Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.cer (raw, json)
Hash identifier: y2u5ReN1Ef0VKGvLOyT3JIs8pkbWSNfx1E54VTN9VCY=
Subject key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ED29298C35E8148D9D72F9703E471E7EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Apr 2024 13:50:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216079
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:92:98:c3:5e:81:48:d9:d7:2f:97:03:e4:71:e7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 12 13:50:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de747196cb8c9dc642337afebf04b204dcd19696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:56:f7:fc:07:f3:c5:4d:fa:f7:d3:f4:cf:
04:4b:8b:7e:ef:ce:26:34:39:db:98:7b:3a:0f:59:
fd:7b:34:b4:33:d4:70:6c:e4:68:9f:d0:cc:5d:e2:
07:59:a7:82:16:3f:8b:f8:57:7f:98:31:e6:6b:01:
51:2e:3a:18:56:79:92:8f:51:fb:94:66:91:71:9d:
44:d1:11:cf:ad:b9:b6:49:44:78:c9:bd:b1:69:4e:
b8:52:3c:56:9e:fc:53:cd:9b:c8:56:5e:7c:60:07:
5e:71:bc:89:93:2f:1b:75:12:19:c1:ae:40:6d:6d:
3a:52:61:e0:14:ba:35:81:9b:27:6a:90:e3:c6:84:
ae:d0:e5:83:94:58:f5:ce:e6:8d:47:d1:28:ee:f8:
71:93:94:fa:6d:dc:89:fd:42:ae:a7:84:b8:19:96:
42:b5:18:7a:c6:71:07:7c:22:e5:fe:cf:df:e3:93:
32:d8:41:d7:df:2b:19:2a:ca:44:34:27:c9:e7:68:
85:74:da:bc:63:f4:98:9e:fa:fd:1c:11:1f:4b:91:
62:60:42:41:fd:58:61:48:8e:19:02:48:37:a2:cb:
8a:df:5f:5d:b9:db:3b:fb:c1:d1:05:2f:5e:db:8b:
7c:2e:d8:ee:cc:0e:13:7a:8a:03:ce:21:5a:91:c2:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216079
Signature Algorithm: sha256WithRSAEncryption
8f:a3:c2:3f:ef:29:17:83:e3:9d:bb:72:13:cd:fa:b4:61:39:
fd:15:63:ea:b8:a0:88:03:08:a8:50:2b:58:a9:b1:f7:03:b2:
53:17:f8:17:c2:67:b3:01:d7:31:19:9d:bb:e1:c1:23:53:4b:
9f:2e:59:6b:bd:ab:2e:68:f6:30:2b:5d:07:c5:66:3a:7a:b4:
63:ab:79:e4:67:ea:93:b7:78:c6:95:db:d2:7e:8b:fd:14:60:
6f:ae:ce:9a:87:96:29:cc:2c:c0:2c:58:a2:49:53:a5:2e:df:
d5:dd:5f:bf:20:f1:1c:1d:61:8d:40:14:66:a6:79:ba:3c:6b:
df:8b:cf:3b:e1:64:cb:05:12:ad:eb:50:b8:31:a4:c3:14:0c:
d4:45:f1:c4:17:32:7f:30:e6:0f:d7:cc:2f:e5:da:f8:54:ec:
9f:5f:56:f3:a9:04:22:3f:f1:64:03:f9:69:40:46:4b:c2:44:
55:6c:1d:c4:66:e2:59:b0:03:20:54:20:d5:c5:70:66:58:f8:
76:26:8e:85:95:d4:5f:be:f2:94:61:66:69:fa:ea:0b:a4:04:
87:bd:6a:ba:16:29:1e:56:45:12:a8:49:4b:eb:0d:0d:a7:0f:
ed:34:9d:73:f6:e8:5d:4a:7a:c3:f7:7e:2d:18:00:33:00:4a:
07:1f:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:31:57 2024 by rpki-client on console-fra.rpki-client.org