Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer (raw, json)
Hash identifier: eeuBqOxNQxUf0w+dHyWxeHPlag7Sck1PMxzIXlGcUnI=
Subject key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A630CD7CCF73E2D72C6C4A2DA1C37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212717
IP: 2001:678:e24::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:63:0c:d7:cc:f7:3e:2d:72:c6:c4:a2:da:1c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:ef:cc:29:6e:39:08:76:78:70:02:ee:d3:
f9:b9:28:90:d8:63:13:6e:54:51:bd:9c:e9:a7:16:
89:2f:c2:db:dc:06:cd:8b:b4:78:93:81:79:aa:81:
fc:ec:c3:25:e1:e8:32:4c:ef:ae:d3:47:41:d5:67:
bf:72:d3:04:f9:7b:91:31:6e:bf:f4:87:d7:71:54:
cd:6d:f7:e8:c3:16:92:aa:b2:7f:e4:41:30:b3:6d:
61:f9:47:1a:b3:60:53:79:2f:c0:22:cb:ae:75:bf:
ce:1f:d7:d8:08:91:c2:21:37:06:63:da:28:8f:48:
c1:47:9b:16:eb:21:15:55:b7:1a:20:79:66:5e:c8:
bc:95:df:b7:fb:c7:df:e0:9a:0e:31:5d:1e:a2:5a:
82:64:e8:46:21:c2:63:3a:d4:2e:3f:10:e7:72:98:
65:41:39:0b:9a:9e:da:90:c2:11:d9:bf:25:0a:1b:
ad:98:7f:97:90:35:b0:12:64:6c:d2:e7:52:30:15:
27:36:1e:41:8c:ae:57:c1:0e:43:66:91:48:4f:1c:
ad:74:3c:d5:b8:3d:6c:fd:47:5d:50:ae:f8:4d:23:
9c:b6:7a:c6:ae:54:4c:72:44:1e:f8:3d:03:e8:83:
17:d3:c4:fe:ab:af:fb:8b:ea:2c:e5:ab:8f:ad:02:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e24::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212717
Signature Algorithm: sha256WithRSAEncryption
0a:cb:18:28:cf:4e:70:72:6d:de:f5:ab:49:86:07:aa:66:26:
34:4c:0d:05:83:38:43:bf:24:2b:11:53:fd:df:14:a4:d3:ae:
87:19:85:ff:fc:c3:dc:cb:69:03:1a:2c:cd:93:57:20:4f:e1:
10:10:96:a2:59:9c:00:8c:16:64:0f:4d:ea:be:ba:f9:c4:c4:
e9:d8:e0:5d:ef:c8:1c:d5:97:04:88:fd:a9:f4:58:30:17:62:
1c:10:2f:e2:36:3d:7d:17:32:21:82:17:43:f0:c4:43:1a:b7:
96:4e:44:59:55:4e:e0:b1:84:a2:0e:ac:46:8a:56:ae:d5:2e:
94:4d:10:71:1b:ac:f7:91:fd:fb:c1:c4:87:2e:4b:98:fd:46:
38:7d:1c:36:d3:8b:be:85:44:f4:43:1f:89:d2:6b:ee:f8:8c:
c2:ed:ab:6e:79:50:29:d9:6c:eb:ef:88:a7:f2:a5:d7:5b:9a:
1e:4f:ec:b4:7d:20:06:68:93:fb:bc:b7:54:df:b1:0f:c3:11:
6b:29:8e:31:36:f3:05:dd:94:5d:9f:e6:6b:3c:3c:23:23:8b:
32:a7:b6:79:4e:a0:ac:89:e5:dd:09:9b:41:63:90:6f:de:e2:
23:3c:96:f0:67:62:9c:98:53:18:a3:33:a4:25:9d:d6:a8:2c:
09:25:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:16:16 2024 by rpki-client on console-fra.rpki-client.org