Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer
File: 2w7sK_0v5VYmH7T_xOyXpfwTMss.cer (raw, json)
Hash identifier: ncp7Pl+CEg8BkjtuniqeVyDArG2omXg8FiTrfYGjcUU=
Subject key identifier: DB:0E:EC:2B:FD:2F:E5:56:26:1F:B4:FF:C4:EC:97:A5:FC:13:32:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A5508449FF4A17D7C0CAEC1A1B86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft
caRepository: rsync://dev.tw/rpki/August/2/
Notify URL: https://dev.tw/rpki/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51930
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a5:50:84:49:ff:4a:17:d7:c0:ca:ec:1a:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db0eec2bfd2fe556261fb4ffc4ec97a5fc1332cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:66:1c:d4:2e:70:a5:60:9e:1e:bf:d7:36:
4d:14:c0:89:b8:03:79:37:52:17:cb:e5:a9:89:74:
d0:12:ea:db:d5:26:a3:59:d6:bc:f6:e0:fd:c6:bf:
dd:4a:3a:3e:4b:e4:71:0a:e4:2b:a3:a1:74:dc:03:
3a:86:c0:50:d1:7b:f3:c1:94:b5:b1:f0:68:41:9d:
c0:84:9a:12:06:ed:55:d0:13:9a:4f:00:bf:89:57:
9c:3f:05:7a:32:61:05:21:31:80:eb:7a:c4:9e:f3:
2a:11:07:e1:77:ec:f8:83:5b:b4:59:91:77:22:64:
9b:d9:c1:8a:24:a9:7a:94:d4:64:71:52:be:66:05:
02:14:fc:39:9e:dd:f3:db:08:6c:cc:89:33:e1:bc:
6f:02:3e:69:78:d0:2a:42:48:49:7a:f7:88:b3:ad:
83:1b:01:9d:87:3b:8d:80:75:b3:e7:73:b7:23:e1:
ef:64:ae:d4:ac:51:4d:9d:8c:02:0d:a2:34:8e:6c:
d9:57:84:fb:63:cd:5b:a2:53:27:75:bc:7d:40:41:
2a:cd:d6:62:de:dd:e1:5a:32:e5:20:24:cc:17:b7:
5e:e3:3b:34:14:19:ce:23:a9:62:26:7c:0a:34:af:
99:94:5b:7c:59:c6:f9:49:e2:88:bd:ce:4d:35:77:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:EC:2B:FD:2F:E5:56:26:1F:B4:FF:C4:EC:97:A5:FC:13:32:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://dev.tw/rpki/August/2/
RPKI Manifest - URI:rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.mft
RPKI Notify - URI:https://dev.tw/rpki/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51930
Signature Algorithm: sha256WithRSAEncryption
5c:3a:ee:b8:e4:14:55:9f:bc:41:69:c5:f9:63:db:eb:18:5e:
4b:16:de:f2:2f:ce:13:6f:be:c7:a5:4e:65:12:08:d8:42:5f:
37:f2:70:74:72:d8:a9:74:a3:42:15:f1:35:79:bd:c9:41:1e:
4a:10:46:77:96:6f:b2:18:ca:da:f1:61:97:f3:d8:80:62:d4:
29:b1:f1:45:88:c6:c8:75:f7:df:b0:f8:49:50:ff:03:ac:b4:
d5:9a:b4:e1:f6:c6:2b:67:c7:fa:99:0f:44:cc:8d:7e:0b:99:
13:2d:37:1e:f0:bf:9d:95:f9:1d:a7:ae:2e:8a:6f:e4:21:9b:
ed:9a:84:14:68:c0:c6:ca:ae:a4:04:e1:d2:f5:e4:17:37:21:
59:7e:51:be:c0:3f:00:82:b9:b0:04:e8:9e:0b:ad:f2:d3:17:
6d:13:82:be:e9:0f:6d:8f:4d:45:ed:08:b5:90:47:e8:e6:db:
b2:b3:cb:d1:f0:89:83:93:be:2a:72:f4:5f:fa:b3:f6:67:49:
0d:b1:7d:de:56:b6:c3:77:e5:9f:ca:9b:21:10:4c:22:4a:1d:
c1:9f:83:d4:e1:c6:22:b3:79:95:39:e6:0c:38:1a:51:48:4a:
6e:6a:e0:40:81:ae:aa:55:a5:30:37:62:4d:de:0b:f1:d2:b5:
91:df:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:01 2024 by rpki-client on console-ams.rpki-client.org