Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.cer (raw, json)
Hash identifier: 0fKqdNilX9wHZk51p5ZEymEjcA9iVBeLeFj24z7NMMo=
Subject key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BA6CFE668579ADE5DF1A3C8A1718B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:31:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203770
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:6c:fe:66:85:79:ad:e5:df:1a:3c:8a:17:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:21:0c:40:9e:04:be:e9:08:f3:22:61:7a:
bf:6a:c3:19:e8:57:3f:f2:b2:95:d9:d3:4a:44:85:
f4:74:29:0f:4c:05:ce:e9:3d:d4:cd:29:fd:35:c6:
ae:e1:72:0d:71:05:9f:d1:08:79:52:d2:0a:b8:af:
11:ee:7e:d5:81:52:d3:79:69:5d:4b:94:3f:a7:48:
92:ba:da:48:e9:ab:7b:70:a6:20:98:34:08:c5:5b:
68:dc:6b:c5:ee:65:f6:85:8c:4f:06:8b:eb:29:ac:
70:a6:42:92:dd:5e:a3:29:16:ec:bc:a3:95:a5:b8:
05:c9:e8:a5:ce:d6:de:06:fb:49:4e:1a:29:40:00:
9d:14:e2:37:f7:d0:5c:ae:58:cc:9b:55:89:85:08:
40:a5:d7:8a:0d:5f:df:cf:1f:84:5c:2d:76:35:25:
d6:80:66:81:d0:24:15:d6:f3:3f:22:c6:a3:f3:19:
00:c8:0f:88:a3:2e:4d:b3:00:ec:d1:94:ef:97:9d:
5b:f1:a2:db:2e:10:20:01:ff:a8:1a:33:b7:f5:cd:
89:de:af:80:49:f5:7e:7d:3c:a3:d2:ca:56:15:3d:
ee:12:c2:47:2d:07:e0:20:c4:84:84:7e:5e:df:43:
f5:e3:32:af:80:ea:81:4f:00:c9:5d:9e:f3:68:9b:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203770
Signature Algorithm: sha256WithRSAEncryption
04:6d:67:a8:fa:d4:0c:50:a0:95:08:e6:4b:a7:f7:8a:8e:40:
b7:a2:67:49:cd:21:27:a8:1a:df:bb:62:78:65:24:5a:5b:f0:
0a:ba:22:f2:ea:5a:0d:5a:43:26:7b:03:81:8c:f6:f5:70:d8:
6b:8e:d6:90:b9:c3:c6:f6:ad:20:5e:e5:c9:52:fa:b5:78:d9:
b5:76:bf:84:a5:ea:37:25:77:5e:7b:e8:f5:16:fb:9b:b8:fd:
55:1e:ee:28:49:ed:26:12:1f:b7:04:9f:be:f1:59:a1:02:7e:
57:38:59:01:41:10:b1:7c:1c:a5:fd:cc:72:52:d9:4b:d0:03:
ec:93:70:c6:a6:72:22:d8:f3:44:8b:d4:e3:a8:be:cc:cc:46:
c6:94:62:3c:c4:08:70:de:b4:4b:fa:64:81:42:2b:c1:b7:b5:
c5:3c:b1:1b:eb:d2:4f:67:9f:ef:b7:fc:9c:3d:c9:c0:65:11:
f0:21:85:1b:cd:bf:a3:fd:e0:d3:68:8e:41:3b:33:38:59:a8:
56:ee:1e:1b:a4:07:ae:2a:9b:8e:06:dd:9c:7c:37:cc:20:9e:
86:00:a5:1d:8f:37:d5:bb:b1:34:a7:08:36:bc:e2:6e:ef:df:
04:60:ae:38:66:e4:62:88:4b:f8:25:57:f6:77:47:8f:3f:fb:
8c:b7:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:20:29 2024 by rpki-client on console-ams.rpki-client.org