Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
File: u_e8bHyTo8-x4lu778TyB64lvaU.cer (raw, json)
Hash identifier: G5ZY/Z0Ncvrz+WQHac8SIYDpj6HbHZR0bOUbjMaeYyM=
Subject key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D505D0DC17BC101C1F30D68057EE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199474
IP: 2a13:b180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:50:5d:0d:c1:7b:c1:01:c1:f3:0d:68:05:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:f6:0b:02:ec:69:18:61:3a:29:ef:49:b7:
40:83:e4:95:90:f1:2e:78:4c:5d:38:54:3a:86:ad:
03:02:5c:84:80:89:97:6f:6b:c5:a3:f7:72:77:8c:
39:f3:1b:ee:df:19:17:a1:06:f5:e5:1f:b1:37:92:
c7:c5:bf:84:2a:32:57:29:8d:2f:fb:4b:95:88:2f:
6a:80:41:07:a7:b0:58:38:ee:fe:37:8f:1b:82:20:
1e:88:fc:dc:d0:82:b3:65:1f:10:da:e1:01:c5:65:
9f:4b:31:a3:50:91:a4:f6:89:c1:2f:40:eb:77:e4:
df:20:31:a2:5b:f5:2b:68:62:86:1a:21:41:48:77:
25:c5:a4:72:03:f0:1f:6d:de:f2:f2:43:fa:4b:ce:
ab:30:3b:68:70:ce:d8:e7:33:fa:d3:6d:30:47:8e:
27:52:2f:c8:12:d2:80:9b:e3:84:8e:94:3a:00:7a:
e7:6d:df:e6:f2:a2:22:ad:84:10:75:31:b2:ec:b8:
5e:6f:a0:3f:26:0f:0a:3b:df:95:ad:75:0f:78:8b:
06:1e:e5:e7:5b:2c:ff:45:18:93:6c:de:81:da:fa:
b0:43:68:c3:df:cf:ef:b5:f9:14:41:a0:5a:78:46:
da:56:b1:98:6e:e7:1e:9e:e8:ff:f5:37:d3:ab:54:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199474
Signature Algorithm: sha256WithRSAEncryption
39:cb:80:36:8a:9c:0a:62:36:82:36:1e:ff:93:ef:7f:e8:70:
90:c7:94:d2:f6:19:19:96:70:cc:94:1f:2a:35:86:f9:3a:6a:
97:27:fc:c5:ad:3d:e2:33:2e:64:ee:e1:f6:ba:96:89:b1:62:
3a:bb:57:88:2e:81:2f:49:23:12:6f:d4:8a:30:06:76:db:0b:
8e:f8:17:47:68:d4:ea:62:85:76:30:22:2e:39:b2:7d:59:5a:
c3:ae:d5:4b:55:ff:ce:69:0c:8e:78:ba:bb:16:04:72:9d:91:
4a:d3:f0:b6:0e:06:dd:5e:da:b0:bb:db:da:17:03:84:74:8a:
9d:93:f4:fa:13:23:ae:fe:a4:d5:3f:6b:c9:91:f6:ee:5e:ca:
1d:3e:41:17:2a:9f:1c:5c:6b:4e:b7:1a:a4:9b:8e:63:8b:d4:
dc:cc:40:f6:30:53:39:db:ea:af:28:a4:54:e8:70:d8:43:74:
e7:29:19:16:64:60:93:d6:51:43:cc:8c:9f:52:07:84:7a:87:
93:4c:26:00:eb:6b:3f:40:4c:f5:5e:bc:81:a2:5b:b7:6a:76:
83:8b:0c:2f:d4:c0:b0:51:03:21:62:57:7b:84:2d:3c:5b:1d:
ab:61:99:e9:18:40:7c:b7:09:34:04:07:3f:7f:16:f9:c8:aa:
ae:14:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:06:16 2024 by rpki-client on console-ams.rpki-client.org