Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
File: 2Bytep8KCbPVTabNzedDEvrMbXc.cer (raw, json)
Hash identifier: WJbtPZmFE97NjRaGurzbnU8yoS7yf8/XBSIrZSxgU6Q=
Subject key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A14EA74C089322FCEA3B6F82C751
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59867
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a1:4e:a7:4c:08:93:22:fc:ea:3b:6f:82:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:8d:e0:99:d5:30:42:fe:0e:ed:b3:46:56:
a2:b1:49:ae:b0:6a:ee:67:c0:7f:c3:0d:62:d2:c9:
78:ac:e7:46:04:d6:32:3c:f7:1b:c5:42:f8:19:07:
e8:5e:2d:c8:13:aa:f2:f3:3f:0f:db:ac:b3:08:9f:
8b:01:00:ad:f9:42:86:0e:7b:11:4c:8a:cb:55:f9:
fa:db:42:a4:bc:23:79:86:4f:26:fa:e6:3e:96:9e:
8f:a6:81:e3:b5:d6:86:cc:d6:b2:e9:60:3f:3b:9a:
5d:a7:68:d2:d0:b5:4f:1b:a5:76:3b:eb:9f:50:79:
eb:0d:2e:93:fb:fe:4d:89:4f:bd:7e:68:e7:04:84:
33:95:2d:92:5c:37:09:4a:14:57:36:cd:e0:b3:71:
97:47:32:df:a3:f2:c4:81:35:26:b1:a8:dc:2e:de:
85:7a:f3:b0:c5:0c:af:60:55:43:4e:4c:07:a2:f7:
62:d8:5b:63:de:25:a9:bd:d4:9d:d0:72:3d:c5:2f:
46:da:15:cd:1e:6a:68:e9:5f:aa:fc:70:55:f3:c4:
fc:6a:0b:15:27:75:5c:19:7b:f5:7c:ad:cf:e6:fa:
f1:26:c4:64:44:5e:07:80:6c:87:d9:3b:5d:cb:7e:
6e:81:40:15:38:b5:1f:1a:74:04:cb:6a:bc:31:27:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59867
Signature Algorithm: sha256WithRSAEncryption
89:1c:05:a1:e7:4c:3b:7f:4d:5e:51:9c:5f:59:1c:ee:55:b4:
43:14:95:e2:9e:1b:a6:7e:8c:73:b2:72:9f:f2:f7:36:35:28:
07:c8:f2:87:13:a8:96:78:23:d2:d2:22:73:b1:23:4f:2f:70:
30:b1:92:4a:83:8a:0d:5c:7f:85:ac:f3:51:fb:fb:90:38:48:
bf:36:14:f0:ca:c3:10:0c:ec:55:72:4c:ba:b0:bd:f4:02:9a:
0d:b2:97:8e:f2:30:bc:b7:27:e1:5e:2d:24:91:45:41:8c:07:
2e:54:1a:af:22:d7:7e:87:f9:03:bb:86:d5:f8:71:5e:fb:36:
ce:2d:1c:e1:3c:dd:30:04:d0:c5:fc:8f:03:71:1d:f6:10:1f:
af:a7:af:7a:21:de:6b:da:ab:da:89:76:27:f8:64:43:f9:a8:
17:ac:b3:c0:68:cf:cd:d9:a0:d5:79:72:9e:97:70:c0:b1:36:
a9:1f:0b:85:d2:3f:33:01:ce:26:f0:f7:64:f6:81:e7:a2:01:
a5:0f:bc:b8:c4:07:59:80:db:0d:ac:3d:33:ab:8a:98:dc:82:
05:a6:53:42:82:99:db:5f:40:ed:31:a4:24:e2:c5:87:ea:d8:
80:bd:eb:d1:c4:2a:d2:a4:01:aa:4d:ee:82:cf:6e:41:5d:9e:
a1:f4:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:51:02 2024 by rpki-client on console-fra.rpki-client.org