Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.cer (raw, json)
Hash identifier: yDoODsD0i0pm9dbu3d8m51LlK0CvxVLagRXBTFI10/s=
Subject key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011F591DA322953EC1F07F11E3BD53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42101
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1f:59:1d:a3:22:95:3e:c1:f0:7f:11:e3:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:39:3b:f9:85:57:58:91:29:c6:f0:82:15:
e6:59:1f:de:37:e6:21:39:3a:af:30:e0:c5:ee:da:
d8:0b:7f:c7:77:66:12:96:f8:5b:75:7c:02:5b:ba:
94:c4:ba:bd:58:ff:58:d7:85:15:71:13:2b:17:08:
58:96:95:db:28:e1:ba:10:db:00:9d:de:c9:a6:e9:
6a:53:46:ef:00:fd:ad:71:d8:3d:19:21:f4:8a:09:
08:88:f5:e9:e5:23:08:37:c7:e2:ec:45:ab:10:bb:
87:0b:72:c9:41:ec:73:48:4b:b1:91:42:67:ff:c3:
45:fe:40:6b:fe:7c:c9:59:e1:a5:cc:16:40:05:a3:
04:59:58:54:3d:e5:6d:e7:94:ed:6c:92:05:b6:5b:
53:d9:9b:6a:9e:d8:a7:6a:c6:fb:1e:be:28:f2:87:
6d:86:24:6a:35:63:32:46:b7:04:f2:19:ac:1e:12:
db:85:16:07:f1:3a:f2:33:0f:d7:49:2a:0b:9e:69:
2f:b1:76:d0:71:d1:aa:7a:1b:8d:fb:b1:4e:d8:7a:
45:53:63:6c:79:32:ed:f9:6c:36:d6:4d:30:da:fd:
ba:88:18:ab:a1:08:38:bd:17:1d:4d:91:33:6d:1b:
4c:72:6a:1d:8e:d3:f2:db:82:49:99:79:47:25:9e:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42101
Signature Algorithm: sha256WithRSAEncryption
84:a1:10:45:21:8f:ac:c6:2e:a8:f7:7f:52:bb:fd:cb:00:a2:
dc:93:57:a0:5f:4a:cd:25:1f:32:5b:52:48:ef:08:1c:bb:62:
7d:cf:ec:e6:02:8a:74:59:50:60:6b:71:60:02:23:6f:90:cd:
7b:d7:c5:35:fc:b3:c7:e6:f4:c8:d4:e8:9c:18:50:3f:36:2a:
3c:01:ce:66:9d:93:88:73:90:48:e1:86:56:d4:af:e6:55:93:
ce:c3:08:0c:f5:db:95:e6:02:aa:b1:b4:85:21:8d:f0:0d:31:
69:fb:1c:f4:33:4e:15:13:9d:7b:b2:44:32:a5:dd:c7:38:47:
10:e3:98:b9:68:f5:e6:de:b6:43:d4:da:46:21:fd:99:5f:93:
d2:e0:83:f5:7a:34:02:d1:93:8c:56:c0:c2:7f:30:6f:b4:9c:
4d:28:e8:f3:2f:04:b5:1b:52:10:78:db:56:5a:78:72:31:72:
b5:28:40:1f:59:5b:aa:13:52:5b:3b:01:78:10:05:a8:83:aa:
cc:4c:cb:f1:2b:79:a3:6a:10:75:44:44:4b:9a:bc:4a:4f:88:
25:16:f9:98:f3:70:95:3a:28:95:a0:d1:26:39:fd:56:ab:39:
68:62:82:ce:10:6e:a4:c3:e9:1b:c1:70:7f:bb:cf:d0:c8:d9:
6e:ef:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:20:28 2024 by rpki-client on console-ams.rpki-client.org