Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer (raw, json)
Hash identifier: QcGROV6brRTTJNKrRjLy0u6gX+hOGIXHMbQCPTzap30=
Subject key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49326251B59D5DA2602CB3A965455D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211527
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:26:25:1b:59:d5:da:26:02:cb:3a:96:54:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8b770160553760c3567df51a847ed6c529c0789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:39:68:4a:83:bb:44:1f:14:02:5b:86:02:
b6:66:29:23:55:02:4f:7f:d6:71:5a:0f:df:cd:ae:
85:2c:13:e0:8b:63:94:49:cd:2d:00:0a:1a:15:41:
8e:98:fd:cc:5b:21:dd:44:45:f1:3c:3a:ab:58:94:
6e:9f:7d:b7:b5:a6:b4:c6:72:d5:a5:82:75:a7:6f:
d8:74:41:46:5e:88:71:dd:33:12:bb:1b:57:9e:9f:
c1:dc:d7:3f:b2:42:0b:fa:fe:32:b1:fa:77:ca:16:
2d:ab:47:fe:0f:0c:bf:3d:41:f0:4c:13:5b:13:e7:
e4:05:c0:28:72:4b:51:f3:42:e3:00:82:06:b6:22:
20:92:e2:03:79:74:ab:0f:10:8b:40:1d:72:fa:a0:
16:77:6c:45:4b:6c:a2:26:59:fc:05:5b:f8:e9:5a:
35:cc:a4:e8:8c:7b:76:90:fb:b1:f8:9c:86:0c:39:
1a:84:73:f6:59:45:74:8d:4c:fe:03:f5:91:e0:13:
63:fa:9d:5a:7d:0c:1b:18:98:a6:90:b0:1e:57:6e:
5c:45:db:48:2c:be:42:33:73:24:09:15:ae:d1:6c:
83:a0:cd:f8:86:31:78:7d:79:ed:c2:68:e0:8d:1b:
3d:1f:86:9f:62:35:f7:01:ea:6c:75:90:fb:70:0a:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211527
Signature Algorithm: sha256WithRSAEncryption
0d:79:4a:77:0e:dc:09:e1:28:6f:48:a7:fa:1d:73:b9:2e:23:
a9:9a:82:3e:fd:42:19:b7:b5:4d:4a:1a:d7:f8:6a:ff:1d:df:
f3:ba:2a:50:56:be:82:d0:0e:89:2a:84:dd:74:da:b8:fb:b0:
79:3b:9c:24:84:9a:34:be:7c:10:dc:26:8f:1a:d9:ab:bf:6c:
61:ab:e4:2c:53:9d:71:19:0d:d4:01:a3:9a:87:89:c8:9e:04:
8d:de:86:e4:6c:71:2a:57:30:be:35:c9:65:c9:92:6a:35:ad:
49:11:53:01:d3:d5:da:38:ef:4d:93:27:59:ad:c6:5c:35:dd:
53:c7:09:8a:9d:6b:45:c6:f3:cd:b1:53:fb:0a:f9:fc:76:98:
72:76:ab:71:7a:63:95:27:41:28:9e:c7:97:7b:b4:3e:1b:12:
28:f5:98:74:e6:a8:27:ff:fb:a4:98:bc:32:2f:58:98:b1:a5:
4e:45:1a:ce:b4:d5:88:e7:71:cd:88:fd:e5:c7:d2:89:da:fc:
37:d8:eb:2b:36:2c:53:72:79:ea:b4:92:33:47:b2:4d:33:3a:
30:db:b4:b0:e2:ac:e2:59:69:da:fc:c1:95:ed:2e:11:3d:d9:
c0:47:74:ed:80:fd:c6:d8:99:77:47:8b:8e:f9:d4:74:50:d9:
ce:1e:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:34 2024 by rpki-client on console-fra.rpki-client.org