Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer (raw, json)
Hash identifier: ij7XVE9epehR6IS7FDKeaqClcftPA0ZW2HDxmjyjF8E=
Subject key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190BB37820FF5EE3FCDC8A744B86E5BB47B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jul 2024 11:04:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a14:1d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:37:82:0f:f5:ee:3f:cd:c8:a7:44:b8:6e:5b:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 11:04:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:6f:0f:73:51:23:48:f5:a2:7e:3c:c4:64:
b1:c2:10:c3:05:4d:2a:61:28:9a:11:c6:66:5f:d7:
81:31:a6:6a:a2:52:03:a2:42:76:04:d1:54:51:c6:
4f:61:a2:e3:e9:48:d3:84:d8:ff:c2:50:07:1c:cd:
da:d6:a3:3f:a8:c0:7a:e3:6f:48:2f:2f:20:e8:6a:
b0:69:91:e7:78:ac:f0:fd:ca:8a:4d:f3:44:2e:4b:
13:d9:36:34:4e:41:ea:18:65:d3:53:a3:c2:8c:2d:
02:d1:64:d1:67:6f:83:9b:3f:a0:9a:ed:23:30:0e:
53:98:97:82:fc:b9:61:97:cb:1c:98:51:a3:cc:9b:
28:af:8b:f8:a2:30:ca:e5:60:87:60:54:25:8a:93:
24:12:fd:6f:37:7a:61:e7:dd:2a:78:9a:27:cf:2f:
80:6e:f5:f5:d5:b5:26:77:a9:a1:80:00:29:b9:14:
25:91:04:02:5e:a4:6c:3e:a2:cc:41:65:86:01:12:
95:26:5e:fc:62:c8:3f:27:8f:c2:45:0b:1f:53:a8:
c1:66:fa:04:e2:ff:9e:5b:b6:62:e2:3e:ca:59:96:
23:18:f4:d8:5e:b7:82:6f:8d:3a:7e:42:96:a1:a5:
8f:e5:56:3f:95:37:59:a1:6d:b1:3b:bd:16:62:82:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
63:e1:4d:32:ea:d3:b5:89:fc:a5:5a:4d:24:b2:cb:9a:e1:db:
85:02:f4:13:d3:4c:4c:6e:7c:00:58:38:76:2e:c0:1a:26:7e:
7d:9e:ee:5e:0f:6e:5f:d9:d3:13:73:20:27:d8:3d:51:eb:ff:
cc:15:78:2c:04:25:2c:c4:5e:bb:7a:42:71:fc:65:f9:31:35:
ef:d4:d7:ae:37:ad:93:26:20:79:2f:a0:23:56:42:d8:8b:2d:
dd:25:60:5f:5f:82:38:26:5e:22:47:2b:a9:5a:96:98:03:0d:
39:17:11:4d:8d:ed:03:36:cb:d5:81:83:e3:c9:d9:49:09:a3:
61:c9:af:9b:bc:33:50:d6:02:32:1f:02:ca:6b:07:c9:a6:4b:
1e:d3:97:21:d2:1b:57:f6:9c:72:f1:b4:35:28:0a:5c:e6:fb:
b5:15:76:fa:96:6d:88:25:48:7f:b5:69:38:30:d5:34:72:fd:
06:e1:96:14:bf:2e:08:97:71:99:fa:64:be:54:0b:83:a7:ea:
bc:9f:71:f8:d5:65:16:ad:8b:94:32:21:b5:37:0e:87:d9:c0:
5c:e5:53:33:e9:1c:46:0a:7f:99:29:c3:4a:fc:ca:ef:88:07:
d1:86:07:ee:6e:57:78:f8:c3:ff:b8:24:35:66:7c:24:00:c7:
60:85:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:22:55 2024 by rpki-client on console-ams.rpki-client.org