Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5xNA73FJiU-wvdoJe89dAWyIGqQ.cer
File: 5xNA73FJiU-wvdoJe89dAWyIGqQ.cer (raw, json)
Hash identifier: exs+A2HBGPd8u+4v6+U7io0Evqi3DANBRXzvDS/2860=
Subject key identifier: E7:13:40:EF:71:49:89:4F:B0:BD:DA:09:7B:CF:5D:01:6C:88:1A:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D07F4015C0D1E56C2C819A05FFABF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216198
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:f4:01:5c:0d:1e:56:c2:c8:19:a0:5f:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e71340ef7149894fb0bdda097bcf5d016c881aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:4a:c9:00:05:72:ae:ad:fa:e9:a4:fd:83:
f6:37:6b:dd:77:e6:8e:73:2f:d3:36:f1:18:90:2b:
cd:d0:70:06:66:79:34:1f:91:0f:58:2d:99:48:8c:
ac:17:31:14:f7:66:26:a3:be:50:9c:30:c7:e1:9f:
46:85:91:09:83:08:f4:07:5f:8a:ae:c3:5d:0b:e2:
09:7d:53:94:70:de:d1:e4:d2:f4:02:64:fc:be:41:
3b:ff:26:07:6c:f6:f8:56:a1:70:99:d3:21:3e:43:
8e:0e:59:fe:95:24:3d:88:70:d9:79:ef:bf:d9:4c:
fb:78:c4:97:f8:b4:cb:7f:d7:fd:11:a5:b7:c1:ac:
43:27:8d:bd:0f:63:0b:d6:de:3d:37:a3:20:2f:42:
ff:62:27:c5:74:3e:99:eb:97:b0:e9:bc:88:45:c7:
a9:f2:cb:27:fc:0b:a2:fe:6d:dd:8c:a5:89:8a:84:
88:03:b2:13:a1:2a:31:ed:42:c4:fa:05:51:39:86:
64:2c:d6:13:a2:fa:c1:c7:5b:ca:35:4d:e2:1f:8b:
84:d2:30:39:4c:b3:9a:32:1a:da:bd:e2:e3:27:d2:
d0:85:07:2a:82:10:3b:7e:64:dd:13:e7:ef:ee:ce:
58:d4:cb:70:bf:37:d6:28:4d:39:4b:6d:57:0e:f3:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:40:EF:71:49:89:4F:B0:BD:DA:09:7B:CF:5D:01:6C:88:1A:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216198
Signature Algorithm: sha256WithRSAEncryption
85:2c:7f:fc:4d:7d:b3:1f:71:15:41:a8:6b:f0:5b:6d:50:f0:
46:f9:0e:c7:6f:2f:6d:6f:ed:13:22:15:ab:12:8e:ec:e2:2e:
1a:3b:99:a6:6d:50:e8:51:08:9d:17:22:6a:99:19:2c:e6:29:
9d:77:62:b1:f3:fa:53:24:42:31:49:3b:77:ac:59:2c:30:54:
a7:6d:e1:e8:dc:c5:74:ff:68:1c:8e:f6:14:a6:11:5b:84:b1:
49:2a:c3:e6:b7:45:c0:0a:f0:44:53:cd:f8:42:08:78:39:51:
98:09:84:70:ce:49:e5:89:34:41:83:9a:3d:f8:b7:4f:77:89:
ec:af:ab:aa:2e:d7:29:0c:05:0c:17:bf:89:1a:96:d7:22:dc:
d9:af:a1:7d:8f:69:91:86:09:ed:c3:0b:68:75:41:35:a5:d3:
f3:40:ab:06:9f:83:05:5f:54:27:d6:b8:66:fb:21:ac:b2:b3:
b7:fc:c2:4c:ed:46:ce:ce:ce:9f:44:f9:95:26:97:3b:ae:b3:
eb:ac:8e:cb:45:a5:d7:e4:49:20:1d:10:93:f2:d5:d3:03:9a:
58:45:a1:52:39:93:7f:f9:a1:e5:d8:7e:76:48:02:22:0e:63:
a1:a0:da:a3:de:10:34:c1:08:df:bc:ed:cc:6c:71:22:5c:ab:
f5:89:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:43:23 2024 by rpki-client on console-fra.rpki-client.org