Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xDI1a8oY70s4h9aarCd5fQvDy9Q.cer
File: xDI1a8oY70s4h9aarCd5fQvDy9Q.cer (raw, json)
Hash identifier: q6vC/As3zOdZyKYGSV3owAIvXZFiNtzoRDX+3sOcJzY=
Subject key identifier: C4:32:35:6B:CA:18:EF:4B:38:87:D6:9A:AC:27:79:7D:0B:C3:CB:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AF606C34CBE22BD07382FF4FB32AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211693
IP: 2001:67c:1308::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:f6:06:c3:4c:be:22:bd:07:38:2f:f4:fb:32:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c432356bca18ef4b3887d69aac27797d0bc3cbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:63:32:54:cd:eb:f0:73:86:6b:43:c8:bd:
b5:76:74:29:01:8d:2a:3b:a1:a8:d6:4a:f2:1f:ae:
9f:1c:8c:4f:b4:7e:4e:6c:00:75:2d:f5:1e:bd:e6:
1e:99:c8:54:ee:5e:05:15:5d:8a:56:27:0e:5a:4f:
a5:a8:28:42:89:a9:cf:c0:ca:b9:5e:f3:3d:d3:70:
25:89:5a:c7:fc:c0:96:59:91:f6:6b:4a:c0:5f:d0:
db:11:51:a0:3d:c1:a3:c4:a0:2d:f5:19:ee:33:28:
3b:4f:fb:5d:5d:9d:f3:49:13:69:33:1d:c9:65:f4:
8e:1c:7c:c2:38:7e:95:81:06:c5:d2:9f:55:fa:c6:
cc:b2:de:cd:a4:3f:a5:40:d8:c5:3f:25:43:6e:7f:
ba:b1:a0:ea:f9:6d:2a:80:67:51:51:57:65:d8:3e:
c6:76:01:25:19:42:2e:51:32:44:b1:13:ab:66:4e:
c3:9b:69:87:4a:b4:3f:36:0f:14:b4:60:cc:6d:b3:
20:7b:b4:37:54:e8:46:41:a1:0c:19:60:b6:a0:db:
f4:19:03:5e:06:a5:55:99:33:3e:6b:d4:71:64:ae:
17:b0:23:fe:b6:68:4d:59:d8:14:ea:91:49:23:f8:
8d:f2:3c:3d:1b:77:6b:60:5d:05:07:d5:3b:1b:9b:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:35:6B:CA:18:EF:4B:38:87:D6:9A:AC:27:79:7D:0B:C3:CB:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1308::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211693
Signature Algorithm: sha256WithRSAEncryption
00:c1:3e:9b:84:ff:0c:77:ba:65:94:fe:35:10:5a:e9:1c:6f:
eb:48:8f:74:c8:7b:ab:ba:1e:71:a2:24:d1:69:1c:a0:b4:bb:
45:48:ee:39:d3:e4:14:e8:b0:11:04:14:58:8f:46:62:68:ca:
a4:ac:b1:86:67:ec:d6:93:da:2a:1f:c3:ce:5d:de:53:c8:86:
80:0a:7b:b3:aa:7c:f7:d3:be:2b:c4:60:98:c4:6d:e8:ea:7c:
8a:87:de:c2:3b:d4:49:36:4f:61:4f:96:b1:3a:b6:87:6c:09:
de:69:64:0d:26:2b:c5:05:b3:65:59:63:d7:61:69:33:2b:98:
01:fd:e0:48:3f:7e:20:e4:b3:aa:27:db:87:99:6d:8c:14:41:
73:fe:a5:f0:64:be:48:f9:5b:af:63:86:ee:ba:1e:2c:ce:00:
f6:a6:52:35:48:fe:5b:89:fc:5e:2d:8f:69:71:63:bc:14:2f:
4a:9e:18:6d:ee:e1:0c:46:94:79:d8:38:fb:a9:38:ec:a9:f9:
51:8f:45:5c:17:92:64:45:28:c4:b5:b4:28:75:bf:4e:ea:b2:
e5:d9:fe:8b:86:15:de:a5:6c:2d:44:b0:8f:48:93:41:ea:99:
7a:d7:d2:dd:ae:b9:19:7b:f4:2a:ab:e0:82:64:26:2e:04:28:
92:ca:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:19:23 2024 by rpki-client on console-ams.rpki-client.org