Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer (raw, json)
Hash identifier: 4dE2BfVol+/pK9WfDK83Cl/Usb7veWejpgkleh+w9Yo=
Subject key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D7674BEF8B57000B60B5D9C99ADB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200096
IP: 2001:678:7c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:76:74:be:f8:b5:70:00:b6:0b:5d:9c:99:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c9f067007684facca9be8ce02da4676c09972a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:21:71:18:a9:72:74:6c:3d:fa:1d:f8:41:
08:b7:0a:f8:1b:ae:b9:6d:85:2d:4c:e2:e9:57:df:
d7:66:2d:79:41:a6:5c:8f:dd:4e:6b:35:99:bf:bb:
9e:38:b7:ea:98:fa:51:31:8f:69:4d:5d:4e:be:47:
53:49:38:ce:ea:d2:ad:34:60:67:fc:7f:5c:eb:ac:
3d:f4:a7:f1:51:f2:3c:a5:cf:a3:a0:1c:0c:ef:d6:
65:4b:cf:26:19:d9:9a:14:a1:11:b5:ee:11:0d:d5:
b7:6e:16:66:a7:98:bb:09:db:39:95:d8:eb:14:49:
bf:b1:81:35:a7:88:57:80:89:69:91:8f:fe:70:59:
28:6e:c1:c1:69:6f:d8:d0:4a:ff:60:2e:cb:41:9d:
05:66:65:61:0b:06:7b:1b:f0:18:c4:85:fd:3a:19:
a7:c9:0e:aa:d9:be:4c:e9:34:aa:cf:b4:93:d4:09:
ec:14:c9:92:27:f3:bd:62:f0:bf:3b:bb:78:bc:b2:
18:2a:d8:55:e7:5c:2a:41:ff:f9:47:a2:e7:5c:74:
97:7e:a3:39:5e:56:a0:c3:e8:f9:39:27:f7:83:1d:
ce:0e:1a:5e:38:fe:ce:51:85:46:b1:d7:d2:de:0a:
ac:9f:dd:ce:b9:45:5e:a4:26:32:26:8c:cc:1d:b6:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200096
Signature Algorithm: sha256WithRSAEncryption
41:6c:90:dc:a3:4c:91:0a:39:64:ac:fe:08:c2:76:7f:89:8c:
d6:c0:45:fb:fc:bd:9c:5b:6b:a5:53:ef:0e:84:9c:d8:62:b5:
5a:3d:7d:b8:b0:15:fe:82:1d:36:a9:61:cf:35:85:fe:da:68:
4e:20:88:76:84:8d:12:fd:cd:b4:8e:85:05:93:e0:5b:98:ca:
52:10:f3:f8:20:e4:e7:7a:da:3f:68:61:9a:35:7d:d7:fe:3c:
e1:ac:47:96:3a:92:92:de:bd:f6:db:4d:a5:48:6a:53:8f:4d:
b7:84:1b:bf:88:1d:6d:4e:fc:41:38:a6:30:d1:92:dd:48:d8:
60:8a:a1:26:e0:6d:0c:61:15:06:22:87:ca:80:11:2f:49:46:
87:21:ce:6d:71:c5:1c:9f:90:56:09:d2:dc:4f:8b:c4:d9:24:
d3:36:3d:81:ea:40:53:e9:fd:39:25:15:0d:77:a9:b8:fc:bc:
4b:8f:ed:c5:b5:1b:03:49:7a:ea:db:15:c6:af:8d:34:b6:72:
27:8d:43:3d:cb:c0:02:5d:08:6d:18:8d:d3:e2:c7:ef:d1:0f:
55:d5:02:ce:40:59:fa:f2:e9:4f:5d:a4:92:95:16:18:8d:f7:
0f:17:50:12:59:40:cb:6b:70:dc:a9:ce:cf:a8:71:08:1c:bb:
0e:74:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:18:36 2024 by rpki-client on console-fra.rpki-client.org