Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.cer (raw, json)
Hash identifier: eIrMH2oEWaaovhCXdnNpMGyURUSr8TUz1tCMPgfsUdg=
Subject key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E17E0F9CAC66D3097B9E738751744
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205839
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:17:e0:f9:ca:c6:6d:30:97:b9:e7:38:75:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:f5:3e:9b:82:81:28:e9:c4:a5:17:95:e2:
d8:a4:c5:bc:77:e5:57:a6:fc:05:bb:b8:73:fd:93:
27:0d:12:09:8f:a0:62:03:f3:67:61:0d:f7:67:c6:
63:5f:c1:86:b5:3f:5c:36:78:d2:ca:72:fb:f9:6a:
01:f0:9d:54:a0:34:f9:29:a2:3b:41:47:ef:25:38:
71:13:df:fa:33:f2:99:09:75:e6:dd:95:f9:bb:d3:
65:4e:b9:c0:24:45:6e:57:dd:35:36:84:cb:f5:85:
0f:ad:a9:10:37:b1:f3:15:28:57:2d:1a:52:0a:80:
56:fc:36:3b:79:1d:a5:d5:bc:eb:ae:97:63:07:2e:
1d:e4:78:be:b5:77:4a:59:b1:14:79:92:91:21:3f:
86:aa:be:1b:88:04:6a:f1:42:da:6a:f0:92:80:21:
29:a9:87:a8:89:7e:98:7d:83:95:cc:bc:ad:40:e1:
6a:c5:a3:7e:66:de:1d:bc:c2:b3:36:6c:e7:b4:a7:
2d:3e:ae:45:1d:1b:9a:e3:e3:1a:9a:ae:f0:6c:38:
c7:f2:a2:a6:c2:eb:91:30:67:ec:fa:f0:49:58:d0:
f0:e0:ae:e3:64:c8:ff:a5:8d:50:ba:02:5a:ff:ba:
88:77:93:7e:98:3f:f1:0c:22:7f:4f:61:6b:f6:5f:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205839
Signature Algorithm: sha256WithRSAEncryption
12:03:21:81:66:77:68:62:d6:fd:bd:f0:72:9c:19:6c:6f:5b:
21:b7:c3:ab:25:07:e9:fd:e4:97:96:83:37:71:78:39:d5:4e:
0e:28:f8:6d:f6:34:36:e6:10:b4:af:fa:55:6f:5e:1f:4d:25:
d9:c1:3b:f6:fd:dd:37:d3:d0:6f:32:f6:45:52:d4:b9:fc:d1:
fa:7a:7b:61:f5:3a:e5:b0:62:1b:eb:2e:59:03:3b:04:31:e3:
1c:04:0e:20:09:22:6d:1a:aa:60:0e:16:a7:c1:6e:af:05:f0:
61:a9:09:52:ae:ba:02:71:dd:ee:1a:c8:f4:65:15:81:c0:b9:
b2:01:e2:eb:e1:d3:de:5b:33:ae:0f:ae:43:e7:fb:4e:19:e6:
fa:b8:45:f8:8e:d0:24:dd:b5:ed:0e:d0:69:de:4e:df:39:2e:
c2:76:46:cd:a8:49:d5:66:b7:01:2a:af:0d:cf:56:e3:c6:1b:
b4:36:ff:38:35:09:a3:25:de:17:9b:d0:3b:c6:00:80:63:89:
bf:5b:be:df:c4:54:7c:00:1c:62:54:35:aa:37:10:85:99:4f:
64:46:06:2e:0b:2c:5c:4c:f9:14:c8:dd:66:cd:d9:2e:c8:a2:
ce:ec:cd:31:8b:55:99:93:41:a5:63:e9:9d:82:18:97:17:dd:
4c:af:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:51:36 2024 by rpki-client on console-fra.rpki-client.org