Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.cer (raw, json)
Hash identifier: CCf+3yAJWn/6siIzpq8nhCm4V1Zl8qDqsSd/SHIIZ+4=
Subject key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649ADDA17E7CE830EC3A8FB08A36115
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210669
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ad:da:17:e7:ce:83:0e:c3:a8:fb:08:a3:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:97:bf:aa:20:db:62:7d:4b:32:78:d0:4c:
91:0c:d6:26:36:b7:d7:71:dd:04:39:96:96:93:bd:
f4:cd:4c:cd:4c:32:6e:12:05:53:6f:b5:ef:b8:46:
0c:7e:03:00:ae:87:d4:b1:00:13:01:7e:df:76:b3:
19:d5:2d:fa:2e:f3:32:7a:3f:7f:18:e4:57:8d:47:
8c:42:b3:9f:78:89:c4:ad:7c:6a:af:06:eb:40:03:
76:42:61:33:d1:70:8a:d1:11:1f:d7:13:b4:46:d6:
07:79:ab:20:c8:5a:15:9d:cd:0a:de:67:da:89:68:
60:4e:d8:18:8e:7f:59:f1:7c:a2:9d:fb:64:3a:9a:
eb:6e:79:53:d1:85:3f:fc:ae:24:7c:8a:bc:41:06:
d2:e6:a4:32:42:ab:23:62:25:fe:91:3a:5d:ce:c4:
3b:c7:4f:fd:d5:7c:f4:ba:7d:5d:7a:7a:4b:a2:aa:
72:53:78:e3:04:4c:cf:fa:6b:d8:92:3b:3d:c3:ce:
8c:d6:bf:f9:05:51:63:71:0a:40:58:ef:cf:81:af:
08:43:21:3b:74:e9:c6:76:98:64:5e:78:16:f3:9e:
27:3d:33:84:0c:e7:de:b7:5a:4f:a8:f2:f5:c8:1a:
b2:6b:1e:36:f2:92:56:de:00:5b:60:46:60:ea:81:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210669
Signature Algorithm: sha256WithRSAEncryption
31:f3:11:3d:b2:98:53:33:b3:13:32:96:3c:a2:76:72:a8:7b:
2f:cd:67:cf:fe:f1:04:da:e3:a5:96:89:cb:ec:9d:10:97:29:
79:74:8a:d8:75:99:6d:49:42:0f:2b:8f:d5:7b:34:72:6e:56:
9c:4a:d9:17:af:21:a6:af:0c:8d:62:c5:bf:7f:48:9a:ee:53:
1c:d9:fe:e8:33:33:ed:36:11:80:59:96:de:69:bf:15:d1:37:
f6:4a:43:ab:90:5d:cd:54:47:65:94:86:ac:8d:07:09:1d:32:
b4:3e:37:85:20:e5:e8:be:03:76:98:19:dc:6f:07:cb:c5:63:
b8:fb:bd:8f:96:a8:c9:49:fb:ae:d3:d1:45:0f:93:10:17:4a:
fc:83:e2:ac:97:f6:cb:84:6c:a7:2b:88:11:39:02:d2:82:ff:
7c:26:b7:82:6a:b9:43:2a:31:44:50:18:56:73:e8:a8:84:b1:
f6:2c:d8:28:46:d9:c8:da:a8:cf:1f:61:05:e8:50:ef:e5:a9:
52:48:55:91:5e:66:35:bc:e0:2f:a1:4c:dd:8a:5e:d8:6a:35:
65:cc:22:33:9e:ac:e8:1b:06:8f:bc:2b:7c:45:f7:b5:52:20:
06:fc:f8:4e:9c:32:e9:f6:78:32:50:99:bc:db:22:ed:aa:c1:
d0:c6:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:08:52 2024 by rpki-client on console-fra.rpki-client.org