Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
File: 3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer (raw, json)
Hash identifier: Czl1xkblXwx198PNO6K36oha7e+48MtaMDFuCoOZpmU=
Subject key identifier: DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4935B8F6D6EFA1A6329E461E05CE600
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203626
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5b:8f:6d:6e:fa:1a:63:29:e4:61:e0:5c:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df1e9d52748b165175263e50d010a6fb059bcd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:25:64:b2:fd:7d:83:52:10:3e:17:75:80:
41:88:72:93:23:17:11:a7:9d:fb:07:bd:c1:75:95:
72:88:57:70:7f:7a:0e:6b:47:10:29:91:76:26:0f:
f8:a3:38:b9:91:9a:b7:16:c8:f5:4f:e6:f4:61:74:
d4:9d:73:c2:01:62:93:77:43:49:d3:ca:77:cf:3a:
64:29:c1:30:20:c8:7b:7f:7a:8b:91:6f:8b:c5:08:
aa:1d:9e:fc:9b:93:6d:50:f1:7a:3d:36:ea:a4:83:
3b:72:09:d3:d9:8f:75:4a:5f:95:00:bd:ed:d8:c0:
6a:59:e9:e9:7e:c8:6e:11:da:25:57:e6:25:59:b8:
23:53:49:66:54:1b:ae:fa:ec:a2:66:64:8d:15:d6:
55:93:d0:79:57:75:d4:75:28:78:11:ef:04:76:bf:
7c:ca:1d:6d:5e:2e:00:42:71:00:b9:04:6f:4a:8a:
1c:38:be:b0:20:5f:90:b5:0f:a7:29:73:8b:53:42:
f4:cf:a0:a7:e7:ea:13:bc:42:6c:e0:c4:7f:c9:89:
44:86:bd:ea:37:9f:59:87:b9:b3:76:df:2a:9a:70:
44:aa:bb:90:61:e4:69:51:47:14:43:ac:94:dc:2e:
3b:f3:b9:2f:fa:e9:df:7e:54:be:65:37:b4:22:7c:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203626
Signature Algorithm: sha256WithRSAEncryption
15:90:fd:75:bf:7a:06:67:74:d0:e7:b3:e7:e7:9c:fb:df:3a:
ae:61:e4:ba:57:fe:82:ab:bb:57:54:81:e0:36:fc:49:a2:f6:
db:69:4e:68:81:6c:d4:89:c0:72:42:1a:3f:36:49:41:7a:62:
0b:bc:b1:30:96:bc:83:06:34:43:8e:8d:72:64:7d:7c:56:28:
b7:4f:1e:bf:09:57:41:60:20:dd:da:56:6f:69:1f:5a:fe:c4:
16:c1:79:01:55:54:7b:a8:3d:35:ad:62:ff:8e:53:74:db:4f:
6b:28:0e:1b:d9:72:0c:29:1d:49:86:77:9a:14:5a:0a:74:32:
11:14:70:e5:ca:be:09:12:be:d2:d7:ec:ee:02:47:28:2b:89:
ad:b1:0b:cb:f2:ed:c0:1c:58:95:4e:b8:08:82:1a:9a:52:af:
e2:7f:10:ad:90:55:3d:84:3c:a3:26:0c:35:c2:8a:0a:dc:09:
a9:3d:b5:97:d6:b5:da:6b:29:aa:fd:92:a0:17:50:da:7e:f7:
10:87:11:fd:ba:ff:ca:f4:33:f8:fa:37:4c:1e:0f:b4:cb:9d:
9a:22:2f:e1:a5:0e:26:e6:e6:0e:ed:b3:94:26:74:bb:a6:d1:
27:87:0d:42:be:11:13:86:a6:a8:17:63:27:f4:b7:be:97:0b:
eb:67:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:20:47 2024 by rpki-client on console-ams.rpki-client.org