Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
File: 01CzV9ze5o--vcVVPbMknG6Clsc.cer (raw, json)
Hash identifier: iu8iypb1TLOTVG8Caerj4e7Fq0zOP00/4CM1ZA9qmyQ=
Subject key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E9572EEC16666E6EFABBE28BE733F7AF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 31 Mar 2024 16:58:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50141
IP: 213.5.80.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:72:ee:c1:66:66:e6:ef:ab:be:28:be:73:3f:7a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 16:58:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:29:0b:43:79:6d:52:fd:cc:86:70:cd:94:
21:a1:be:55:e3:f4:61:55:ae:a2:5b:f8:fc:09:68:
26:be:c3:67:f2:7a:72:2b:26:f8:e5:00:b3:e5:9a:
a7:a1:2d:12:87:b4:c1:a2:dc:af:91:04:b4:16:98:
13:d8:e0:cb:d8:ef:b5:69:bf:12:9a:cd:91:6c:25:
c1:6f:3c:05:82:36:6e:f8:c0:d2:a5:f5:ce:4d:90:
37:51:2f:a1:c4:18:48:b2:1c:f5:d7:57:f2:9d:c3:
ed:ee:b7:e1:14:dc:d2:7f:c4:e8:3f:45:62:00:dd:
d2:e5:bf:c6:ca:ab:2e:b6:aa:3c:fc:a9:ec:d5:dd:
63:41:4a:f1:78:b9:61:e1:1e:e1:69:b7:7f:ae:9c:
ef:2b:24:1d:30:b4:8d:97:25:c0:b4:af:e3:9e:47:
dc:47:ad:27:42:1f:c0:c9:12:6e:31:75:96:c0:a7:
88:73:83:63:cd:8e:fb:62:50:aa:23:80:68:b6:78:
ca:12:7a:58:f9:d7:ce:f5:4f:1b:0d:d0:e3:82:3b:
ab:c7:68:c4:c2:14:0b:d8:a5:28:c1:31:17:7e:04:
26:3a:fd:8f:ff:7c:60:42:e0:a3:76:9b:55:34:24:
07:dc:b6:f5:2c:d7:9b:2f:e5:81:6b:85:fd:09:9d:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.80.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50141
Signature Algorithm: sha256WithRSAEncryption
a1:5b:82:bc:ce:49:cf:b2:2b:14:93:ee:95:4a:8c:ca:58:8e:
d8:7b:04:47:48:37:9f:ed:87:00:89:1d:d3:fd:3a:d4:94:07:
9e:f4:8a:9b:a5:fc:f0:7a:cc:1b:eb:8c:52:33:9c:85:2d:c2:
3c:8e:0d:29:4e:ca:8a:8a:b2:b8:9b:64:5c:e1:ea:c2:71:e8:
b3:66:7e:6d:d8:7a:84:74:9b:0e:64:6e:6f:b9:13:2f:66:6b:
a2:fa:cc:6b:8e:9d:ab:0c:78:06:d4:e1:a4:5d:2d:1b:7b:3e:
9d:bf:f9:8a:de:0b:d4:be:f8:f3:41:7b:c8:95:6e:8f:26:2d:
12:72:d8:d4:34:9a:4b:52:ba:b6:bc:ce:30:7b:f2:a3:66:2d:
ac:61:f0:36:a4:f4:5f:6d:1d:0f:50:bc:d3:54:ea:06:f1:6d:
8d:ca:75:d3:c7:7b:71:d4:72:87:98:68:7f:fe:c9:b8:6a:c7:
ef:ce:7a:90:6b:6a:9f:50:5a:3d:81:bd:13:5b:c0:b5:46:20:
4d:8d:36:d3:dc:7a:86:f2:21:8d:e9:bf:9d:a3:1b:9a:3f:0d:
f4:74:a4:84:c3:e6:27:41:30:1f:72:a7:37:ed:5d:04:af:6f:
fd:29:b9:8d:a2:c4:06:6a:f7:33:2b:d9:89:20:12:1a:fb:ca:
c4:8f:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:50:13 2024 by rpki-client on console-ams.rpki-client.org