Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
File: xsfkNpOlMtPW70EYbXDXpsVfut4.cer (raw, json)
Hash identifier: g0dBVOxddiEjRArGljCOiIjZe/xJDwj8jZ47S3Vh7WA=
Subject key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D18E5C0FAECCF53F368994DBE5F19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211646
IP: 2001:678:f04::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:e5:c0:fa:ec:cf:53:f3:68:99:4d:be:5f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:68:8e:ad:fc:08:e3:14:90:50:86:66:f5:
06:07:9c:91:26:70:2c:e7:27:24:94:4b:a2:34:08:
a5:d9:90:13:90:03:d3:09:86:0b:91:8f:c2:79:ce:
06:ad:18:14:c4:e1:22:7a:00:85:3d:5d:bf:43:b7:
d9:1f:40:b4:94:e2:b0:5e:92:81:4f:ff:c0:14:60:
23:d1:10:26:6c:f0:99:43:fe:7e:6b:3d:7c:8b:f1:
cc:06:2d:4a:13:64:5e:0f:8c:1e:be:81:a0:29:8d:
86:7b:6f:12:b5:da:80:23:31:89:36:c5:35:c6:fa:
9f:e2:c8:c1:39:54:0d:6e:46:85:74:fb:f7:44:71:
07:73:2e:86:dd:10:8a:25:8f:ab:7f:c8:ee:01:5e:
f7:cf:87:48:71:ba:2f:b6:60:60:ce:ee:5c:a7:42:
0f:3b:73:65:f5:54:a7:89:1e:e9:e2:83:b3:cc:e4:
6d:44:f1:6d:e6:90:a4:c1:e0:a7:e9:07:c9:34:87:
71:a8:b2:10:f8:bd:e3:37:54:99:49:82:f0:12:f3:
7c:16:91:a7:e2:df:6f:56:aa:8f:79:a8:99:39:a5:
51:49:54:7c:c0:98:db:b3:00:e1:3d:34:3f:a0:a5:
26:38:3d:6f:24:5d:a0:20:11:91:ad:3f:bc:3f:1c:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f04::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211646
Signature Algorithm: sha256WithRSAEncryption
09:00:aa:ad:f1:58:eb:44:14:b5:f2:92:64:62:80:45:be:8d:
15:8c:ba:bd:65:aa:eb:70:b6:57:d5:28:3e:c5:5d:50:b9:63:
19:90:bb:46:1b:62:76:31:af:16:c8:14:f2:1f:d0:f6:fa:65:
ac:2f:da:20:d8:cc:f3:9b:ca:e5:5f:78:15:f0:12:b5:9a:42:
95:cd:c9:9a:21:42:f9:7e:d0:f2:d5:67:5e:d9:c4:7d:c6:4f:
b7:db:4d:fd:d6:33:a8:9e:f1:54:5e:b8:1f:42:00:bb:fc:c8:
96:ae:b8:02:dd:ba:71:be:37:16:85:90:b8:57:64:72:e9:98:
fb:ee:e8:64:67:fb:01:28:35:94:aa:5f:17:53:36:7f:0d:19:
2d:cc:91:3a:7d:17:e2:95:35:bd:58:4a:a0:13:bb:0d:60:c8:
01:29:30:e3:17:e3:aa:e9:55:9b:ad:98:0e:12:d7:4a:65:f3:
01:a3:c4:38:4d:a6:91:0c:1b:13:f1:58:4c:72:30:86:81:a3:
cc:74:a7:e7:33:f6:c6:70:44:02:1a:c1:29:fc:25:e1:ec:a3:
aa:73:3e:73:44:4d:63:9a:be:5e:95:0b:65:f1:05:b4:80:3f:
99:9e:7a:6d:db:a5:b1:6d:9f:4d:41:ad:31:6e:8f:3b:b5:c5:
69:ae:f4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:19 2024 by rpki-client on console-fra.rpki-client.org