Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OAmLCys4zXu0_x3Xsn7sjPZ9Vak.cer
File: OAmLCys4zXu0_x3Xsn7sjPZ9Vak.cer (raw, json)
Hash identifier: 8BCDgX1CgFuokLlr2njTf6e4ryxg5+y4G45aIfRbiN4=
Subject key identifier: 38:09:8B:0B:2B:38:CD:7B:B4:FF:1D:D7:B2:7E:EC:8C:F6:7D:55:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC45C0D8DD222C4576DA8249994992590
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8/38098B0B2B38CD7BB4FF1DD7B27EEC8CF67D55A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 09:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60743
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:5c:0d:8d:d2:22:c4:57:6d:a8:24:99:94:99:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38098b0b2b38cd7bb4ff1dd7b27eec8cf67d55a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:8e:73:1f:ab:01:b9:72:e1:30:e8:ae:20:
fd:c8:8c:f2:5a:70:9e:c5:30:b8:88:97:a1:fc:22:
4c:63:12:c9:eb:24:ee:2a:10:cb:27:c2:28:b0:b3:
4e:9c:89:81:31:ef:40:10:88:e9:3e:03:34:19:ef:
4a:11:84:25:d1:75:ee:95:f7:5e:11:0c:7a:83:e3:
23:96:36:29:c7:82:83:fc:4b:4c:b5:84:6d:27:e3:
ec:0d:ac:75:e1:5e:9d:52:00:96:b2:5b:88:b3:84:
e8:ee:76:21:25:50:ac:de:79:ee:6a:cd:f2:eb:3c:
94:db:10:f6:e5:46:74:e9:dc:f2:f1:2c:4f:81:51:
17:d3:15:07:2a:2a:19:0a:2b:38:27:62:cf:f0:3b:
56:68:37:24:eb:f7:24:49:5d:ab:10:e2:e1:35:cc:
85:7b:c7:a2:56:ec:de:2c:7d:b0:5d:81:b9:bf:87:
be:f2:a5:82:01:71:aa:95:47:b6:62:fc:8b:06:1d:
d8:2d:a5:8a:ce:1c:85:c3:e6:d9:0e:3d:35:a9:cc:
31:29:78:fa:df:3c:da:af:e9:3c:6e:f8:63:ee:bd:
dd:9f:04:0a:33:57:df:d6:9d:1d:9b:65:32:db:5e:
d7:4c:93:c2:9e:b6:a6:9a:fc:14:61:df:37:71:20:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:8B:0B:2B:38:CD:7B:B4:FF:1D:D7:B2:7E:EC:8C:F6:7D:55:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/8/38098B0B2B38CD7BB4FF1DD7B27EEC8CF67D55A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60743
Signature Algorithm: sha256WithRSAEncryption
3b:d3:1e:89:29:d6:c7:91:aa:82:ba:8c:d8:91:ac:bc:0c:e9:
72:dc:fd:1f:71:4a:49:48:a5:ab:70:fb:a6:3a:76:d4:75:46:
02:e3:4a:f0:d7:67:a5:1f:04:dc:54:0e:db:74:7e:db:99:06:
ee:52:3a:42:76:cc:89:fc:53:d8:7c:d1:41:0f:e4:a3:a1:04:
01:49:74:13:2b:56:2b:58:b4:fc:76:8e:23:f5:5f:31:ce:fa:
89:44:e5:70:b5:66:e1:e9:64:60:1d:a6:42:26:9d:58:04:42:
f8:69:ce:52:8c:5c:cd:4b:d7:34:f5:a8:91:99:8a:a5:ee:2d:
4f:ab:0a:78:86:c6:9a:41:58:4b:77:04:d8:ee:00:24:c9:16:
26:21:dd:f6:bb:65:af:7b:75:5a:89:6a:85:ae:38:2f:10:bf:
8c:44:b8:e0:cb:1a:94:72:09:e4:1b:86:1c:da:a2:99:75:df:
11:d7:fe:a5:3b:45:91:5d:ab:24:c7:d1:97:f5:a7:f7:1d:57:
a9:e1:53:d4:2f:cc:3c:78:28:90:e8:fd:c5:c9:eb:7d:b9:c1:
0d:4c:52:3b:9c:c0:a2:73:a6:81:2b:12:9c:9f:e1:58:f5:59:
6f:d8:c7:b1:c9:cb:ee:3a:ff:fb:cb:25:65:3f:7f:75:0a:3b:
c2:4d:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:40 2024 by rpki-client on console-fra.rpki-client.org