Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
File: 55rcKmJwJwixoO4N87TPkiiW3NY.cer (raw, json)
Hash identifier: 2hH+CkLZEuVMTaJMbV89OjkDp3K+bebFW3/w7krbKHQ=
Subject key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019387A8D68D367C48B1199D9C66A926B21C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Dec 2024 13:56:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202279
AS: 214721
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:a8:d6:8d:36:7c:48:b1:19:9d:9c:66:a9:26:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 2 13:56:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:20:4a:84:20:b1:26:71:d1:6a:ab:82:75:
81:6e:52:f7:48:a9:96:43:c3:32:7a:85:4b:ae:2d:
bb:0b:95:a3:21:a8:b8:9b:4d:bb:1e:4b:2f:3f:a6:
a2:b5:3a:eb:ec:48:67:16:cc:8f:82:68:2b:be:b9:
a1:74:c6:1b:de:66:0e:ff:0a:46:ca:62:43:f6:bc:
09:15:9d:d4:77:c1:82:34:85:bf:a3:cc:2e:96:49:
bf:2d:86:75:f0:49:fa:e8:28:de:c2:37:3a:8a:82:
b6:89:8f:10:fd:c0:c1:46:de:74:66:97:0a:c9:51:
51:dd:a3:78:15:64:38:e4:f6:10:f9:59:d9:83:d8:
0c:42:3b:62:e8:5b:9b:f2:e5:33:d7:35:f1:7a:fb:
a2:5b:5a:d1:74:b5:0c:fb:a2:fb:3c:ff:7a:e8:64:
e2:07:ab:d9:e9:0f:ed:b7:c4:f6:7e:4a:f7:30:91:
66:d0:e0:2b:c9:87:1e:6f:00:7f:40:a7:1f:79:74:
af:68:6f:d9:22:3e:ac:15:02:c2:4c:d3:82:70:36:
33:44:04:05:12:cc:46:b0:13:d8:1c:68:84:36:8d:
b1:1e:30:db:16:b5:c5:0f:56:50:40:c3:31:d8:aa:
b4:f5:09:4c:f9:8f:dd:89:80:a8:93:4c:a8:4f:2a:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202279
214721
Signature Algorithm: sha256WithRSAEncryption
4d:53:8e:68:9b:00:c0:6d:6d:73:fb:3e:d4:99:0b:95:6c:ed:
fb:ab:c3:df:8b:4e:03:ef:1f:0c:02:53:a6:9c:0a:8a:98:b2:
c6:94:61:1b:15:b0:10:88:a4:86:15:63:5a:5b:05:3f:2c:91:
e8:2a:be:a9:4c:30:39:82:bf:15:96:cc:25:d0:fb:10:45:b3:
25:54:5f:32:f6:03:f1:fc:7f:c7:d6:b4:b6:7a:17:60:ab:e8:
92:b4:9b:94:4e:4c:03:af:d8:8b:3c:36:b8:56:5f:e8:fb:2f:
78:7b:b2:dc:0f:f1:1d:01:54:d5:d6:30:93:c8:57:ac:ea:05:
9f:38:8c:78:12:02:33:6c:b5:df:73:36:69:bb:19:79:b7:5c:
db:c8:ec:1c:51:0e:2c:66:74:40:b8:d5:50:46:fb:ab:c8:13:
7f:a0:6b:ac:35:6b:36:2a:b9:49:d0:17:ea:6b:9e:70:8c:1e:
fb:62:c9:b6:a5:ed:53:fd:42:5a:43:bc:40:d3:b6:75:dc:3e:
69:aa:34:5a:54:00:78:9f:cb:b8:54:ed:d9:92:42:10:fc:b2:
4d:cd:52:7d:0f:9c:7a:38:0d:69:93:9c:0e:d6:61:16:37:ed:
7f:dc:de:9b:b4:10:bc:53:71:19:57:8f:f1:df:71:46:5b:d0:
eb:9f:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:55:00 2024 by rpki-client on console-fra.rpki-client.org