Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2VYH_yEnTNoubzTOaXbIhQXd4tU.cer
File: 2VYH_yEnTNoubzTOaXbIhQXd4tU.cer (raw, json)
Hash identifier: RHDVADj3lrslpdI10h0pV8DbJ27lOpdYZViKPoss7HM=
Subject key identifier: D9:56:07:FF:21:27:4C:DA:2E:6F:34:CE:69:76:C8:85:05:DD:E2:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E58D1AC7739DD5697C82C7B4FB4B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212454
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:58:d1:ac:77:39:dd:56:97:c8:2c:7b:4f:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d95607ff21274cda2e6f34ce6976c88505dde2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:69:7e:7a:9f:bd:2d:6c:ae:79:1b:72:68:
ab:eb:fe:ad:eb:43:2f:44:a1:e8:3f:a1:f6:ad:cb:
47:17:a4:51:fa:cd:b5:aa:a7:c4:18:aa:17:4b:50:
a6:2b:02:ab:59:0e:09:17:54:bc:f6:31:2f:6a:52:
71:0e:47:e1:49:bb:e9:06:46:3b:ed:11:e2:6d:3a:
2a:9e:0b:11:a0:02:c1:7a:01:94:fa:2f:63:45:e4:
17:0a:48:2e:bc:de:a7:0a:91:f3:2f:d1:9c:d3:4c:
94:a8:2c:eb:8f:92:95:40:17:52:2c:51:59:26:40:
d2:f1:c7:5b:b4:3a:97:38:d5:37:42:cc:2a:89:86:
15:82:07:5a:53:c1:69:ee:14:c7:e6:a4:60:05:18:
c2:fd:97:3f:94:0a:25:55:ff:3a:e5:6d:d6:19:0d:
8b:a9:3e:9d:1e:45:62:ee:ab:c2:3e:79:a4:c5:71:
4a:dd:da:04:0b:9c:af:d4:37:dc:68:16:32:6b:f3:
74:e4:7f:54:d6:30:70:b8:32:3f:c9:b1:bd:69:f7:
1d:23:62:03:dd:fd:99:55:a0:24:8a:9d:f8:80:6a:
d1:0b:e1:f3:d0:66:04:74:30:9b:11:ec:f6:59:71:
8b:17:37:e5:25:cc:6c:0d:4d:1f:a1:96:02:45:a0:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:07:FF:21:27:4C:DA:2E:6F:34:CE:69:76:C8:85:05:DD:E2:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212454
Signature Algorithm: sha256WithRSAEncryption
27:78:e4:2d:55:7d:62:9d:c2:77:0b:44:24:dc:f1:50:11:87:
e3:4b:d3:97:85:8b:98:d2:07:10:7d:8b:8a:8f:20:5b:e3:50:
e2:e5:ec:8f:85:70:11:2a:d3:10:7b:f1:3f:78:d2:d3:84:6d:
e5:d6:7b:79:9f:60:42:ca:48:65:14:d0:dd:3d:ed:46:34:79:
5b:16:94:dd:66:f0:44:7a:e9:91:53:4a:c4:73:f7:a7:9e:ba:
0b:78:11:96:5c:4f:d0:83:d5:de:79:24:ac:65:15:21:a4:26:
8d:3a:66:aa:2f:1f:81:2a:c8:d6:48:bb:8d:e0:17:37:bb:e9:
12:ca:ef:d0:b2:81:10:64:fa:17:b4:7c:20:19:56:c1:c4:c9:
2a:b3:a7:3e:86:43:19:30:77:34:9c:74:27:d8:8e:07:93:d0:
f4:48:63:7c:07:1d:13:12:46:05:37:7b:95:47:40:30:28:44:
11:50:e3:c5:5a:4b:66:be:99:cf:8a:99:28:6d:65:49:95:3e:
08:a2:82:d8:31:07:79:db:0d:77:1d:84:81:b0:5b:a5:2b:30:
58:8e:44:86:fb:7c:5d:53:4c:b8:67:cd:cc:57:3e:d6:6d:a4:
5b:0f:bd:6e:c3:45:1a:07:3e:1a:a7:fb:f8:a4:1d:46:7d:18:
c6:1d:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:46:44 2024 by rpki-client on console-ams.rpki-client.org