Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer (raw, json)
Hash identifier: tY7wX0iEQQyYGCyh8eP1z+/PmS4jv9Kg1bdtfjnpksI=
Subject key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A0BDA3E75F2456032B50508849B22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202704
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0b:da:3e:75:f2:45:60:32:b5:05:08:84:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:5a:30:0e:ff:14:77:9a:ec:3a:7e:56:bd:
4b:5d:f3:2c:f5:b2:23:34:f2:a0:61:7b:63:72:e8:
a1:1f:7c:43:ff:e0:c9:a3:62:b7:8e:6e:ea:87:dd:
69:99:89:be:68:08:d1:4a:d4:2e:0c:e5:af:2b:6b:
9d:8c:3e:82:91:3c:6f:5a:5a:8f:5c:b7:49:9a:e6:
0d:e7:89:bc:bc:40:51:ac:11:81:97:ca:45:ab:43:
7a:3a:43:39:2b:76:59:e1:8f:81:6f:e1:dc:ba:0d:
42:77:45:5e:c5:48:8f:80:4c:71:38:4f:83:2a:e5:
c0:21:bc:ec:0f:ab:c8:af:9f:25:fe:5a:53:d4:cf:
2f:3f:a2:dc:a8:e5:51:1b:f3:2c:88:ca:9e:75:40:
b0:26:5d:31:f5:ae:0b:1b:b6:f5:8d:df:b4:16:cf:
ff:fd:76:c4:25:f7:5b:eb:37:62:ba:b6:09:aa:89:
3d:7e:fa:e5:4e:9a:ba:25:c7:e2:50:fc:e9:97:f3:
35:d0:fc:d4:7b:90:ad:92:2b:a0:cd:6f:06:f1:5e:
1f:04:67:aa:fd:b2:9e:b2:64:d6:7c:23:db:38:45:
3c:0e:71:a8:fa:7d:ea:5e:7a:b1:d2:ec:f8:05:07:
7f:43:eb:a1:c0:44:70:3f:86:fb:62:d6:51:e1:a3:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202704
Signature Algorithm: sha256WithRSAEncryption
46:64:c6:e0:5a:fd:bb:d7:00:16:c2:5e:16:3e:c3:53:fd:bc:
f8:8c:5e:12:ea:73:bc:ed:9b:18:13:47:ef:1c:57:49:c4:a8:
5e:a7:78:51:b7:47:70:f1:10:a2:62:5f:da:2d:0f:8f:56:eb:
b0:0c:76:d6:ec:47:e8:64:b5:4d:3d:ea:45:52:0e:45:60:98:
78:80:4e:b3:29:26:35:95:73:97:a3:05:c8:c1:0f:80:11:ab:
04:4a:5b:57:30:d6:40:f8:0e:eb:28:52:fa:ff:31:b8:0d:84:
30:1d:78:11:e0:d1:af:3e:17:60:63:96:71:57:4e:95:18:f6:
7e:8e:25:fb:cd:67:5c:e0:19:a5:7c:19:cd:60:f1:ae:41:36:
56:57:25:7e:b6:4c:70:92:32:16:7f:5c:11:3b:33:13:c2:d8:
75:38:a5:da:22:3f:0e:02:de:bf:28:35:18:e9:f5:de:a8:cc:
3c:48:21:b6:51:26:3b:aa:f2:cd:f6:18:92:46:cf:a2:55:99:
4a:1d:1d:17:f4:06:6f:21:6c:4b:5f:ec:54:8e:1e:ca:9f:21:
d4:4c:d9:3b:c2:43:66:8d:eb:ae:23:c9:47:79:46:7a:f0:50:
46:bf:29:30:70:71:85:71:dd:4d:70:34:df:73:d7:36:72:f1:
1a:8a:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:37:23 2024 by rpki-client on console-ams.rpki-client.org