Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.cer (raw, json)
Hash identifier: m1Ot5GqUrOcwj3s7gt8WiR6fJMA4qGK4bS/Oay7q3rw=
Subject key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190A7BCF0C2EDC679B36C67684418564011
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Jul 2024 16:18:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 171.25.216.0/24
IP: 2a13:a600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:bc:f0:c2:ed:c6:79:b3:6c:67:68:44:18:56:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 12 16:18:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:6e:f0:c3:ae:17:33:f6:e0:20:a1:36:ed:
47:06:5a:7f:b5:48:e0:5e:e4:b7:21:68:6f:8a:92:
ba:3c:a9:f2:c2:fe:37:a3:be:bf:50:3e:26:15:3a:
e0:5a:b0:64:fa:8c:52:38:32:ed:2d:ad:20:81:69:
f7:78:32:29:90:fd:3a:94:34:9f:7c:03:1f:29:e1:
d7:11:f7:ca:fa:cb:9b:d6:2c:c0:02:cc:39:84:79:
25:94:5e:1b:41:1b:22:45:dc:01:fa:5e:ab:6d:65:
0a:70:5d:63:f2:2e:9a:94:bf:cb:32:cf:c9:97:0f:
fa:33:dc:ec:bf:69:90:27:45:90:e4:59:21:16:54:
5c:7a:e1:95:8e:fb:6e:09:93:2c:ee:f5:2b:d6:60:
6e:9b:4d:61:2d:57:2f:da:2d:56:3b:1d:8b:9c:0a:
c2:45:da:f8:9f:0a:e2:db:c7:bf:85:56:6f:01:4f:
fa:7f:3e:68:d1:20:cd:57:fe:b8:01:4b:a6:d6:8f:
4a:83:22:61:39:4a:aa:41:1e:b8:98:39:af:fd:a6:
dc:2e:44:cf:a6:b8:66:13:f4:24:e7:8a:9b:c7:07:
ca:ac:b5:55:af:41:58:54:2c:e6:df:d4:7d:74:81:
5a:6f:2a:db:ae:11:b6:9e:da:ef:a6:5a:b1:24:c1:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.216.0/24
IPv6:
2a13:a600::/29
Signature Algorithm: sha256WithRSAEncryption
9c:5f:59:47:bd:7e:da:90:1b:63:ab:19:4a:0e:5a:00:b1:10:
46:03:8c:cd:10:e8:91:b6:cf:b9:4b:42:26:58:8c:23:7e:d8:
15:fa:b8:ba:e8:e9:a1:56:29:36:88:14:9d:53:61:c3:b2:3f:
87:3a:85:05:09:43:94:a9:ce:ab:ff:66:8b:b8:c9:c3:c1:76:
48:ec:83:09:ee:9a:66:f8:8d:42:85:61:0d:63:d4:72:c6:35:
bf:0a:74:6a:79:51:3a:e5:46:04:ab:a8:bf:84:df:aa:aa:a9:
f0:4e:f7:b0:cb:89:ec:f5:f3:8c:a0:d0:4c:26:fa:c0:96:3d:
0e:a3:fa:6d:27:5e:fe:9b:6e:44:67:b5:e9:a1:0e:96:15:3b:
14:96:8a:27:ca:d5:31:b2:79:6e:7f:cc:39:e4:05:8a:e6:a3:
e6:f6:44:dc:3a:d2:5e:f9:d4:48:41:a1:50:01:81:1d:7d:7d:
ac:c4:fc:e8:35:04:0f:53:c2:15:84:39:cd:9a:2d:89:16:9c:
3c:86:c8:0d:f6:c8:6f:bd:74:e5:ca:78:63:83:35:4f:81:e8:
95:67:4c:e8:22:cd:35:fd:eb:16:5a:60:78:97:a3:b3:32:e7:
c6:b8:81:2a:cf:73:62:88:bb:83:4b:19:20:d2:40:31:88:68:
a2:08:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:05 2024 by rpki-client on console-ams.rpki-client.org