Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer (raw, json)
Hash identifier: k5QvUh9m76Xko8MrQEwsfGAeWDlJ+18ktVOZ4lIyJzg=
Subject key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E66186290822437ADCA7E3B919EC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204541
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:66:18:62:90:82:24:37:ad:ca:7e:3b:91:9e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:3f:65:ca:b9:ae:89:4c:72:c8:21:e4:5d:
9e:ec:7a:d7:2a:ac:e7:0c:b1:86:de:b5:cb:2b:44:
aa:35:04:a2:d8:d7:31:bf:2e:6b:11:d4:cb:33:b0:
7a:9e:97:b4:0e:b4:e7:45:ca:2e:17:0a:22:3c:a7:
a2:8f:81:81:e3:53:11:73:43:84:ef:82:72:19:46:
dc:a7:38:ec:c6:ca:64:1a:3e:1e:89:47:84:35:80:
06:17:24:01:c8:d7:b0:a0:ee:78:36:c9:16:fb:10:
e3:e8:33:7a:b9:89:01:6f:b0:f0:db:f2:9f:db:94:
e5:9c:05:5a:06:1c:59:d1:54:16:45:24:17:57:70:
93:2e:c1:ee:f5:f8:7a:40:d2:dd:48:00:21:0c:40:
9a:5b:4c:0a:3e:4a:00:d4:cc:08:10:79:c4:0d:78:
2b:d4:f6:07:2b:2e:00:c4:0e:ce:a3:a7:1c:60:0a:
6f:9d:7c:3c:dc:a3:d2:c3:c0:28:36:4f:cc:bf:91:
06:7f:28:a6:95:0c:f8:c0:a3:92:a7:2f:91:84:7a:
0f:2c:5b:57:d0:62:dc:22:3a:af:3d:60:1a:2e:b6:
99:08:b8:8c:ad:49:ac:51:ec:c7:20:8e:4b:7b:92:
9e:c7:35:86:c1:f1:ba:40:99:59:9c:fe:fb:ea:f3:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204541
Signature Algorithm: sha256WithRSAEncryption
94:52:c3:82:56:2a:a5:53:30:b5:7d:36:80:8e:38:42:8d:99:
97:66:39:df:14:9e:86:9d:9a:ee:af:15:bf:8e:e8:24:20:ea:
ee:7a:fd:ff:e1:16:44:c4:ef:35:77:89:e3:0e:fc:7a:9c:70:
78:5c:0a:15:80:51:20:a1:ae:11:b7:40:71:49:85:0c:f1:8c:
3a:7d:ba:f9:67:89:23:0f:f9:58:64:e8:1b:1e:5c:18:99:47:
84:58:8e:db:2c:b3:6d:9e:32:5b:3b:d1:39:d8:ca:17:66:78:
33:92:77:d6:3c:77:0b:f7:b0:f3:75:b4:3c:90:c4:b8:c0:7b:
23:44:0a:0a:4a:40:dc:38:f6:44:5a:e1:ce:a8:8f:30:ef:7d:
8a:f0:94:67:c9:9c:48:f8:d1:c2:5b:94:20:aa:81:00:50:e8:
df:f9:5c:66:d0:a4:00:fc:f8:d0:dd:31:c5:54:1d:c0:86:74:
5c:90:ed:b4:3a:b0:a2:34:a8:f4:a2:50:ef:db:a6:63:b0:db:
12:b6:31:e6:7a:a1:e0:2d:c9:a7:67:23:3d:a6:aa:47:b9:bb:
ab:6d:f6:42:65:f2:90:ce:84:ae:2e:f7:51:20:a5:c6:50:57:
6a:6c:96:b5:13:e5:e0:5f:b8:12:e1:cc:31:90:e8:3e:e1:13:
28:00:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:05:23 2024 by rpki-client on console-ams.rpki-client.org