Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer (raw, json)
Hash identifier: soEzKgrPJXmqc52gGqqKztIz1ps/WUTqVKLQuOU/3RI=
Subject key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AA1710D11BBA1142519B7F27CFB0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a1:71:0d:11:bb:a1:14:25:19:b7:f2:7c:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:db:0b:82:c1:1d:6b:6d:b9:ce:0c:3f:a3:
2f:f1:eb:6b:d1:62:79:20:3e:33:9a:c8:98:79:9a:
22:e9:94:b2:b8:6c:c8:5c:16:88:4c:45:6c:ce:5d:
b8:04:88:6b:22:a5:27:c7:b3:b3:22:38:fb:dc:a3:
49:ae:3f:ba:3b:1b:a9:b8:30:82:b8:5b:5e:2c:e1:
75:17:93:a5:34:3e:a3:da:19:cc:31:a0:1e:71:a2:
82:b3:df:7d:fc:84:91:94:14:ba:ff:46:c0:b4:58:
7f:50:6e:a0:ba:c1:a2:09:0b:4f:0c:3b:b5:00:17:
fc:30:03:9d:c1:f8:33:0c:f9:e2:4a:58:9b:18:f1:
9f:2f:59:ed:c8:0c:66:05:d9:a6:44:9e:f0:c6:68:
04:7c:7a:3d:c3:4c:0c:80:86:f2:b1:4c:18:5f:df:
8a:a5:49:c9:d1:61:a5:18:07:ad:0c:12:ce:8d:94:
7f:08:bd:f4:2b:0b:47:83:c4:98:5d:0b:29:e7:71:
aa:47:1f:9b:c3:39:83:0c:13:ac:7e:78:b7:fd:57:
9a:b6:c1:c5:f4:12:b0:db:46:3b:92:a6:ee:b5:61:
f6:31:32:36:5a:fc:46:2e:61:2d:1f:69:7c:94:88:
09:f2:24:1e:e7:e9:2f:36:a4:86:1e:00:19:68:fc:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212128
Signature Algorithm: sha256WithRSAEncryption
6e:cf:3d:87:4e:98:00:2e:d1:dc:19:8b:12:94:ce:7a:d9:c2:
26:e6:5c:87:0c:69:b7:05:ed:77:3a:0b:40:da:d4:f8:ac:3d:
a1:c3:e1:92:2a:67:16:24:dd:78:3d:d9:14:f9:68:33:8d:11:
26:d2:d9:1f:3a:20:f2:7b:35:95:20:e1:3d:e4:7a:b6:73:86:
29:87:ef:bd:27:06:cf:49:85:be:ac:59:a9:a1:a2:61:a4:66:
ea:42:35:16:f6:d4:3f:a0:b2:91:94:fe:3c:76:02:03:f2:85:
e1:0e:de:21:b8:e3:0a:cb:44:d7:55:e5:60:2a:07:da:ae:99:
45:d6:93:ab:44:30:24:4f:db:3f:52:b0:a6:04:bf:e4:29:f5:
95:fc:0b:65:1d:ba:9d:57:fd:7e:db:8d:6a:49:c5:d5:c9:07:
59:bc:87:15:ec:7c:4b:2e:53:25:78:5f:a6:65:4a:1d:1b:f6:
82:80:dc:73:60:10:5d:8e:91:25:3e:36:67:21:da:3c:d1:01:
86:d7:76:00:72:d1:76:b2:8b:85:0e:8a:5d:18:89:7c:bd:45:
27:cc:54:3f:0d:22:8e:02:bc:f4:07:ea:e0:3a:21:bb:1c:1a:
01:13:81:9e:b6:ec:86:10:d1:63:b4:91:4e:7e:ff:8c:71:c2:
02:a3:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:35:48 2024 by rpki-client on console-ams.rpki-client.org