Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
File: 3edtMFKVeG1Q5jSpan25PzEWzNc.cer (raw, json)
Hash identifier: 2duT4lTy/zKFLkDm10hzgZWyXEF3I3NWR2g18kJcV2Y=
Subject key identifier: DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF86032F4BF2104CF8E1C08DA63D41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216320
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:86:03:2f:4b:f2:10:4c:f8:e1:c0:8d:a6:3d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dde76d305295786d50e634a96a7db93f3116ccd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:55:1a:33:06:ce:b8:d0:c5:96:b6:b3:97:
f2:01:fe:4a:e9:17:0a:71:3e:f7:48:a9:54:13:57:
1e:0d:f0:13:e6:2c:08:0c:7f:d8:e9:8e:24:3f:1c:
40:2a:17:04:da:e9:6a:77:80:7c:0e:f3:a5:f0:3a:
b0:db:fd:51:2b:e4:af:62:8b:03:3e:e6:31:78:cb:
ad:03:d1:b3:5c:7e:58:de:5c:c8:3b:df:9f:d0:0c:
90:11:2a:d3:e4:39:69:2e:38:01:9b:fe:c9:44:cf:
41:99:c7:6f:d1:02:af:5a:82:37:a6:52:8d:c4:1e:
45:ae:8e:58:a5:c9:e5:e8:2e:ab:34:a3:6b:6a:6e:
04:cf:b6:6f:4f:bd:d7:58:dc:7c:b3:f3:ae:29:09:
07:e5:bd:7b:68:6e:eb:3e:65:49:e9:60:8f:5f:9c:
ca:e2:e9:b6:b3:83:9c:1d:dd:15:72:56:49:39:1e:
8d:a8:f5:65:c5:b8:ae:5e:5d:e0:0b:26:4e:db:f9:
88:1c:06:3a:a6:58:e1:85:f6:69:51:dc:81:ff:fa:
3e:89:5a:9f:96:c7:06:df:79:4a:83:5b:51:5b:5c:
d8:a6:4b:ea:14:f7:44:a2:b4:5b:79:da:b7:90:06:
d5:f1:2b:ab:e6:4c:bb:d7:66:ed:04:81:0c:33:9c:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216320
Signature Algorithm: sha256WithRSAEncryption
14:eb:e2:52:6a:63:6b:3b:a6:f5:0c:5e:51:15:4f:6d:85:cd:
cc:9e:03:6d:a7:08:e1:5d:8e:47:9f:0c:6f:df:27:7d:8e:4f:
c7:99:46:12:5b:98:9e:48:6f:6d:45:1f:e1:18:42:43:a2:6d:
a9:13:2a:37:2d:d9:85:f6:87:9a:08:71:f6:b8:10:79:36:c1:
b4:06:1a:0b:8c:6d:a5:7f:c5:99:d6:5f:5f:e2:fd:47:7e:52:
c5:ef:ce:e6:bf:f1:29:f9:4c:05:cd:d9:21:b8:0e:30:a6:af:
ef:9f:fd:9e:3f:aa:48:62:f8:95:79:36:3b:0b:15:8a:46:9f:
0e:4c:c7:ca:cc:d2:3c:58:d9:c8:0d:ee:c7:57:b2:85:f7:75:
75:10:db:9e:08:19:65:eb:c0:1c:28:c3:97:07:0f:62:0e:aa:
dd:57:5d:f6:d7:82:31:1e:55:5a:b8:bd:48:77:c1:2b:6c:eb:
83:e1:88:04:0a:26:8e:4c:23:74:a3:04:83:6e:e4:91:b0:91:
33:c0:16:db:43:7d:62:86:f4:8c:0e:a6:23:90:5a:48:02:8c:
7e:22:cc:af:fa:2b:d3:43:a2:82:a1:fe:f7:fd:e7:63:2b:ac:
e2:5a:88:89:bd:e3:0d:67:76:a9:97:10:35:a2:c2:d3:91:5c:
f1:0e:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:21 2024 by rpki-client on console-fra.rpki-client.org