Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2DZCm5upPLpYJ3661wmzfnYDzdk.cer
File: 2DZCm5upPLpYJ3661wmzfnYDzdk.cer (raw, json)
Hash identifier: 2K/5AEIP0relF5P55Z1lSYtNFdFh6YWuB7jcoeqgu4o=
Subject key identifier: D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B66FE34A8537FEACF627B84101607F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210578
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6f:e3:4a:85:37:fe:ac:f6:27:b8:41:01:60:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d836429b9ba93cba58277ebad709b37e7603cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:78:80:d5:1b:d1:47:60:5d:4f:bf:b3:d8:
03:74:21:50:56:fc:d5:76:15:31:7c:3f:e3:7a:41:
8f:e8:29:ae:92:62:48:d8:75:99:3e:56:ae:5b:fc:
f2:0e:4c:02:c0:21:eb:cd:70:6b:91:72:72:4a:55:
03:3f:9a:27:a3:9e:ba:f7:05:dc:ba:ec:a6:80:0a:
98:d9:7c:ac:2d:9e:96:28:b5:a3:31:98:5b:f9:de:
7f:37:29:b6:11:cc:a1:33:6a:fd:4a:bf:3b:ca:ad:
de:bf:90:49:13:03:b8:a7:68:d5:d1:12:ba:b5:14:
ba:e2:6d:73:c8:7e:a6:5f:7f:5c:de:4d:c4:e6:eb:
7e:4f:61:4d:b7:ef:c4:95:e6:4b:19:49:3c:e9:96:
3e:48:a8:1e:2e:29:09:2a:58:b5:82:15:ce:6c:26:
9c:3b:37:22:57:30:d0:bb:6d:8f:c8:b4:1e:a2:1d:
d5:2e:d9:68:f4:df:fc:7d:e7:99:9d:4d:e6:6a:da:
d3:5b:59:8d:34:9e:be:0b:d6:85:61:f3:20:a1:9a:
e0:56:de:06:55:d9:9f:95:bc:6e:20:7c:12:4b:b9:
28:df:36:a6:6e:72:b3:6c:b5:b6:20:8f:d8:b1:e6:
9c:38:c2:b8:69:e6:ed:bb:a1:ec:b0:69:ca:7c:59:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210578
Signature Algorithm: sha256WithRSAEncryption
86:f1:53:a0:f3:08:03:96:d2:d6:70:96:72:79:5f:d7:cb:74:
a4:ad:36:aa:17:45:0a:51:08:70:62:d7:80:cb:b9:70:5d:84:
34:91:51:bc:be:05:b1:ba:c9:9f:2e:7a:a6:15:8c:77:0e:58:
f6:84:03:7b:e4:44:91:f6:18:f6:48:d1:58:09:9c:11:0c:af:
ce:a8:57:8a:8d:85:60:50:23:f3:52:b8:e6:48:38:39:77:ac:
95:e2:48:bf:e5:97:ec:1e:8f:83:5f:a0:68:21:83:b9:0a:26:
57:e0:b1:2d:99:c0:1a:51:58:8d:11:7b:26:33:56:7e:a7:11:
7f:a7:f8:96:e1:9b:2a:d6:60:a2:ab:66:70:ef:e5:6a:2e:fe:
99:44:7c:7c:75:bf:60:ac:db:02:69:e3:b7:c0:4f:4e:a3:64:
71:1e:c5:8b:0e:cb:f5:c3:9e:da:ac:92:7f:3a:2e:9f:a5:1b:
42:aa:89:06:d0:c6:d6:87:f9:3a:95:f8:88:63:90:80:26:ab:
31:01:21:01:27:10:40:37:86:47:d4:82:76:59:2a:73:8b:7c:
d4:50:6f:73:a7:75:ab:1a:e8:42:42:b5:4e:fd:ff:62:c5:51:
09:e2:fe:2d:dc:7b:d0:03:10:91:4f:29:af:12:31:40:1c:ac:
c2:95:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:08:50 2024 by rpki-client on console-fra.rpki-client.org