Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
File: BSLIJ03EQgYXFxrL8pML6bi1bWA.cer (raw, json)
Hash identifier: RHp0E0ahWdvpkXzbozv/ktj7EjEzdC0TmtOOuP1NM9s=
Subject key identifier: 05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191B32C64906DBD4751AF5D98A795510124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Sep 2024 14:38:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214702
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:2c:64:90:6d:bd:47:51:af:5d:98:a7:95:51:01:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 14:38:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0522c8274dc4420617171acbf2930be9b8b56d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:67:1c:05:4c:f4:8c:10:d2:a0:19:63:95:
df:dc:c9:09:44:fc:db:59:50:b9:d5:d7:f3:f8:6b:
93:07:ea:f5:5c:5d:18:07:aa:32:65:e8:cc:3a:2e:
b8:d3:ab:f2:d1:8b:43:2d:6f:e0:1a:cb:c8:45:97:
1d:54:eb:12:1f:33:a7:68:4a:7d:c7:d0:1c:11:cf:
37:47:de:eb:b4:62:17:53:ce:05:c3:79:19:7b:1f:
b2:df:58:8f:e3:31:b8:72:2f:66:f0:46:62:1b:57:
a6:14:bc:39:89:c9:f1:b6:b4:74:24:0a:55:51:3e:
28:2b:84:71:ad:31:0e:92:98:88:5c:67:cd:7d:eb:
e6:88:e1:5b:f3:cb:81:f8:88:1d:ca:cf:a5:1d:83:
c6:02:66:d4:fe:a7:13:71:22:d0:7e:55:91:e5:62:
be:7e:45:38:74:8a:9a:dd:64:59:de:45:e7:0d:cb:
2d:cb:3c:94:dc:5e:e1:74:e4:9b:52:89:77:da:dc:
2c:a8:9a:c1:79:0d:35:23:47:e7:cd:24:f4:6b:a0:
3c:ca:9c:f6:85:af:85:6d:1d:56:be:64:1f:93:e9:
4d:c2:7a:fe:1a:88:9c:10:36:98:72:3d:04:16:90:
ea:a7:0b:18:d7:1c:58:ac:65:a8:7d:c6:49:d4:73:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214702
Signature Algorithm: sha256WithRSAEncryption
78:3b:7e:20:21:c8:f4:20:d6:f6:1e:9d:88:00:2f:77:2d:f6:
58:ce:17:c4:b5:0e:1e:3b:42:6e:32:92:ad:d6:72:3d:3b:bb:
16:18:1b:53:ac:2a:1b:71:80:94:4d:a7:dc:0b:41:f9:d7:99:
12:0a:4a:cd:f0:f0:73:56:4a:f3:e9:8f:5c:bc:34:24:dc:c5:
07:4f:27:a8:02:6a:96:77:40:c5:51:6b:41:9f:28:fd:d7:98:
0c:33:42:26:53:0f:7d:6d:1f:c4:08:59:c3:37:bd:4a:a3:9e:
b5:ac:18:9f:1d:2e:37:27:00:4d:15:e5:a7:cd:89:c8:98:54:
ab:90:6f:f1:02:df:12:a3:ad:1e:1f:d3:51:4c:ef:5e:5a:c9:
42:5d:ec:d2:69:ad:0f:8d:19:87:48:54:57:fc:dc:88:e2:05:
42:de:0d:43:e3:a2:59:85:e0:f7:27:5f:c8:e9:30:b0:18:21:
49:b8:eb:2b:d9:8e:0c:25:a8:2e:63:fd:ed:cf:e0:58:5b:27:
40:96:71:d2:44:af:4a:42:ed:48:4a:6e:72:40:8d:ee:ad:f3:
00:c1:6c:aa:2e:34:78:1c:76:95:4b:3b:23:e5:90:df:2e:0e:
6b:c0:5a:cc:de:e3:3c:22:df:44:c8:76:27:1b:a5:87:2d:c9:
3c:f6:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:04:31 2024 by rpki-client on console-fra.rpki-client.org