Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.cer (raw, json)
Hash identifier: AOeK3k/J4gL1Rc48vdXmPl4HSbYRxvqDM9H0CNPIQOA=
Subject key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DACC4838782C54333E8347C7426DE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202224
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cc:48:38:78:2c:54:33:3e:83:47:c7:42:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:4e:a2:8a:a5:f1:86:31:f0:cf:34:9a:11:
d1:80:4e:dc:08:01:87:d1:03:a7:ad:35:61:89:3b:
72:47:73:13:30:d9:22:e3:aa:14:42:02:3a:2a:0b:
e2:80:24:5f:7a:a0:1c:c8:4a:05:03:b1:46:ce:d5:
ad:de:2c:3e:53:a5:57:99:a7:4c:1a:78:13:ae:10:
97:00:e0:87:81:7a:90:75:06:64:99:3f:0d:e4:03:
a8:17:ab:76:07:8f:65:56:59:d7:6b:af:15:fa:a0:
19:92:2c:c9:5a:38:10:c6:d2:89:40:15:27:45:23:
ff:8d:30:b4:9a:ad:47:b6:f0:af:79:8b:4d:c6:e0:
1a:85:e4:9f:39:89:c9:dc:54:0c:3e:f7:33:d1:45:
bd:ee:02:3a:a1:33:e7:67:f9:0d:3c:65:de:06:01:
94:ec:1f:26:66:7d:43:03:25:d5:c5:32:15:12:9e:
c4:dd:8e:62:7c:17:ad:87:7a:b1:25:fc:e4:54:5e:
5d:34:e3:6c:d6:e7:bf:3b:66:cd:2a:8a:4d:70:d0:
3e:00:13:49:75:8c:58:d1:f5:f2:d4:a1:97:cf:0a:
e6:a3:cc:b1:4e:34:b3:29:1d:08:c5:b5:2b:73:79:
9d:5a:95:51:9d:c6:f3:b0:46:8e:6c:a6:a9:a1:ca:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202224
Signature Algorithm: sha256WithRSAEncryption
6d:c7:18:3e:19:73:25:59:24:39:02:80:a0:b8:2d:dc:dd:0c:
4d:73:b3:bc:b6:c0:7a:4d:5b:c4:7b:54:b9:3b:e0:c5:b4:10:
ea:5a:5f:0b:7d:16:ba:d6:29:f6:35:d1:d4:c0:3a:ca:96:eb:
6b:a3:ee:cc:99:5f:47:22:ff:70:0f:fd:5d:4a:55:00:1d:59:
84:28:8b:5e:1a:60:10:25:b3:ef:7d:7b:aa:58:c0:83:91:37:
6a:dc:da:12:f2:6c:87:f4:5b:80:5e:6e:43:dc:e4:5e:1c:d2:
22:63:d5:0b:e3:5d:03:c3:d6:42:1e:6c:f9:07:c7:8a:6a:d7:
22:04:89:3a:ca:92:74:c7:ce:bb:f3:fa:2a:11:62:98:10:88:
f4:48:a6:9c:9d:d2:40:cc:ad:ed:41:3f:12:1b:f2:55:16:84:
27:34:54:7c:7f:f2:cc:2c:7e:e9:20:94:db:5a:c2:98:8b:9e:
f3:76:fc:c3:7d:50:63:b7:26:cc:b1:11:88:77:5b:52:59:ce:
ca:22:9b:5c:3a:fc:d6:60:67:d0:04:41:f8:42:d8:2d:16:7b:
28:35:88:2d:4f:55:cd:55:e9:c2:32:ef:b9:ac:17:4f:96:ff:
9a:ad:0f:0f:d8:c8:33:10:6c:c4:fb:11:5b:36:b7:d8:6d:0d:
52:3f:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:42:27 2024 by rpki-client on console-ams.rpki-client.org