Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
File: k-zM3oXECxVPkZuvZO8DLscNdR4.cer (raw, json)
Hash identifier: XDlK9wL37cg7RTFSMvqKHgpJq/3pO9S0KTn9FIZXpKM=
Subject key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E60EEFB9FB6D64075A2E4185EB923
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:138::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:60:ee:fb:9f:b6:d6:40:75:a2:e4:18:5e:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:bd:f8:2b:cf:b6:90:1c:89:ce:84:c6:d8:
0e:4c:65:df:03:71:26:7d:9c:a9:23:9d:85:39:70:
59:b3:15:19:6c:38:02:e2:d4:33:ef:2d:24:eb:c6:
73:af:07:fc:ce:d5:56:f6:e6:bb:db:03:ec:28:54:
c1:e1:20:19:f5:47:43:70:fb:2e:2d:43:52:46:ac:
7b:45:ff:a2:e7:23:bd:85:cc:41:23:e9:c5:49:42:
cb:04:8d:10:d7:0f:f3:f6:e3:c8:b5:65:cd:3f:ed:
02:3b:92:36:41:39:4c:f1:52:59:ed:05:32:da:d2:
17:15:58:90:94:f7:64:34:37:f1:96:91:96:62:d1:
31:48:e3:21:74:87:fa:c8:ec:f7:37:99:52:88:ba:
5a:96:65:30:04:06:ee:08:90:c9:f2:b2:3b:ea:b8:
78:aa:80:39:21:bb:a7:a7:eb:a4:06:1d:32:1a:d8:
9a:97:45:76:22:1c:24:ce:49:d5:e6:fd:dd:d4:f1:
48:e4:f9:fc:8f:3a:35:00:58:f4:e0:22:39:89:32:
00:92:40:c0:3c:14:c4:57:c1:83:70:69:06:bc:c1:
2f:a7:5d:09:ad:f7:55:b0:7d:a1:09:0f:36:55:4a:
79:8f:4a:ae:1c:d9:1c:47:aa:64:3d:6e:5b:72:66:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:138::/48
Signature Algorithm: sha256WithRSAEncryption
3a:db:46:46:a7:f7:cd:f1:85:45:7c:26:c2:10:3d:64:d0:1a:
1d:9d:90:26:1b:5b:75:f6:cc:c1:ca:5b:16:dd:3a:d4:58:b5:
c6:db:6f:41:54:86:c7:48:6f:82:5e:b8:94:3a:1a:69:75:64:
d2:1b:0b:6b:66:06:ab:22:b6:f9:29:ab:94:32:fe:7f:79:10:
ec:2d:ae:9e:ab:eb:7f:0b:86:f7:bc:40:a2:a9:1d:70:12:ec:
00:cd:2c:df:27:b4:67:82:f9:bf:a0:54:9a:50:b6:29:41:06:
01:8e:61:21:bf:22:04:a0:59:be:27:d0:81:53:6b:42:72:06:
8f:9c:1e:91:9d:c0:51:48:38:72:b1:6b:4b:dd:c4:89:8d:2b:
b5:46:31:55:e8:42:a1:a5:75:a4:9c:48:a6:83:a2:ca:73:3b:
e9:8c:64:46:f2:01:ae:07:90:2f:53:e6:28:9a:2a:36:d8:a8:
53:4c:92:0f:e4:c0:fa:e3:fd:34:28:b0:36:09:93:48:30:b3:
9d:3b:44:83:c0:95:8d:e9:ea:ba:a5:14:72:7e:b4:0e:d3:29:
1f:0c:3e:3c:54:5b:49:70:84:23:60:dc:b1:63:56:20:3a:17:
9a:5c:ed:da:60:b5:0c:ea:8d:db:9e:4b:a2:17:61:8b:84:c9:
27:38:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:34 2024 by rpki-client on console-fra.rpki-client.org