Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
File: s6RxSmlcY88unErephcYJ9hm4pg.cer (raw, json)
Hash identifier: mx1JwZPHkxPKEiBLiTzWPNSGLZreaXTEapJe+5kI2mo=
Subject key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FA1E5B69E7F81B0E5691F14AB5AA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212818
IP: 195.177.214.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a1:e5:b6:9e:7f:81:b0:e5:69:1f:14:ab:5a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:a6:84:b4:c5:70:9d:3c:52:58:7c:cd:9e:
ec:f2:bc:e2:c6:89:9f:99:94:9a:54:13:3b:7c:3a:
fe:82:64:d1:ac:b2:86:77:b1:5e:df:9c:92:91:82:
3a:43:a4:13:1d:29:c4:17:54:2c:75:b8:de:4c:35:
24:1e:00:98:9f:b3:9d:27:ab:41:c2:eb:ea:e9:b6:
6a:d1:c8:d4:4d:86:75:58:a3:2b:1a:82:0f:e4:e4:
62:c0:ff:31:88:5c:43:1a:08:38:2c:f6:5c:1c:3d:
6c:56:f4:ee:0d:10:e4:ce:24:bf:0e:3a:b3:2f:e7:
10:e1:0a:ec:aa:dd:ee:52:dd:2c:90:32:87:a6:51:
b7:50:99:4c:71:65:59:64:dd:97:be:c7:8d:b2:02:
7f:7c:3b:cf:e4:83:f8:a8:14:53:55:d4:e0:dd:f8:
e0:23:48:c9:2a:71:27:45:b4:62:8e:ee:cd:4f:36:
50:ad:7c:0d:8d:45:77:67:56:fe:75:6c:b5:e5:66:
cd:20:47:56:1c:cc:91:d7:49:c4:9c:34:f6:1c:05:
f7:16:bb:25:d3:b1:1c:28:e9:79:64:01:6d:51:0e:
28:19:be:93:6b:7f:cd:4c:0a:ac:27:3c:ae:c4:0b:
39:df:24:b5:f0:ca:88:32:0f:8b:fa:ce:e8:04:80:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.214.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212818
Signature Algorithm: sha256WithRSAEncryption
43:1e:9b:79:e3:00:af:88:2e:51:5c:58:98:5a:6d:b9:8d:ac:
23:28:06:24:5f:d1:44:fb:e9:27:85:13:5c:3a:b8:26:44:39:
46:6e:0d:e8:e6:41:d4:2b:e3:2c:da:aa:0c:24:df:2d:f9:e7:
1d:d3:bd:5f:a1:62:c4:c4:eb:92:b6:19:d3:fb:bb:e5:30:ab:
f0:49:4b:c4:3d:12:62:fc:62:ea:0f:97:b6:28:4f:76:92:39:
a9:35:0f:e4:c3:ad:00:19:d5:23:61:4b:ef:5f:61:aa:fb:1e:
d7:c6:25:d8:dc:cc:b7:86:54:a2:0b:b9:8c:0a:2f:51:71:e7:
3e:9f:d9:45:3f:56:92:88:1b:e6:ea:44:54:91:32:d9:c5:27:
a2:b6:9a:ee:a2:6b:ef:aa:7a:82:9e:43:6a:fa:f4:b6:b8:01:
01:b2:f7:1a:52:4a:55:d5:38:a6:a3:60:7a:44:36:f7:ab:00:
70:fe:54:08:09:ae:d6:da:75:45:95:aa:8d:73:cd:20:4b:cb:
f6:c9:40:09:ac:49:e3:a0:a7:a1:da:89:ca:fd:49:8f:10:ba:
1b:f6:8c:95:d3:80:6e:2f:d2:07:6a:30:48:60:33:5d:df:da:
2a:89:c3:fd:29:cd:59:d7:0b:18:c7:d9:e2:81:f0:01:92:08:
3d:a0:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:10 2024 by rpki-client on console-ams.rpki-client.org