Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.cer (raw, json)
Hash identifier: GdHNkUQj/lyVgHijECM7jDtd2HW1ltXrg/i9bhjVe/s=
Subject key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5004EF6E1CD12FDB9DC6113B97F6B4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212563
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4e:f6:e1:cd:12:fd:b9:dc:61:13:b9:7f:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:c2:0a:b3:0b:29:6b:21:f8:79:3c:a6:44:
8a:fb:c8:6a:b8:90:5e:9e:34:2e:6b:11:28:29:27:
c1:8b:ca:09:f6:ca:ba:c7:5a:ae:e6:fc:e8:23:aa:
92:54:c8:35:da:de:df:88:5b:b1:37:f4:5f:db:27:
37:09:2e:f4:a4:a5:92:8b:bf:6c:c8:4b:f3:74:0f:
f9:cf:37:c0:2f:bd:07:90:29:62:66:82:ec:15:0d:
fa:45:50:9a:d8:38:1f:b2:30:e6:5a:c6:e8:df:b9:
3b:8b:71:e1:e4:1f:e3:29:08:58:a1:b5:9f:40:f0:
68:84:b4:13:79:40:34:bd:e1:82:a8:2e:9c:19:fd:
f0:6b:2d:f0:9f:34:58:53:1a:1f:26:be:4c:f3:51:
c2:99:da:87:e1:ea:36:22:b1:57:00:06:a2:5b:a0:
89:93:b3:9e:18:bf:c7:47:de:bf:59:98:8e:90:d6:
79:c6:8f:11:be:9f:38:ca:d3:6b:ed:9d:1e:0e:47:
08:cd:16:31:78:9a:d6:f2:df:e8:b5:46:c4:61:fa:
c4:55:2c:0f:e3:b9:d4:b8:80:52:90:89:35:5c:72:
da:db:3a:e1:2c:e6:24:26:78:d0:d4:60:1a:27:13:
ee:46:2e:4c:d3:85:1f:0c:1f:27:d2:67:09:24:42:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212563
Signature Algorithm: sha256WithRSAEncryption
1d:7a:53:24:1b:54:f0:9f:fc:8f:61:09:a4:88:b1:35:2e:16:
e8:1d:15:d5:bd:5a:ef:2b:94:4d:07:5f:7e:a1:05:57:5b:af:
28:a6:1e:85:d2:69:3d:62:52:43:f8:29:63:c3:86:d7:05:6d:
26:8a:52:a4:b7:fd:81:78:af:53:f2:b3:fb:82:9e:62:5d:4a:
52:ea:01:34:9c:ea:1d:0b:81:d6:72:50:c7:98:36:54:13:e4:
92:d3:b9:f6:ff:9a:84:63:53:a6:26:55:f7:d0:55:4e:8c:bd:
0e:e8:71:2c:59:b4:90:06:f9:1d:2e:78:7f:3d:ea:a6:11:e8:
e6:4b:ab:ae:c1:b2:8f:57:b5:cc:d3:db:a1:f5:95:81:0a:82:
53:6f:63:fe:4c:4f:7a:67:cd:e8:5c:dd:e7:08:11:f9:cc:13:
7a:6f:94:b1:84:29:a7:4a:40:29:2c:3a:98:de:0d:08:73:e8:
8a:93:c5:72:cf:1e:ea:17:fd:05:ff:6e:41:dd:85:cf:94:19:
16:15:f0:c7:d3:65:19:f9:99:11:b0:a0:d4:d6:ea:e2:2a:7a:
aa:b8:0f:c4:9a:97:4e:fc:cf:a0:57:32:8a:c7:6c:94:34:d7:
59:38:dd:85:68:9f:cf:25:cf:df:88:a6:fd:c5:b6:75:93:c9:
91:a5:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:39:38 2024 by rpki-client on console-ams.rpki-client.org