Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer (raw, json)
Hash identifier: e16FbF/QszM2zWPFBxmC6ychdIY1SG6i+Kbzy1aD5mM=
Subject key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC9EE12A98113B7315FE340CE4F1A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39785
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9e:e1:2a:98:11:3b:73:15:fe:34:0c:e4:f1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:ad:06:dd:9a:9c:c3:f2:4e:8a:f8:a2:7b:
cc:d5:96:59:6c:66:e5:a1:d8:cd:9d:6b:ac:fd:02:
64:1d:02:fa:59:3c:2a:14:13:9e:c5:3f:10:5f:e7:
bd:8c:a3:c9:e1:cb:11:77:bc:5f:cd:1a:2c:03:1a:
52:5c:66:6e:24:e6:1e:1d:c2:f6:94:08:90:f7:6b:
f0:a8:ce:ad:a4:a0:5a:67:17:f9:58:50:f6:dd:3b:
ed:23:4a:d4:f6:15:11:02:b5:32:32:99:3a:12:94:
15:04:15:25:69:53:96:9f:3a:8b:3c:07:d3:3d:85:
5d:19:ed:21:0a:12:ab:bb:4d:59:61:6b:df:33:7c:
ab:0d:01:24:36:df:d7:9f:f6:2f:68:eb:33:3a:74:
cb:6f:a4:5f:35:7f:cd:05:81:49:6e:8d:fd:7f:df:
09:ef:ce:4f:e7:5d:79:f8:83:02:7c:18:6e:1e:e5:
a5:6f:d9:e4:46:07:2b:05:3c:95:f8:21:56:8c:7c:
ba:51:10:97:7d:59:30:07:4f:a4:37:ac:0c:21:c6:
07:fd:e7:d6:45:e9:5e:31:93:e4:5c:2c:3d:30:5e:
5a:03:4d:80:68:6f:4d:51:30:75:86:99:b2:e7:61:
6c:c2:49:91:32:ea:c0:e5:cc:e6:cd:8a:35:39:c6:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39785
Signature Algorithm: sha256WithRSAEncryption
56:53:6f:d4:79:5f:28:b4:25:21:28:85:96:c6:fb:e2:06:09:
a8:b6:4c:72:c3:4f:eb:57:ab:5b:c9:39:af:9a:d1:fa:67:10:
5f:b9:c4:c9:e0:43:2d:b6:9a:28:1f:b4:65:58:cb:11:6d:c9:
b8:21:54:50:67:cb:8d:9c:83:e0:cc:81:7a:a8:65:85:9a:c2:
13:67:76:9a:b0:99:16:7d:35:95:f7:1e:be:f6:98:d8:5b:43:
e5:40:c9:5b:90:87:37:b9:14:3a:48:4c:88:5a:4a:77:33:b3:
12:ce:a0:2b:95:e4:34:fd:30:06:02:c1:a1:11:26:cf:eb:8f:
d7:6b:bc:5b:64:f3:eb:ec:52:76:95:d4:28:77:3d:82:2f:cc:
80:3d:04:4c:93:77:4c:2c:78:ff:a4:b9:ac:3e:86:57:e6:e5:
45:c2:53:bd:67:6a:33:78:33:8a:9f:1e:01:c1:b9:2b:fd:17:
da:81:d0:83:2c:af:23:3f:47:36:65:8f:de:83:88:00:36:7d:
3d:92:a0:28:f2:0e:7a:87:a8:85:45:af:af:ba:76:6d:0a:4d:
21:c1:fa:27:42:ae:8a:7a:0f:ee:b4:c4:cd:de:8e:c3:fc:5f:
16:d6:bc:84:5c:92:62:dd:80:a5:61:e2:69:06:a6:86:39:45:
e3:c3:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:57:11 2024 by rpki-client on console-ams.rpki-client.org