Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
File: Ad0iu63J75fJwaOGG21rTE3dhoc.cer (raw, json)
Hash identifier: es3fosjcfkCskUwU0HMDSSiVImWLiGVYfZNfpcZO4gc=
Subject key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE7B28DF47D8C22D1BA022B252BD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12697
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e7:b2:8d:f4:7d:8c:22:d1:ba:02:2b:25:2b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:89:04:d6:ba:ba:f5:2a:bf:14:54:74:b7:
48:84:1e:df:45:02:40:78:84:a5:79:68:58:bb:33:
7e:35:5a:55:61:bf:7a:3f:13:1e:96:31:60:48:52:
fc:0e:7d:4c:23:77:47:1c:72:4a:74:09:84:7e:d4:
39:f0:6e:30:27:b3:b3:3d:a4:7e:0c:ac:76:9f:e0:
50:7c:bf:0c:fd:46:6f:05:cd:79:a4:8f:a9:0e:c6:
d9:22:24:67:be:d7:a4:de:e2:09:d3:1f:68:4e:9e:
9c:a9:e3:38:5f:fb:06:68:cd:6c:ec:28:00:10:85:
50:65:01:fa:3b:f8:d3:42:91:81:3a:31:02:17:6a:
9e:ff:18:ca:33:74:79:04:74:62:c5:26:86:da:3f:
a1:20:28:37:55:a1:4d:42:e5:48:4d:71:79:d2:26:
a1:9d:92:83:21:aa:a3:ac:01:9b:9d:a4:4d:cd:af:
60:5e:b8:7c:37:2a:89:4d:e0:e0:06:ac:87:a1:e7:
0d:4d:ab:de:0c:2e:d0:ab:8b:79:22:ef:34:cb:46:
46:63:a8:98:78:50:75:2c:f1:e5:03:d2:78:76:f3:
32:4b:1e:7a:da:7b:c9:a2:7b:b7:bb:da:ea:62:43:
f8:1e:a2:5b:51:ba:ce:44:3e:1d:8c:44:93:fd:0c:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12697
Signature Algorithm: sha256WithRSAEncryption
17:67:0f:c1:bf:f3:d4:6d:e8:fd:4c:56:d1:b3:a7:7b:fd:7e:
2f:ed:7f:d1:9a:f3:58:5b:32:5d:d9:20:23:c8:16:ce:52:49:
d4:a6:01:7e:8e:68:1b:ff:92:b1:89:c3:ef:71:34:3f:e5:b9:
95:c6:ac:02:7f:37:a0:4e:08:e9:7e:55:cb:2d:4d:16:7a:a1:
1d:f6:00:14:cb:d8:42:d9:cc:8e:46:95:b6:be:38:37:59:c8:
68:7c:a9:5a:ec:3a:89:d1:69:35:eb:e0:2c:4b:9f:c2:a2:e4:
c7:8f:79:c0:a4:99:76:72:40:14:0f:e1:ef:53:56:55:52:48:
ef:78:bd:33:f1:48:69:d9:50:f1:b5:10:83:1e:97:91:ae:d9:
14:c5:58:24:93:a2:d2:07:ad:20:50:f8:5b:3d:50:0d:3f:f5:
bd:78:c1:c3:b0:af:d0:94:b2:1a:ff:80:d6:86:90:cf:b4:1d:
c8:81:f2:18:86:b0:1d:1f:1f:69:d2:4e:6a:53:fe:50:a2:bf:
28:30:a5:36:ef:4b:cc:ca:1d:a3:34:e7:f9:14:52:a2:8d:2a:
05:d8:4b:bc:95:60:0f:f5:f5:c9:90:99:94:21:25:da:a7:4a:
3e:61:dc:c1:0d:60:9b:32:b5:1e:51:eb:67:71:e4:13:7b:35:
22:43:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 09:34:35 2024 by rpki-client on console-ams.rpki-client.org