Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
File: siZANRqyGg3HqqFfq1sRCXdxSjw.cer (raw, json)
Hash identifier: 5HihYPTAuWKq/dYvq4qcMUgb98nIFh9kemFht4rSx70=
Subject key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E7B4EE85766AB5FC40EC603255EB0FB07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Mar 2024 15:09:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215231
IP: 2a14:2ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:4e:e8:57:66:ab:5f:c4:0e:c6:03:25:5e:b0:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 15:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:27:3e:d2:9d:c9:a9:16:41:6e:2c:bb:6a:
ae:1a:49:cf:4d:3e:bb:7f:1a:82:da:19:9c:c5:ec:
24:28:a1:5b:68:ee:ce:ff:78:12:53:07:ce:53:12:
3a:fd:9a:6c:2d:36:84:a3:e0:fb:bc:6f:ce:e6:89:
78:2e:c5:a9:26:ba:36:11:d8:67:03:4a:2b:77:f1:
84:a5:74:eb:46:2e:63:04:77:69:fe:db:a5:e8:50:
73:5b:4a:7f:07:9b:79:03:4f:8e:20:97:93:9c:62:
c2:09:5b:44:59:9b:65:c5:30:76:52:1a:9f:17:e1:
e1:f5:98:10:84:52:7b:de:c9:1d:1e:e2:e5:e3:a4:
21:ad:5a:1a:2f:35:3e:85:c7:ef:36:7d:75:b6:00:
37:0d:ac:c6:2e:48:b2:eb:77:b6:a7:ff:b6:5b:b6:
d3:83:26:b0:08:ff:52:a4:e4:b8:c1:0c:38:78:71:
10:77:a7:6a:86:84:1f:ae:0a:f6:e0:42:41:f5:dd:
6f:f4:8e:0c:c4:d3:43:94:e8:8e:28:f0:5a:bf:05:
a2:4c:42:c2:b2:94:f0:9b:d9:b0:1c:5e:3c:f4:1c:
8c:24:7b:a3:7c:c4:fd:1e:f7:66:1a:f9:5e:83:82:
04:36:cd:c1:1b:3c:11:19:10:e8:ee:4b:85:c5:08:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215231
Signature Algorithm: sha256WithRSAEncryption
47:7d:68:e2:a9:ce:d4:d8:a7:2c:d6:4d:f3:d5:37:db:15:44:
45:2d:44:d8:7a:ef:d4:ce:31:a0:0b:82:3d:59:3e:69:67:75:
c7:08:a5:61:9b:fc:63:ab:81:59:c0:91:34:7b:31:3a:77:36:
58:ea:b7:9c:6b:e4:ff:25:f5:b3:32:e0:54:d7:14:e7:43:5f:
5f:9e:7b:35:af:4d:0a:d4:df:e3:cb:af:64:6d:62:68:19:95:
d6:9b:df:47:59:68:1a:b6:6e:d7:30:fb:3c:52:3e:c1:bf:36:
85:77:68:3c:01:9d:0f:e8:fe:3d:d0:7f:e4:e7:32:7f:76:92:
63:bd:4a:ff:32:9f:b5:3c:e8:f0:c3:59:69:e7:91:17:fa:6b:
5f:0f:33:b3:b5:e2:66:dd:6a:6b:8f:a8:0b:0a:94:3b:25:f3:
32:7d:32:64:1c:c0:cd:d5:d0:00:a8:85:27:41:28:97:e0:3d:
6b:d4:f6:b3:48:d2:69:46:e1:9e:5d:f4:f1:00:82:10:e6:3b:
6b:8b:83:1d:8b:ae:b4:5f:5e:aa:65:c8:0d:65:f3:47:80:57:
09:2c:e7:5d:29:88:18:ca:6b:06:03:59:ba:11:69:54:3a:1c:
a2:ac:f6:34:92:d0:1d:78:04:5c:ac:5b:c7:7b:05:2d:13:22:
db:83:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:44:31 2024 by rpki-client on console-ams.rpki-client.org