Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
File: 46ttsqw26Ykzq5momk2cFp6l77s.cer (raw, json)
Hash identifier: zXuAom9iYj2znFAsywDoW0oqa3VMe5T10Zd7oNsYHsg=
Subject key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B69BDA41B571DF5BB1142B125B1437
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44436
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9b:da:41:b5:71:df:5b:b1:14:2b:12:5b:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:f9:05:27:3c:bc:66:2d:09:b1:a0:e8:a7:
9f:0d:41:0e:9c:36:41:ce:96:54:86:d9:d6:30:2a:
5f:bc:2f:a6:2c:21:60:d3:ed:67:1c:e1:3e:48:3f:
3f:84:2a:70:a9:5d:c5:8a:f4:a9:12:1b:34:bb:9d:
b8:8e:ca:aa:31:a8:ed:65:86:11:9e:c7:cb:bc:06:
15:7a:76:20:e2:c2:7c:d2:67:21:fa:5d:0e:35:23:
6e:13:bf:53:62:63:df:3b:bc:5e:05:6a:51:a0:2d:
14:3e:38:73:f3:7f:36:64:8f:9e:d6:05:58:87:d7:
d9:96:58:a3:73:2b:a3:43:15:cc:4b:73:b6:74:12:
ba:89:f3:d8:b2:34:57:dd:da:5b:f3:c3:84:b6:e4:
3d:24:34:59:b8:9e:33:6a:01:b7:94:1c:86:75:55:
7b:47:7f:f5:3b:ab:1f:1e:ef:ad:b2:bf:f9:47:92:
b3:8f:7b:ac:97:7c:a1:de:c0:7e:50:f5:6d:57:f9:
9b:c8:59:cd:8e:06:9b:07:e2:93:fc:66:da:bc:ed:
ac:fb:46:68:43:69:47:25:7c:dd:94:88:3c:f9:6d:
62:77:da:bf:f2:a6:f0:2b:f4:a0:88:70:19:ee:cc:
5b:dc:f4:05:b9:49:be:8b:02:5f:70:fc:29:a6:45:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44436
Signature Algorithm: sha256WithRSAEncryption
32:45:40:8b:b2:a0:40:b6:45:98:e2:52:24:74:e2:61:27:b1:
1e:1b:21:08:e3:e3:b8:5c:40:8d:a5:2b:4c:70:c0:db:97:0d:
a9:8c:7a:68:b9:0e:31:bb:0b:e9:b6:a4:45:63:b2:6e:fc:9e:
ba:60:b1:e4:3a:e2:77:1d:b9:ee:c0:4f:8e:9f:b5:fa:35:ad:
c0:7e:c8:64:74:cc:31:95:6c:78:b8:18:9e:d8:65:f8:90:d4:
3d:f4:a2:2a:84:ee:ed:c8:1b:3a:2f:4c:f3:44:8d:66:ec:da:
7a:cf:2c:a2:16:58:ba:e4:07:71:18:16:35:84:fe:fe:d7:e4:
9d:9f:76:30:51:51:07:95:49:69:d0:a9:7b:e4:10:a6:33:ac:
2f:fe:c0:ee:6d:66:67:c8:84:d5:39:83:e4:fb:52:b1:cb:a0:
d4:58:a7:77:05:e1:f2:27:c3:cf:45:e0:29:fe:2e:22:71:e3:
96:e9:c7:af:02:7a:77:e6:28:76:eb:e9:9e:66:e2:c7:2d:4c:
a8:6a:60:4a:c2:81:64:5d:70:a2:c1:7e:ce:34:6d:32:03:ff:
c7:ab:74:cb:58:f8:3a:1d:9e:3f:81:bb:8a:b6:ff:5f:6c:6b:
f5:85:7f:39:f9:68:b6:18:ad:2f:d1:b3:dc:52:9e:91:e2:87:
0b:4d:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:55:09 2024 by rpki-client on console-ams.rpki-client.org