Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
File: 1dhc7fCdgveSwYDZClqaI21qcFw.cer (raw, json)
Hash identifier: rjsCDd92KX5Kdm6TTw/6ZDM/OJbSuBLqlS2QLW6TSlE=
Subject key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB532C4F99FF263E5B3C6DCD518B44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34611
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:53:2c:4f:99:ff:26:3e:5b:3c:6d:cd:51:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:24:fc:55:9c:d2:f7:b2:18:13:0e:16:8e:
82:6a:8f:ae:ea:7f:aa:eb:b6:cd:af:3a:d3:ff:40:
73:ce:d5:2c:1b:58:e7:de:a8:9c:8b:29:b0:17:ef:
f2:75:2d:1b:17:82:74:f0:ac:73:73:09:0a:24:b0:
bc:cd:be:41:68:28:4d:73:2d:02:94:ff:ac:f4:b4:
0a:20:89:f5:0f:c5:b8:87:18:04:37:24:0f:1c:c1:
cc:e2:90:b6:31:22:89:19:8d:8f:52:bb:7c:65:7b:
d6:ff:9b:ae:b3:08:66:a5:fa:88:67:d9:e6:3a:56:
f8:10:44:a6:85:5c:92:8b:26:ab:d7:75:76:e1:0c:
c2:1f:52:2c:0b:3b:39:40:4f:a5:12:de:2e:b2:7a:
52:c5:34:be:5f:68:0f:03:e3:73:9b:42:d0:77:32:
14:fe:ad:8f:ff:a1:67:24:0c:a9:95:61:e3:35:c9:
b7:b7:e3:4a:49:cb:07:ab:38:35:9c:3c:bc:bd:0d:
46:10:c3:2a:0a:30:47:6b:ee:31:1b:1f:8b:6b:c0:
1a:cd:a0:f9:8e:e7:9d:52:63:a9:81:f7:15:a3:67:
53:c5:fc:69:91:95:d6:78:5d:7a:7b:16:fc:29:71:
4f:76:a9:ea:0e:09:d3:11:de:b7:92:6f:13:fb:3a:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34611
Signature Algorithm: sha256WithRSAEncryption
10:9c:31:22:9e:33:58:e0:84:3a:3b:fa:36:6a:23:3e:1e:44:
54:5c:b3:88:82:46:ec:55:b5:9f:ff:2e:f7:46:b0:0c:8b:67:
4e:db:36:30:f3:d7:c5:f7:b9:17:7e:0d:a7:ba:9d:35:87:13:
6f:c3:a9:64:12:8d:3d:2e:20:e9:55:b5:8a:19:3e:49:74:f3:
e2:65:e3:31:c1:9e:ea:9f:8e:3b:44:07:91:4a:f0:cf:e2:ab:
35:81:1e:c1:9a:9e:77:22:56:9d:06:52:95:ca:ee:bb:8a:f6:
36:71:f9:32:82:35:f3:8e:58:4d:e2:52:23:c5:5e:34:5e:29:
91:2b:a7:e3:42:4e:d6:2c:0a:8a:4e:0e:ed:71:eb:be:56:0b:
ca:1c:81:d4:4a:65:35:1c:08:ce:ca:72:9d:f0:2a:ba:a4:56:
5f:1e:db:cf:84:01:66:1b:7e:35:75:05:64:c0:bc:ed:aa:6b:
1a:24:d4:53:97:a8:e5:e2:a7:d3:06:ff:b6:f9:c7:99:3e:e4:
ee:b2:59:e4:66:5d:93:8d:a9:bd:e3:c9:d9:98:e7:fa:c6:0e:
26:14:04:25:ad:ba:87:07:10:09:c1:66:2c:df:c4:f2:4a:6c:
be:b2:f8:a9:5b:68:c2:55:81:e5:04:08:fa:b2:8b:e4:17:57:
da:66:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:53:27 2024 by rpki-client on console-fra.rpki-client.org