Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1LmNSM0jYfug0-z_7cDiLfp88hk.cer
File: 1LmNSM0jYfug0-z_7cDiLfp88hk.cer (raw, json)
Hash identifier: hMmkQawWa+bDjSwTj+CJQV4mafAP5iA5wqoaH4HEUTg=
Subject key identifier: D4:B9:8D:48:CD:23:61:FB:A0:D3:EC:FF:ED:C0:E2:2D:FA:7C:F2:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425413CDA58FB4B9680241C804C435C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211266
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:41:3c:da:58:fb:4b:96:80:24:1c:80:4c:43:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b98d48cd2361fba0d3ecffedc0e22dfa7cf219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:03:ac:d3:be:99:18:fd:be:5a:8a:83:10:
94:df:22:a4:28:af:70:4a:aa:22:35:17:be:89:1b:
c8:f7:53:ca:cf:6f:aa:0b:14:5d:04:7f:d8:2d:b6:
8d:7d:b7:58:38:07:50:90:5d:18:7f:3d:e1:d2:05:
ae:56:47:72:d3:d0:d6:4b:a4:cc:98:99:a9:52:69:
7c:60:d9:c1:0b:be:0a:db:13:02:8c:f5:49:f8:32:
f7:49:e2:b9:f0:b5:68:b1:62:77:7b:89:6b:9b:fa:
a8:4d:ca:bb:d6:f2:0f:59:88:ca:eb:ad:a5:c8:f1:
f9:b1:02:05:60:d8:41:7f:d5:19:3d:ae:38:98:21:
c6:e1:52:23:05:2e:30:00:e7:ba:6f:1b:03:8c:01:
79:8d:81:d5:a5:c0:4c:8b:08:17:9b:b0:d2:c8:59:
28:1c:0f:c4:b7:a4:7b:ab:3c:b9:aa:61:d3:45:a6:
7e:d4:6c:67:83:ff:95:29:0d:14:de:38:a6:7b:05:
4c:dd:b9:04:3c:de:e1:c0:48:2e:f0:e4:39:f4:c2:
bd:57:40:8d:38:54:ad:30:12:f4:24:00:a2:e8:43:
04:59:3f:a6:7b:9a:94:fb:72:d4:94:94:d5:c4:ca:
f4:85:89:06:a3:9e:6e:a8:88:79:29:d6:1a:6d:11:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:8D:48:CD:23:61:FB:A0:D3:EC:FF:ED:C0:E2:2D:FA:7C:F2:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211266
Signature Algorithm: sha256WithRSAEncryption
4d:5f:03:bd:6c:dd:85:f9:24:f2:67:18:43:e4:f6:5b:73:97:
32:de:8c:27:34:fa:1e:5e:9e:14:58:23:d9:6f:13:84:5e:55:
1f:98:93:15:20:bb:64:02:8a:3e:46:95:99:4d:42:8f:9b:3a:
68:9f:db:12:67:8e:b3:7d:71:04:1a:b5:f6:41:69:79:af:e7:
01:0b:66:76:43:bc:c5:a0:2d:26:86:b2:02:6a:a4:7f:93:a1:
a9:41:37:5b:80:b2:64:58:c5:2f:41:50:59:d7:d3:23:66:1e:
9d:b1:14:1a:c7:cc:44:f0:fb:05:af:1c:e0:b9:30:1b:e2:64:
e0:2d:d8:37:fe:62:62:58:ab:0f:98:e5:ed:85:7b:b1:61:81:
0f:84:38:d0:0c:fa:57:5b:b2:b2:af:f2:57:8b:2a:da:f5:79:
d2:e7:15:1d:23:c9:61:bc:d2:c2:d8:20:cc:52:b3:f3:fa:12:
71:d0:d8:a9:3c:f4:dc:fc:e8:51:6c:d7:02:dd:38:ea:4b:84:
87:79:4f:3c:20:a0:1b:e6:ff:97:5e:cb:ab:a0:1f:54:bf:3a:
ec:3a:1a:aa:d2:fb:39:da:15:db:ff:33:fa:69:2a:8d:aa:47:
3e:84:bb:fe:7b:87:da:3d:51:aa:79:82:47:fc:4e:c1:91:53:
83:6e:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:52:40 2024 by rpki-client on console-fra.rpki-client.org