Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
File: s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer (raw, json)
Hash identifier: avesLwRTV/Wi/ARV6t37U7gdSFJ7k9XHv/8k0kcPvIA=
Subject key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190A43E97F8EB1519E8F45977C1858D354E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 12 Jul 2024 00:01:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215956
IP: 2001:67c:688::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a4:3e:97:f8:eb:15:19:e8:f4:59:77:c1:85:8d:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 12 00:01:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:a3:9b:cd:16:b8:9a:0b:2a:78:22:59:83:
ec:0f:af:b7:56:ca:21:88:28:f8:05:5a:c7:f5:c5:
6d:fd:5d:c0:8f:a3:94:fe:24:2f:6f:e8:73:53:83:
43:ff:27:6b:84:9c:44:63:6f:6b:92:6f:2d:6c:b3:
82:ee:16:5e:67:c7:7f:7f:23:6b:de:32:51:5c:eb:
fb:14:e1:c7:eb:d9:f8:83:82:10:da:02:86:1a:55:
f9:b8:97:6c:d0:a3:66:02:46:4d:1b:14:9e:92:8a:
9b:c3:9f:2a:ec:b6:16:67:07:76:2d:51:01:f1:eb:
72:9a:d4:2c:ef:dd:1a:69:84:64:0a:3d:cc:2b:08:
f1:e4:75:4d:d8:72:b3:44:be:0c:fe:3c:ce:ce:62:
27:63:09:c5:ab:08:04:93:78:69:20:7f:10:ef:75:
8c:8c:e5:e5:5a:80:c7:3c:e1:7a:f3:24:05:c6:06:
98:f6:a0:6b:1e:ae:24:38:6a:43:a5:38:d1:f3:75:
46:c7:44:a4:07:59:69:53:59:90:34:f7:32:83:0f:
95:5e:79:77:08:06:e8:54:8b:86:69:dd:21:45:2c:
bb:9b:9d:36:d1:19:5a:eb:b1:73:49:b4:7a:64:04:
12:ba:cf:c7:19:5d:f4:40:89:18:f5:d8:59:28:dc:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:688::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215956
Signature Algorithm: sha256WithRSAEncryption
8b:a2:31:1e:98:f0:fe:67:13:ce:8c:95:4b:07:ec:ca:08:ff:
f2:75:08:04:98:8f:5d:f2:4e:8b:b7:a2:e6:44:38:7c:64:af:
9a:8f:0c:68:d8:3e:34:ce:99:9a:37:0d:9a:f5:94:a8:52:b4:
a9:34:60:f2:9c:3f:fa:9c:72:2f:b0:08:32:96:c7:ea:9b:82:
76:41:78:42:88:3a:0c:91:fc:59:09:2c:16:1f:f1:33:b0:9f:
56:1e:2c:5f:83:ff:63:9e:2a:52:53:1a:7b:e1:10:ed:b5:d2:
f4:b0:59:a3:e0:42:b5:66:28:7f:b0:94:46:d6:4f:52:ff:db:
43:14:2c:e2:f3:30:2d:e3:93:94:32:a7:df:12:60:5c:0f:4a:
bc:77:ec:76:24:28:0e:fd:c0:9e:a1:4c:f4:c2:f2:26:5a:28:
a1:2d:fa:be:67:a4:bf:27:86:3c:f1:10:b9:5e:98:08:34:04:
62:bc:3c:e8:31:24:79:02:5c:10:34:fd:1b:9d:65:1c:da:88:
14:e0:8f:ce:7f:2b:5d:66:f0:81:0f:2a:cd:dd:78:36:86:0a:
dd:10:60:82:78:d7:0b:21:b4:49:c3:8c:ca:ba:fa:d2:47:75:
a7:ac:83:eb:e2:a6:f5:1c:ac:51:6e:0c:35:9f:de:67:13:46:
be:97:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:06 2024 by rpki-client on console-fra.rpki-client.org