51:9e:83:65:6f:0a:ec:fd:29:36:bb:3d:3f:5b:10:f3:
09:76:74:7e:cb:3e:4f:37:d3:8c:77:32:c9:ac:07:ae:b7:c6:
d3:f9:4a:b8:86:d0:58:f1:61:02:a7:41:ef:d4:37:a6:6b:39:
24:29:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:13:02 2024 by rpki-client on console-fra.rpki-client.org