Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.cer (raw, json)
Hash identifier: 7TVB4prll0QiMAZnSde640i9OMHsenKFfbgGOoR7q40=
Subject key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCC349423A90B236D1F20F63DFB0B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213092
IP: 2001:678:d90::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c3:49:42:3a:90:b2:36:d1:f2:0f:63:df:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:00:58:8a:a6:9f:d2:e2:34:89:10:b4:50:
8a:4f:ee:c8:e0:b3:f2:1a:86:1a:61:a3:ef:36:c7:
5a:02:2a:17:44:ca:0b:11:0b:9a:50:50:48:f1:33:
65:27:51:7b:7b:21:83:d5:01:44:c7:08:78:3a:c6:
4a:6a:d8:31:f6:d8:ec:ab:c7:30:4a:3b:96:dd:a9:
c3:51:0c:ad:09:cc:95:b0:2d:4d:10:4f:37:aa:8f:
f9:b6:fa:81:1b:a3:38:12:1b:3d:bf:1c:cb:4c:70:
cf:bf:b2:7d:73:a1:d9:ba:f7:30:d3:14:65:72:5b:
9d:92:cd:dd:57:42:91:ac:04:33:96:83:61:ca:fd:
31:e4:40:b3:75:90:cf:e3:53:8a:35:ab:f8:71:18:
a2:11:6c:21:7e:04:6c:77:28:63:17:81:72:9b:df:
d7:0b:ec:c2:65:41:6b:f1:fc:f7:77:a7:f1:bd:19:
f6:b7:0e:e2:de:a0:1d:19:b9:c4:b8:9a:41:22:d6:
b7:61:45:c4:8c:9a:c6:a3:37:d6:17:dc:a7:87:66:
b3:ec:c7:c9:8b:ac:53:41:3c:5e:1a:0b:01:ac:43:
77:e1:08:6a:cc:c4:ba:b2:3a:da:fb:58:80:b6:74:
f4:f1:2e:d1:4e:e2:9e:a6:f7:95:02:c2:cb:ba:86:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d90::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213092
Signature Algorithm: sha256WithRSAEncryption
06:82:a7:0c:c4:ad:4e:bb:8c:fe:aa:08:54:bb:b6:29:93:38:
3d:39:3b:90:ab:19:3a:38:44:2f:9b:59:bd:50:da:dd:af:ff:
3b:b1:46:b5:99:8e:00:8d:da:ce:9e:1e:1a:25:a3:fc:53:63:
9d:af:d0:54:5c:c4:39:2d:02:71:57:f0:5c:c8:6c:d6:8c:69:
5e:74:3e:b1:05:b5:f5:5a:f3:f1:ef:8d:5b:25:7f:2a:7c:7a:
97:b4:b4:e6:bb:07:fc:dc:e3:c2:3e:6d:db:78:d4:82:c9:9c:
45:ed:45:f7:e2:f9:f8:30:46:0c:99:e5:17:7e:77:74:f3:c7:
4d:e2:1d:7e:68:bb:d2:79:0a:ab:ce:c2:b2:5b:55:2d:7f:9d:
b6:62:ac:88:c3:ee:00:81:dc:d4:cb:0c:29:0c:77:2d:0f:c7:
50:98:d0:6a:ea:4d:2e:a1:08:7c:82:ce:ea:e6:bf:18:dd:e2:
9a:f9:08:ca:6b:02:0b:0a:30:05:98:f8:28:88:c1:df:57:72:
39:4d:91:40:39:2b:a7:e0:15:41:47:34:a2:b2:3c:2b:d9:fd:
e3:65:83:da:33:ed:99:f7:ea:e1:ed:77:eb:99:36:13:7d:e3:
3d:09:ce:5c:18:b5:05:64:75:6b:fa:69:97:2e:2f:a1:51:17:
14:19:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:56:08 2024 by rpki-client on console-fra.rpki-client.org