Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
File: nU-b-Hr_AP1dshWFeBtG82-eNiY.cer (raw, json)
Hash identifier: 9ojQkpOTK8FDvPNcNtzcurQyx8GRhKOGm9yqF2GHmis=
Subject key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01934549DCB290ABC8D26BF5D79C92C19BF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Nov 2024 16:38:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198178
IP: 2a13:7e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:49:dc:b2:90:ab:c8:d2:6b:f5:d7:9c:92:c1:9b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 19 16:38:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:b0:9d:6f:44:a1:78:66:aa:94:d5:06:b7:
e6:f5:0f:5a:0b:91:6f:d8:bc:df:b4:dd:40:f9:d8:
b1:fb:ad:e1:62:39:31:1c:65:0d:ce:08:9c:31:65:
ac:47:72:5c:7b:84:83:cf:d9:3b:18:50:4d:59:59:
02:91:16:a8:a1:fa:24:27:f0:28:7d:2d:43:e2:23:
35:db:c9:ec:33:16:63:b8:e4:b4:df:0b:82:be:9b:
4a:0c:54:94:0c:29:c6:2a:79:28:aa:02:fe:8c:1f:
90:f1:d6:26:d7:45:b9:41:53:fa:3f:2d:9e:e2:9d:
82:af:8b:12:f1:25:65:0b:1a:95:f8:b6:96:7f:c5:
c7:96:03:38:24:50:1a:7f:74:48:60:d7:9e:06:9f:
5d:b3:05:3b:65:72:5d:43:fc:24:ee:c7:3a:10:90:
d2:4f:ea:87:55:6d:d0:72:46:09:ae:d8:a1:44:41:
d3:b3:1c:5c:1b:9a:ef:39:ef:63:f8:ab:b7:cf:df:
37:3c:12:ac:14:48:8b:29:1e:96:d5:ce:7e:df:c6:
aa:aa:71:0f:5d:de:76:e2:ac:56:0e:a3:5b:04:c4:
64:70:d3:a3:13:ea:31:cf:20:fa:88:3c:5f:f5:c1:
33:fb:14:0b:75:0b:98:28:bd:0f:06:e2:f8:56:21:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198178
Signature Algorithm: sha256WithRSAEncryption
2f:34:e7:52:d2:ed:87:55:5c:d2:04:d3:1d:1b:ff:64:da:37:
e0:d3:57:9b:ce:1c:af:27:f5:7f:0c:66:e5:f7:df:00:fc:b0:
a7:29:0e:1c:65:a8:ff:30:13:31:3b:83:f1:bf:e9:19:57:b3:
8b:bc:a7:42:2a:9a:95:65:00:08:61:3b:d1:a4:5d:43:65:91:
dd:e2:26:6b:97:40:27:7a:a5:fa:11:62:8a:04:b1:5c:9b:9c:
dd:e2:5f:f4:75:45:0f:64:61:65:10:8c:89:1f:26:5c:22:03:
ec:b7:ba:50:2c:52:f4:6b:67:8e:97:e1:e3:d7:bb:91:8b:57:
14:20:68:02:a8:87:43:43:55:55:6b:3c:f6:aa:3d:b9:5d:85:
23:47:ed:9d:95:9d:27:df:f4:b5:5a:3b:c4:bc:65:78:85:87:
ff:4f:cb:da:fa:6b:6c:2f:1e:f6:a1:1a:dd:f2:72:2b:1a:f3:
6b:02:86:4a:c6:94:6d:5c:74:e2:66:b5:22:8e:60:ed:32:97:
cf:52:ab:61:21:3b:bb:c4:5b:39:fd:97:b1:71:a1:14:46:8d:
0d:63:0d:a8:b3:c3:a3:f0:e1:a5:b5:e9:77:cc:04:b2:58:f5:
34:c0:d3:49:c3:e0:53:3c:40:27:fa:0d:43:24:a1:5e:98:c6:
6b:79:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:45:56 2024 by rpki-client on console-fra.rpki-client.org