Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
File: 3JXMdjEwknpvvB6y_XRD-s-hGh8.cer (raw, json)
Hash identifier: AUdNctSNVZlDjjD4CyobvZ98Ms56pJ920XmwIeiQ7lI=
Subject key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F57EBC57BE4544A5957D818EAAAA80DA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 May 2024 11:17:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216178
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:eb:c5:7b:e4:54:4a:59:57:d8:18:ea:aa:a8:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 11:17:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8b:69:89:95:86:26:0d:5c:4e:9d:e0:7f:5b:
ea:dc:6f:a5:35:93:24:ed:62:b4:12:4e:c4:1f:51:
d0:bb:58:4a:cb:ce:9d:bc:bf:64:47:f7:70:1e:a6:
30:d9:14:b0:ec:6a:2c:08:88:63:30:bd:69:1e:3e:
9f:1d:f7:70:e1:31:14:3a:88:f9:0d:98:fe:25:d2:
4d:0d:5c:57:b7:2a:b2:43:9d:51:e0:68:91:f6:4e:
76:e0:fa:5c:ca:1e:44:1d:77:a2:ef:58:a6:51:a2:
0f:a7:94:f4:31:2f:c2:e6:22:a0:fc:c9:2d:ee:42:
2c:58:65:2c:d3:f7:0c:60:53:45:41:81:cf:18:88:
4b:cc:a8:b7:53:e9:f7:49:de:ae:2f:b1:91:0b:9d:
99:d7:83:d0:c9:12:52:12:86:37:2e:fb:d2:71:fc:
08:35:60:e9:c6:a0:4d:6f:26:b4:5d:bc:a8:cc:04:
23:4d:60:63:8d:68:e5:7b:11:96:7a:17:0a:a2:f2:
96:62:d6:d7:a1:4a:49:01:75:d2:36:70:a8:7d:18:
b1:88:b0:74:52:ee:4d:e8:25:be:09:7d:7b:8d:08:
2e:96:2e:96:27:20:8a:d2:64:ec:2b:15:97:5b:15:
88:41:fb:96:ce:4a:44:92:5f:dd:32:0a:82:71:db:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216178
Signature Algorithm: sha256WithRSAEncryption
7e:9d:11:0c:23:e6:72:4a:ec:4d:a4:e0:d1:cf:a1:e2:c0:3a:
3e:62:55:bc:8d:b4:05:4c:88:8f:1a:1a:31:a1:0c:9f:ed:c6:
c8:c6:b5:a3:ca:da:35:82:a8:a5:a2:a5:4a:80:a9:c9:0f:6f:
4e:4a:db:5e:08:e0:38:2f:51:b9:2c:c8:7c:df:33:39:65:c7:
7b:aa:24:7f:4c:5f:fa:66:02:44:e1:a8:38:3d:af:63:d2:a4:
06:25:f0:c6:61:bf:39:ae:fa:85:85:6a:e4:97:29:bc:c3:ca:
c1:96:b7:10:d0:84:6d:a2:c7:de:ae:44:37:6d:71:07:b5:d5:
a9:4d:52:2e:70:ce:f0:30:04:09:50:6e:9c:6d:0f:d3:cb:84:
eb:fa:9d:42:cc:3c:30:96:47:15:ac:bb:bf:09:50:92:bb:ef:
f6:9c:aa:40:38:c3:ef:bd:3e:76:ea:21:9f:09:9b:60:15:63:
03:4b:32:39:9f:e8:42:7b:24:f1:6c:71:25:84:7f:56:85:d3:
a3:69:a7:a2:c1:cc:8c:68:68:f9:e5:ec:38:76:1e:04:bc:b3:
bc:7f:be:74:f9:60:da:17:82:06:c5:9f:6d:69:17:6b:ca:3c:
f8:5e:4f:8a:c3:cc:0e:3e:32:33:f2:bc:c4:d5:00:27:8a:1f:
f4:a4:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:51:23 2024 by rpki-client on console-fra.rpki-client.org