Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.cer (raw, json)
Hash identifier: 9W7CY2Bkyg5sUFcgyKsBNtWPJsZSiRUCi7dIOEeTOS4=
Subject key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349257ED439B132EB42431D55B5B334
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59513
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:25:7e:d4:39:b1:32:eb:42:43:1d:55:b5:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:f3:4d:dc:65:f3:a1:6c:4c:34:2b:e4:88:
94:69:af:5d:d0:10:c1:56:5c:23:f5:15:47:47:bd:
40:b0:a6:d4:bf:1c:06:1f:49:63:34:69:a2:ae:62:
cf:ae:f2:0d:89:6a:a8:1f:6f:49:b4:45:d0:7c:5f:
30:52:9a:0a:6a:b3:a3:c9:16:f6:4b:5a:ee:10:55:
2d:62:44:51:de:ee:c2:8d:6b:f8:29:4e:1e:0b:22:
6b:4a:09:a7:27:bf:3e:c5:c8:7e:0e:42:ed:c0:63:
56:39:87:58:fc:22:bc:50:e4:fd:99:77:c6:17:39:
7b:f6:f9:24:64:65:44:b6:10:ca:48:8f:05:ef:88:
d4:e2:05:5e:14:f0:a0:2c:c6:86:9d:90:a4:77:14:
52:9d:c2:dd:55:2c:7e:94:e9:98:6e:9a:82:89:61:
c9:c1:9e:f6:6f:0b:7d:d7:14:83:51:2d:44:b0:15:
e6:9e:11:c3:e2:a1:6a:90:8f:aa:30:ee:1f:9f:43:
6e:88:2c:38:63:3c:85:66:fd:61:2a:9c:b6:fc:42:
b6:3a:da:dc:2f:95:b2:bc:d6:13:f6:be:6c:f7:19:
78:c2:f7:5c:e3:7d:e6:bc:4c:da:20:ea:9d:9c:b9:
85:09:2a:80:cf:eb:8a:15:5a:c7:7e:ac:66:ce:61:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59513
Signature Algorithm: sha256WithRSAEncryption
2c:11:ba:da:33:27:cd:03:a2:74:2e:e6:8b:fb:4d:47:e8:c3:
06:57:5a:d0:4b:04:e3:f3:ea:4f:9c:fd:6c:89:d5:cb:6f:b6:
e9:66:81:b6:cd:61:eb:1c:e0:58:fb:29:ea:bc:88:06:2d:d7:
9b:f4:be:a5:84:50:e6:68:3c:e1:5b:66:e0:54:a2:13:96:5f:
f2:94:8d:ee:d4:8e:b7:ab:7f:3d:33:45:39:62:4f:7c:e2:46:
fa:0c:c0:e2:99:d8:fc:eb:56:cb:0b:fb:22:cd:1f:4d:39:6f:
67:7d:38:39:81:92:7e:e3:83:17:da:26:42:8e:b9:29:86:98:
10:69:b7:90:63:9c:1b:e2:58:0c:6f:f1:8c:b2:e7:ea:3b:d6:
a8:d6:5e:8d:06:9e:38:a1:a4:3e:21:9c:1b:c7:b2:c7:a5:53:
b1:1b:59:dc:85:31:ca:b5:df:3a:c8:99:d0:dc:f4:1c:48:de:
b6:ee:6d:c8:44:34:e4:cb:00:ce:40:10:9b:e0:e1:9a:af:01:
a0:95:b4:9d:13:2b:c1:fe:c1:93:aa:cd:09:0d:72:a5:16:ad:
23:e2:2b:55:e5:77:e7:bd:1d:ff:83:18:f5:16:0c:90:9b:b8:
67:58:bc:f3:2c:0e:72:96:cf:aa:c8:f0:ca:d8:28:b1:b0:8c:
0d:6e:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:45:50 2024 by rpki-client on console-fra.rpki-client.org