Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
File: 6RJGEsq9EBwYyTXtIXdaDlxKibc.cer (raw, json)
Hash identifier: 7jXHuAThNTtdBIpwekSIs8yXpzUgabMe4+MC0PwKT4I=
Subject key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500696E33B1149762C4CA72234A24F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 33976
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:69:6e:33:b1:14:97:62:c4:ca:72:23:4a:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:8b:d4:f3:8c:1f:e1:03:94:44:c8:9e:a1:
15:35:41:de:0d:24:b3:3c:59:39:99:60:2a:8d:a0:
51:de:14:a3:ed:7d:cd:ce:34:78:b2:43:b3:f7:43:
a5:5d:41:bb:d4:21:76:25:48:97:9a:23:65:0f:a5:
f6:6b:cf:6f:9a:e1:9e:fe:75:5f:a4:eb:0e:af:de:
5f:55:24:3c:73:ce:9c:fb:6f:dc:e6:cc:85:79:21:
f1:7b:fd:cd:56:e0:d7:b6:0c:57:09:3d:53:29:e3:
cd:bf:91:14:a1:f2:b1:a3:5b:04:94:c0:0a:cf:a9:
93:2d:4f:60:e6:68:51:a4:40:77:fa:45:c6:4d:7b:
11:5e:86:05:e7:5f:5f:b3:28:d9:fc:fe:16:3b:bc:
63:af:e1:3c:cc:5d:f6:b5:79:1b:cb:88:31:f1:22:
7a:7b:67:2e:95:c4:05:e7:f9:fb:26:b0:7f:ed:41:
ed:01:1b:ca:5b:31:49:e5:88:83:c1:38:9d:63:9b:
d7:9a:f7:0f:c4:39:79:fa:f6:93:92:73:50:0b:02:
84:2e:c0:e1:de:52:19:86:74:87:cb:fc:8b:90:28:
a1:1a:b6:5d:34:5e:06:6b:2f:e3:fd:50:ce:f8:cd:
97:75:a2:81:ce:46:28:8f:50:14:3b:5b:02:71:7f:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33976
Signature Algorithm: sha256WithRSAEncryption
02:41:bd:57:e0:4d:ed:2e:a4:a1:0c:83:44:4f:8e:13:85:d7:
1c:fb:96:66:b2:ce:b4:2b:95:56:db:ee:ab:64:ff:80:57:e2:
15:e6:e5:cd:98:d8:5a:3d:4f:1c:3c:5d:a1:88:cd:5f:d4:cb:
7d:3c:52:85:2c:1d:cf:11:a0:c4:5b:5c:60:16:de:58:04:a7:
98:2e:71:05:74:0b:1d:b2:9f:29:cc:46:91:11:bc:5c:0c:d1:
a4:ab:81:9d:69:29:e6:04:39:45:0d:e8:fc:d7:e2:dc:69:3e:
fd:c1:98:de:16:f8:11:f9:85:aa:5c:f3:4b:7d:49:a7:ba:ee:
a5:d0:57:0d:1d:5c:ae:54:25:ab:34:6d:cc:54:70:87:b1:b5:
3d:b7:e8:7b:76:dd:24:76:3d:7d:e2:b8:82:a0:2a:89:c0:13:
2e:a8:c3:cd:56:ab:2f:c5:43:de:2f:f6:de:0f:9d:1e:ad:1a:
5a:e3:34:d2:34:13:4e:ef:92:fb:57:96:70:d5:7a:72:77:b4:
86:1f:c6:65:b9:e1:32:da:34:a7:df:28:9e:9d:1d:70:b4:13:
05:49:59:85:8a:8f:00:b6:6e:f7:a5:c7:3e:64:4c:2c:0a:e0:
64:1a:18:61:f1:86:ae:1e:9e:5b:74:29:70:11:e3:d2:14:a6:
be:ac:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:32:56 2024 by rpki-client on console-ams.rpki-client.org