Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.cer (raw, json)
Hash identifier: tEOXCoHKvvCkVY6ioVMBGnKk/p0eQD666n7wsh6DYTg=
Subject key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0B5FCF97F0AB399D68C0C0C446CED72B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 21:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207662
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0b:5f:cf:97:f0:ab:39:9d:68:c0:c0:c4:46:ce:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 21:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:66:55:e7:37:6b:ec:b0:30:b8:f0:30:4c:
27:ec:f4:e6:69:22:4b:20:71:2b:89:08:50:c9:51:
b6:3c:fc:7b:6a:9e:6d:d2:9c:b4:08:1e:db:dc:2c:
c4:3f:46:4b:41:61:97:d5:64:eb:7c:ba:b9:81:ca:
48:01:bc:c0:0d:ac:04:4b:77:49:ac:78:5f:c7:e4:
72:28:84:0a:30:8b:af:d6:c4:28:3a:c1:80:92:65:
a0:08:87:34:bc:e7:be:37:1b:d1:a1:1b:fc:5b:02:
9e:e6:12:fc:cf:ba:2c:44:e8:74:43:a5:51:8d:f0:
d5:44:40:00:fd:b8:d4:ff:8b:3f:73:5b:b8:16:97:
68:04:29:07:21:79:66:05:81:13:57:ff:63:e9:a6:
5b:36:c7:98:92:d4:b0:8f:dd:d1:34:69:08:58:e6:
8b:83:14:3f:a6:11:6d:ee:49:71:db:ee:bf:2f:e1:
11:4b:87:a0:be:a5:b7:f8:3a:14:9d:d8:0b:58:7b:
64:4a:0a:42:c4:dc:1e:8e:30:03:20:13:c4:b5:c2:
d3:52:58:0f:45:9b:bd:e9:29:68:8d:36:0f:08:1a:
0a:60:98:72:51:7d:0c:2a:43:a1:20:a3:1c:4c:34:
f9:e1:79:16:86:bd:20:83:4e:71:59:ed:f2:37:3f:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207662
Signature Algorithm: sha256WithRSAEncryption
26:1b:a8:b3:c1:03:04:21:e6:84:d0:da:25:58:cd:8b:8a:38:
e8:0e:02:65:c2:8f:29:ac:89:df:12:8d:74:61:5b:4d:11:67:
3e:87:25:f9:44:d6:1b:1c:16:08:c4:9a:ea:45:7f:ad:62:dd:
0d:22:3e:61:43:df:27:8a:44:b5:cc:b1:8f:08:59:13:3a:a4:
20:8c:a0:de:1c:b3:64:10:f2:d0:49:fc:a2:4f:85:d7:3c:25:
b9:52:a5:1c:a1:90:19:ff:26:62:bd:f2:a4:9a:26:71:bb:99:
18:78:79:07:b5:62:c2:e9:f7:c9:9a:77:63:e9:63:90:16:0e:
66:a1:95:37:fd:b1:8b:8c:2f:6e:7d:e1:89:eb:90:4a:9b:bc:
77:8a:0c:4a:e2:4d:eb:6a:99:58:88:77:a0:80:8d:95:27:d6:
d4:69:f3:39:ac:74:df:c6:99:cc:57:bd:3b:34:78:30:30:94:
bb:a1:f6:f2:2e:23:0c:2c:9e:6e:6f:24:90:bf:b2:97:40:e1:
9d:4e:33:41:5f:fe:7f:22:29:c9:1b:7f:57:50:17:05:92:5e:
53:a7:2d:c1:c5:0b:34:bf:bd:34:f0:46:54:6b:27:09:62:f3:
3c:28:d4:89:a3:ba:53:36:85:2a:0f:44:9f:d1:8f:60:56:7e:
97:24:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:07:11 2024 by rpki-client on console-ams.rpki-client.org