Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
File: CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer (raw, json)
Hash identifier: XAohuc2l1Q+nWTBOzazqBs2Fl5qwE8JvzguR70PGCUk=
Subject key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79371D9BBAAF4B66B1D717D419188C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210796
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:71:d9:bb:aa:f4:b6:6b:1d:71:7d:41:91:88:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0817255df3130bdb77fc37187d06005fee066724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:a6:88:c7:6c:97:c5:99:b6:07:f5:5f:f4:
be:2f:2e:c9:24:a8:b8:09:ad:11:b6:c2:be:79:f1:
ae:79:b0:e3:97:d7:48:e8:87:38:92:5a:f0:0c:6b:
a0:ca:18:62:5c:7c:f7:5f:87:81:02:f7:a0:45:01:
f7:c9:b2:9e:b1:60:e8:f4:70:29:a7:55:af:73:2e:
ad:7a:99:9d:c9:ac:e3:df:bc:73:97:39:5c:db:36:
c9:32:af:ed:46:90:03:e8:5d:ae:17:d0:d0:04:3b:
d3:8a:f5:f4:54:50:1b:bc:bc:63:db:af:82:82:f8:
45:51:aa:6a:6d:61:c2:37:af:ba:5a:ea:c4:67:da:
a8:80:ef:ce:f5:0e:09:22:ba:9a:22:00:50:08:b6:
ec:ca:92:21:20:ed:dc:a6:90:25:0c:c3:d6:f9:fd:
40:aa:62:c8:1b:8f:11:6f:69:2a:23:b3:b8:13:ed:
db:63:fe:17:ba:76:80:27:a8:78:ba:e4:e1:1c:ba:
b0:e6:48:97:2b:29:15:45:03:69:5a:3c:ed:5a:e4:
58:16:df:06:a4:da:55:0c:45:81:74:2f:40:bc:c9:
6c:cb:9c:5e:e3:00:81:8d:31:87:6e:44:59:36:a4:
da:fa:31:df:0d:fd:17:08:bf:bc:da:2e:61:ea:94:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210796
Signature Algorithm: sha256WithRSAEncryption
74:ee:e5:37:fe:5f:71:c1:b0:bd:54:c3:bb:9a:74:92:98:9b:
1a:20:2c:c9:5c:84:b5:1c:23:67:84:6e:8b:57:7e:3c:cc:2f:
f1:02:28:c4:69:98:21:24:8c:26:ca:b7:f1:13:d7:60:2a:79:
65:98:42:7c:3c:6c:37:63:b2:ed:53:7b:77:36:2d:cd:51:45:
07:a9:9a:51:ea:bd:d2:81:29:c2:70:21:c8:7b:97:ec:48:78:
15:72:e7:79:4b:0b:a3:38:41:b6:11:09:87:5d:a4:72:28:f2:
a2:42:57:e7:f9:f0:28:63:6b:75:78:c4:b6:db:2e:18:7d:a2:
9f:8f:99:3c:70:b9:04:e0:37:bf:eb:65:0c:95:40:a3:5a:8e:
6a:23:9a:f5:1b:71:23:fd:15:e7:91:3c:d9:9e:9f:fe:da:fa:
aa:d4:2e:f4:b7:6c:8e:21:3b:fc:9b:c5:f8:7b:54:2a:4a:45:
dc:c9:ca:20:6b:27:47:0f:88:87:8c:12:ff:11:f9:22:0c:40:
0f:de:1e:03:3a:60:79:7f:3a:48:9f:01:25:9f:43:e3:d9:73:
e0:52:dd:27:89:2f:80:8f:25:a6:c6:4d:62:ab:db:89:05:91:
c4:17:61:e3:ca:99:fa:b2:b5:32:62:00:e2:cb:64:b5:30:7f:
a6:d3:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:19:03 2024 by rpki-client on console-ams.rpki-client.org