Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
File: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer (raw, json)
Hash identifier: oCNgSDGfPaNOi5iIoXBeAqbp2tUZnxeGh4wt/crMR6k=
Subject key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275E01C514FFFBC1D103A307492905
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208029
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5e:01:c5:14:ff:fb:c1:d1:03:a3:07:49:29:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:39:4b:c7:6f:46:75:94:3f:1c:1b:b3:12:
a1:1c:6a:75:8f:37:13:af:42:a2:87:40:e3:5c:a8:
c1:a3:e9:b2:da:82:b7:1c:9d:1c:d1:d1:71:96:ee:
1c:34:28:59:3c:da:e3:de:7b:b2:a2:fe:51:64:58:
76:9d:54:85:e1:97:17:c0:73:a1:15:de:bc:0d:0f:
26:60:d8:80:c6:6b:af:a1:99:f5:45:8f:ed:7c:4e:
fa:e3:57:4e:e4:1f:65:e5:e2:45:11:87:96:96:69:
ed:45:e4:c8:07:07:64:32:dd:e6:5c:ba:85:2d:0d:
65:ed:cb:6b:8e:95:05:27:fc:2d:22:05:fa:5a:a9:
06:35:59:6b:b6:2a:f9:e4:0a:48:ae:b8:e2:71:f1:
1c:a9:9c:f9:8c:5f:41:22:b2:7d:95:95:d1:6c:52:
90:19:d0:fe:a2:ae:50:67:96:a1:52:8a:d6:0c:1c:
dc:c4:d7:4f:83:6e:92:8a:f6:ef:f1:c1:be:c0:50:
35:ad:ac:34:ba:41:0e:c4:f4:66:b6:8e:6e:78:dc:
3a:58:ac:e3:3d:47:69:3d:e1:1b:e1:b9:34:98:60:
71:be:16:ca:b7:a8:16:12:ee:48:ed:d7:2e:33:80:
14:3c:ee:b3:7e:e3:55:be:aa:72:03:3f:02:55:aa:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208029
Signature Algorithm: sha256WithRSAEncryption
a2:2e:13:20:30:8f:d6:2e:a3:26:5c:a8:f3:eb:bb:f2:7f:0f:
55:58:a2:75:9b:d5:13:b4:45:c8:a9:11:fd:d6:53:db:90:c8:
c5:d6:db:5e:0f:96:be:dc:a8:ca:69:a0:37:46:cb:1e:68:06:
37:36:6a:87:f3:bc:9b:dc:f3:cb:6a:b1:11:df:ca:8e:60:7a:
09:df:74:44:da:8e:b4:46:ce:c5:3e:a4:19:b9:cc:3c:9c:8e:
73:ae:65:b5:0c:66:04:29:29:bf:02:3e:25:f4:b2:e3:82:64:
6e:8a:b4:fe:3e:ad:bb:e1:08:fd:23:64:19:93:fa:e2:dd:e6:
bf:81:14:9f:09:d3:2c:9e:2a:64:93:c3:cb:cc:da:fe:f4:ff:
c3:18:16:23:a0:99:cf:07:f9:6b:fa:6d:9e:ea:7d:b3:cf:31:
ba:8f:2c:e0:67:e5:ce:45:a5:93:4b:41:cb:5f:55:b6:24:3d:
bd:6f:00:bf:c7:ec:25:c4:8f:7c:2d:02:45:77:e8:ad:be:d1:
ba:6c:20:f4:fb:c3:30:d0:23:7a:a1:a0:4b:b2:98:dc:52:ac:
84:2f:ee:e1:c3:da:d3:3b:43:3d:63:c3:5e:e4:05:51:2c:23:
98:0b:ae:1c:c9:e8:df:85:b4:06:7d:0f:a8:88:aa:89:4d:40:
7f:61:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:24:52 2024 by rpki-client on console-fra.rpki-client.org