Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
File: GUoR_la49HpaFBUDK3f_n7CC4D8.cer (raw, json)
Hash identifier: l3G6IzMB6tZqB7TQ/M8x5rL6Dg8qb/eD7pVLCyXWh2w=
Subject key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801AEBE75A3420F54AEBDD08E4DFF58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41633
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ae:be:75:a3:42:0f:54:ae:bd:d0:8e:4d:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:58:88:91:fb:76:62:56:e5:8e:2d:46:8c:
2b:9f:c3:7d:bd:b7:20:c7:da:84:a0:66:df:2d:bd:
04:16:d8:c8:8b:bf:45:67:ce:41:50:a7:e4:9f:7d:
8c:59:4f:28:45:a3:93:87:b7:76:10:1f:eb:eb:68:
67:33:db:47:3d:d7:cb:02:f8:ab:ec:10:e7:31:be:
d8:ce:8b:a3:78:32:76:1b:93:45:8c:d0:39:27:48:
66:d6:4f:4a:9c:23:f7:7b:d1:09:0d:e6:74:f7:9a:
df:a7:a4:f4:b8:1d:16:97:87:dc:51:66:90:d2:73:
b3:bc:34:e9:f1:98:0f:e3:17:87:10:a4:d5:97:c1:
51:01:ae:f0:93:69:42:c3:a8:3a:c8:1f:70:45:ed:
57:d0:d6:c4:6f:06:e2:05:71:a0:0c:c3:d5:7c:91:
6a:f2:f2:ce:e5:37:f0:b4:bd:06:ac:1e:95:66:df:
9e:ea:d4:f4:26:81:bd:f8:84:97:1c:46:16:10:f7:
a5:5e:8e:7a:18:9a:1a:eb:4f:96:fd:30:b2:e2:1e:
13:1b:e1:e4:20:c7:71:0d:67:d7:de:51:da:86:e7:
e7:d5:78:cc:80:a3:6d:0e:16:49:f0:ae:dc:37:62:
61:05:ce:5b:18:79:20:e0:92:8f:88:ef:17:d7:18:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41633
Signature Algorithm: sha256WithRSAEncryption
7a:a6:c6:f4:da:53:d6:2b:c9:2d:6e:33:bb:e9:ba:93:26:f0:
fc:85:3b:b3:66:de:5e:ac:7a:36:e7:1d:35:38:7d:18:07:a2:
0f:70:fd:a2:9d:2f:8a:25:6e:06:31:a5:82:55:23:1f:15:47:
c1:83:bb:ca:ef:94:95:f0:dc:d1:b7:ce:f2:0f:0e:40:2c:43:
b4:52:db:28:ca:97:8f:86:41:97:75:03:8a:46:fa:48:f5:5c:
3b:1e:5b:f1:48:27:7c:ec:a2:d4:60:01:02:c8:a9:26:1d:df:
3d:75:be:7e:e7:d0:0f:f3:98:8d:b1:41:2f:20:19:2e:70:65:
b3:c7:1a:1f:00:8f:02:26:46:b2:6d:3c:30:d5:dd:3d:d7:b7:
00:9a:d5:1e:44:78:49:21:90:05:0f:9a:2c:5b:ab:0d:86:42:
91:50:5e:4f:4d:bd:ba:6b:48:a0:2e:49:0c:05:98:76:f9:52:
3f:9a:b8:04:e3:eb:e6:84:04:2a:f0:d3:a7:d9:c2:9b:e7:6c:
dc:7c:28:b6:4c:99:1a:35:25:1e:13:e2:dc:f8:94:db:f3:8c:
53:3b:8b:fb:bd:59:15:e8:b4:cd:e9:6a:9b:17:65:f3:79:90:
7b:30:72:36:eb:a3:25:d2:2b:6f:f4:ad:73:1e:b1:d3:81:94:
1d:a9:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:52:37 2024 by rpki-client on console-ams.rpki-client.org