Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer (raw, json)
Hash identifier: HhdKiyshWpqI5c3T2SbzdofQMBR0Ux11aBDRDZWXI4A=
Subject key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8018AB64B6A3D1FD195CED6CE5F621D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44024
AS: 47687
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8a:b6:4b:6a:3d:1f:d1:95:ce:d6:ce:5f:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:69:43:2a:aa:1d:00:3d:99:eb:a2:79:d4:
c7:53:ab:2b:0e:61:70:01:47:6d:06:be:44:5c:4b:
d4:c8:4d:3c:a8:d2:cd:f5:f4:c8:17:13:af:ba:f9:
2c:65:6f:a1:3f:94:8b:a0:62:02:44:2b:c0:ed:6f:
a0:c3:7a:af:9a:e2:02:8a:02:f9:bc:30:a5:8d:f4:
c6:e4:07:52:bf:54:f2:08:21:fc:ed:8b:15:e8:34:
4c:75:1c:62:5b:74:4c:d3:c9:fc:07:9b:7d:95:d9:
98:c1:bb:a2:06:3a:0a:b4:43:39:5f:74:4d:d5:7c:
28:ee:4c:fb:4b:0d:58:02:c7:0a:24:b3:ec:7e:4d:
ae:c9:90:93:2d:f1:1f:5b:e5:92:f6:83:bf:69:1c:
94:dd:5e:75:5f:ab:20:79:12:c5:23:e0:54:38:fe:
3b:e7:40:b1:6a:29:cf:0a:7c:f5:99:df:9c:b7:c6:
d8:e6:91:15:09:d8:f0:ae:70:db:7b:7a:45:4a:4b:
5d:e3:3d:8d:f3:14:bb:35:8f:df:93:c4:8a:92:f5:
cc:73:07:6c:08:c5:42:8a:c2:73:ee:47:f3:26:f6:
19:d8:cc:14:2e:5c:5b:48:4a:6c:f3:1e:82:54:0f:
b1:64:5d:8d:1f:56:5c:32:a2:ca:5f:ca:86:96:e6:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44024
47687
Signature Algorithm: sha256WithRSAEncryption
06:ff:bd:cb:57:c9:31:b8:fb:5c:20:e6:09:e3:06:b7:cc:3c:
a9:af:37:f6:d9:15:83:eb:ff:18:cd:24:d6:a1:ab:18:1e:bd:
93:b3:5b:5d:cf:88:7d:d6:24:04:89:20:78:44:ea:6a:4c:b6:
9f:33:17:e5:11:f9:3c:cf:26:7f:a2:50:ec:8e:7f:31:68:7f:
d1:2f:f5:ec:eb:3b:a4:5e:d1:30:86:dd:2e:51:fc:b1:e3:7c:
24:0e:47:1d:b2:da:54:d8:5d:9f:56:38:91:c2:90:91:1d:42:
cf:31:cd:70:71:89:a5:b1:09:be:aa:4e:5f:bb:8c:ab:6e:34:
b0:cc:0b:97:ab:1c:9c:2a:a3:36:45:41:61:2a:63:bf:82:30:
f5:56:11:e8:98:ac:5e:44:67:58:24:a8:7e:0c:9c:e1:e1:4d:
a2:2d:a9:f6:cd:ea:17:7e:9c:a7:fd:8d:0b:23:86:ec:d7:92:
14:8a:f8:93:23:c4:40:3a:44:f7:85:25:11:ed:5c:8e:5f:35:
16:d2:6e:b7:23:ef:6c:11:32:01:a9:b1:e6:8f:8e:0d:8c:28:
16:0c:7f:a8:64:a6:f7:84:4a:b6:cd:e3:e1:cb:5c:8a:fe:2a:
40:cd:3c:d7:92:62:67:53:cc:ec:30:03:94:ea:b0:75:8b:57:
f6:56:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:05:37 2024 by rpki-client on console-fra.rpki-client.org