Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
File: rM-ri4kwEKG14lBy4dRWkEST9S0.cer (raw, json)
Hash identifier: SmAIwmv4qUHIYNNGdW00DDx9yO1PiZ2/hoXMrsz2cc8=
Subject key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BCA65008A3249170ED2D22BC3B738
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211586
IP: 2001:678:f18::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ca:65:00:8a:32:49:17:0e:d2:d2:2b:c3:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=accfab8b893010a1b5e25072e1d456904493f52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:cd:4a:2e:2d:56:28:ec:da:4c:a9:1f:9a:
4a:0b:44:c0:d8:51:67:ad:a3:da:a8:0d:ff:69:ec:
b5:0e:d0:35:2d:7f:d0:79:48:28:3b:4e:c2:20:f4:
69:3c:dc:e2:0d:27:c9:1c:63:58:12:41:0f:26:fc:
3b:a2:68:ac:52:1a:80:f8:e6:60:9d:0d:c9:72:71:
8e:77:6a:b5:9f:06:e2:67:51:41:c4:7c:c2:69:8a:
d0:ff:cb:ca:aa:1a:c5:c5:69:4e:94:0b:29:4c:0f:
a4:be:40:51:5f:d1:66:eb:42:13:61:a0:c0:65:59:
c9:44:4a:af:46:2c:9d:bc:89:1b:85:ce:98:16:56:
11:46:f5:e5:8a:26:0d:41:c6:a7:f5:bf:fb:94:02:
e2:2c:ca:83:8a:94:87:4a:31:b5:3b:4b:87:03:88:
01:5d:20:1d:f9:7c:fb:5a:5e:5f:e2:28:80:46:08:
1a:68:78:a2:87:f4:8c:96:1c:96:f6:87:e7:e2:ae:
cb:ee:57:d6:7b:cb:4f:48:83:07:df:86:4e:f0:03:
ad:fd:23:98:ac:c0:75:e0:4e:1f:48:74:e1:4e:85:
56:72:b5:f0:b6:03:35:d6:ac:49:ba:eb:b1:21:e2:
57:a9:c9:7f:38:ec:89:ce:e1:61:ce:bf:d1:18:ac:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f18::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211586
Signature Algorithm: sha256WithRSAEncryption
51:61:99:d9:37:5b:1e:3e:39:52:76:03:40:a7:94:b9:bf:b3:
12:6b:f2:f8:7d:24:29:15:97:da:3b:c5:1a:7e:00:43:c9:7e:
fc:4e:cf:91:0e:63:a6:b2:17:18:d4:e8:e3:30:5b:3d:6d:eb:
6f:47:07:3f:ba:e6:fe:21:49:04:a2:ef:9c:13:cc:97:d8:23:
c0:3c:e9:5b:13:f3:0c:d8:d8:86:0a:fe:24:c2:d8:46:4a:77:
93:a1:a9:93:4c:7c:4d:dc:1b:02:df:a0:09:4d:d5:fb:45:b8:
cc:0c:58:42:39:07:2a:25:4f:a2:17:8a:3b:c4:64:8b:0b:59:
13:d5:20:52:ef:05:4b:c5:86:5a:d1:e7:31:0b:11:0a:99:ec:
6e:a2:eb:88:41:18:d0:6a:ee:a1:16:27:ab:52:34:6f:ed:77:
c5:75:1e:59:32:6c:b9:17:65:9a:6b:67:e1:ad:1f:51:6d:17:
ff:eb:5f:2e:30:71:64:55:8a:59:6a:7c:9d:ed:5d:f6:a1:08:
01:fc:5b:c2:c0:c7:af:72:08:35:24:0e:f1:d8:ae:dc:61:ee:
be:31:a3:a1:27:58:e2:bd:05:57:5f:56:00:e5:49:65:13:c4:
d0:e4:44:8e:42:bd:32:b2:00:74:50:b3:a0:6a:d3:17:35:9a:
5f:c8:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:24 2024 by rpki-client on console-ams.rpki-client.org