Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer (raw, json)
Hash identifier: hLpiwmzh4BwooS49UXlbblZ61+pRQePJHMdcJGv/1KE=
Subject key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BAD16863B0BF53ABD18BEDD761580
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198501
IP: 2001:67c:112c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ad:16:86:3b:0b:f5:3a:bd:18:be:dd:76:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:c0:71:49:d4:5b:7e:e5:61:f8:b2:1f:03:
42:83:96:e6:e5:53:bc:55:86:ba:3f:86:2e:1e:fd:
1e:3d:bd:ed:87:5c:9f:85:9e:cd:f9:74:95:83:7d:
fa:b4:b7:74:41:69:64:fc:e7:66:47:95:bf:3a:92:
a8:20:d1:4f:13:84:4c:c2:c5:e7:87:23:18:89:40:
eb:9f:7a:14:b5:28:9e:90:f4:4f:7a:1c:d6:04:ec:
55:a4:f0:b4:03:2c:f5:87:d4:b1:b5:e5:f1:68:e7:
87:7d:79:7b:b5:76:9d:f4:da:4a:c0:71:6d:95:e3:
2a:c0:b9:95:a3:19:6e:63:f1:47:31:a2:ba:86:3b:
45:0e:7f:15:97:b9:f9:cd:c3:3b:7b:bb:6f:55:86:
31:d7:01:0d:41:a4:40:c2:0d:3d:a8:6b:a2:77:e7:
91:53:2b:62:e7:c9:bf:48:a6:5d:a6:99:85:12:69:
2a:6d:69:b1:ed:54:ad:cd:92:73:f3:83:f6:2c:85:
fd:ba:62:c9:bf:f0:1f:58:74:e9:70:5b:05:6f:63:
75:e1:0d:42:26:ef:b1:1b:e4:ec:9d:8c:09:41:27:
1c:50:d6:62:02:3f:04:c5:29:4e:d6:e9:89:be:26:
da:9a:6d:88:bb:03:40:e1:0e:25:8c:a2:9c:a3:3f:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:112c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198501
Signature Algorithm: sha256WithRSAEncryption
6f:8f:1b:f0:eb:00:55:71:7f:ce:1d:5f:3c:3c:c9:f6:ff:a1:
53:e2:6b:51:e3:12:ab:24:0c:03:be:09:2e:c9:07:3e:43:ee:
5d:ee:04:7c:ad:ab:2a:50:eb:9d:3e:c1:ae:28:56:2d:57:3e:
6f:c9:18:6d:c4:62:cb:1e:36:80:bb:e8:5d:30:40:11:3a:ef:
65:c6:7f:9e:de:32:bf:12:a8:1d:e4:b3:85:98:c1:61:d7:15:
65:4e:4d:0a:46:02:61:69:37:3b:b3:8c:86:0c:d5:8b:c5:6d:
30:4b:01:f3:9a:db:98:11:64:64:98:df:d4:e3:e9:85:25:8a:
37:e8:df:cd:86:e5:09:1d:e3:f6:74:95:60:59:dd:ef:dd:5b:
ba:b3:ee:62:1f:09:8c:c7:c9:50:3e:d4:19:5d:1a:c4:c0:93:
ff:71:15:25:ad:6a:3c:82:aa:40:2f:86:7d:ad:01:e5:6a:cc:
5c:d5:0f:c4:21:d3:00:1d:97:ad:37:2f:fa:6f:c5:10:3a:a5:
dc:df:b6:27:98:5c:b8:03:00:00:f2:10:88:67:14:22:2d:f0:
77:a7:98:7c:84:ea:88:f7:ad:fc:75:d2:94:d3:6e:aa:fa:dc:
98:7a:fd:ea:c1:d6:e1:85:f5:c9:6e:f9:d2:45:ab:6e:ca:a3:
47:ae:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:40:29 2024 by rpki-client on console-fra.rpki-client.org