Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
File: oZxkOUagWTlzVUINc7xF8U2ip2s.cer (raw, json)
Hash identifier: XAu++8Adeqy5/mNsWBv1qFjU3wljbJD84v8YjtaOTWw=
Subject key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F8D18F8B149D7B95B98630286B119
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213364
IP: 2001:678:d14::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8d:18:f8:b1:49:d7:b9:5b:98:63:02:86:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a19c643946a059397355420d73bc45f14da2a76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:fb:f1:eb:78:46:ed:3b:2e:38:fe:b7:d7:
e5:4b:af:6a:21:ec:3a:66:70:61:94:ac:45:2a:72:
49:93:f4:ee:79:f5:dd:39:a6:24:fa:c5:5c:32:a4:
00:90:0c:d7:c3:e4:8c:bb:9d:30:a4:22:bf:07:5f:
d5:3e:45:cd:f9:5f:a5:87:cd:75:41:f4:65:fa:8f:
33:21:01:45:b3:ec:91:e8:e9:c5:8d:a5:cc:dc:9c:
ec:ea:78:df:f8:64:f5:6f:9a:49:ae:fb:70:0e:42:
2f:f0:fd:71:ec:e9:4b:d4:27:4e:38:5a:f3:0a:b7:
0e:4c:3a:bd:0a:c0:9f:14:10:0b:76:77:7c:4c:a3:
d4:4e:d3:20:83:8a:3f:93:8e:4b:76:65:8d:f5:c9:
cf:d5:3f:ea:10:97:1f:7f:91:a0:0e:6a:2a:3c:ea:
73:65:81:56:65:0c:25:6b:fb:b4:4a:e2:fd:e6:58:
4d:42:5f:84:97:6a:4b:ef:5c:da:a5:7e:2d:77:38:
8e:47:ed:1c:b3:01:4b:57:54:56:14:2d:f5:51:f6:
14:aa:61:54:15:4b:03:ea:39:f1:ab:59:df:cc:0b:
1d:64:98:bf:f3:a2:3f:55:f2:5d:82:be:2c:fa:26:
6b:0c:1b:58:db:ba:11:45:5a:b1:97:75:f1:95:b5:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d14::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213364
Signature Algorithm: sha256WithRSAEncryption
42:0f:3a:58:72:d1:88:96:47:a8:0a:78:5b:fb:7d:f7:02:7a:
ed:00:7a:ee:80:49:27:c9:a6:67:2b:77:03:b4:b2:37:01:d0:
43:a9:bb:d4:a0:d9:9a:94:5c:20:f4:7d:9d:a6:ae:61:c3:99:
3c:be:04:f8:2f:9b:03:ad:3b:6d:39:11:29:41:50:5f:65:34:
ec:29:70:30:0f:9c:7e:c9:a4:90:e8:54:43:e0:9d:38:95:08:
0b:78:dd:38:72:54:42:fb:81:de:28:b5:6e:b9:45:30:d2:9e:
57:aa:39:8a:ed:b2:72:86:8b:4a:27:6c:f7:d3:01:11:c7:0f:
aa:a4:56:7b:e5:e9:da:d9:77:2b:7e:fe:98:15:e0:ad:1a:1e:
fc:76:ce:13:25:c4:a3:ad:72:8e:e2:b5:32:05:ee:6e:e5:e7:
d2:0b:d8:15:eb:db:72:76:e2:2a:83:c5:cd:da:96:c4:88:49:
55:7e:c6:ac:f4:45:f4:97:4f:5b:be:03:7f:45:2b:ca:cf:42:
4f:ac:05:51:36:1c:63:52:90:bd:ac:71:6c:04:35:a6:f1:f2:
b5:34:13:0f:f0:c6:4b:f6:af:bd:69:22:27:40:fd:f7:d8:30:
1c:a8:8b:bd:17:fc:bb:30:bb:b2:36:c9:c8:38:10:61:bc:e1:
ec:bb:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:49 2024 by rpki-client on console-ams.rpki-client.org