Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
File: PN3B5hw55uikGyeAVslULjx597I.cer (raw, json)
Hash identifier: 8xxsB8mqou8iK3lXPMokrVr/zjvcFrbMrePOgELJ4Qc=
Subject key identifier: 3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC51E15BBD5E0E8D4F1EB24E92189BBC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
caRepository: rsync://rpki.co/repo/AS202400/2/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 13:02:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59730
AS: 202400
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:1e:15:bb:d5:e0:e8:d4:f1:eb:24:e9:21:89:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:02:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:31:01:72:cb:ab:95:57:8b:90:2b:09:aa:
9a:be:8b:fc:7d:42:f4:3c:a6:00:48:f6:75:a1:74:
ff:51:3b:96:22:a0:98:cb:ef:7c:2a:ba:4c:a2:d8:
6c:90:69:6b:21:33:4c:f5:01:51:c4:77:7a:81:c7:
52:a6:3d:a6:5d:9d:10:34:2c:8f:91:61:e0:b1:70:
44:2c:05:16:7a:e0:56:93:57:9c:0e:a8:41:46:ce:
52:84:09:c8:93:b0:d5:cf:14:de:65:5f:95:91:45:
6a:f1:3f:fc:9f:bf:19:ac:dd:b1:91:a2:ee:b4:97:
0b:2c:1e:fc:b6:83:50:49:66:d1:c9:f5:50:4b:5c:
d5:3b:7a:fb:ef:c0:65:f5:0c:54:9c:d0:10:28:b9:
d0:38:97:0c:f0:0a:2c:f1:42:73:8c:3d:32:bd:d2:
ec:af:09:6e:a6:5b:17:fb:ab:cf:dc:8f:62:a3:66:
4a:71:49:f0:3a:64:0e:fa:b8:c1:bd:03:a1:33:24:
54:f5:5b:39:11:a2:92:da:39:9c:bd:8a:1a:3a:29:
2f:37:64:2f:3b:66:8b:af:59:3e:2b:01:ab:f1:36:
c9:75:d7:50:f8:72:ec:33:9e:ba:6c:8d:3d:af:27:
17:59:52:41:6a:3f:bf:ae:bf:c2:4d:1d:4e:83:94:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS202400/2/
RPKI Manifest - URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59730
202400
Signature Algorithm: sha256WithRSAEncryption
ab:c2:71:19:89:a6:a0:b4:61:9c:32:53:5a:dc:a5:7a:e4:87:
09:93:ed:ca:06:b9:a9:02:6f:e9:0f:1a:10:e1:2f:bd:ab:f1:
3b:e8:b5:c1:71:ce:44:71:40:c6:9b:cf:e0:6d:07:a9:81:bb:
a3:ac:a5:fe:08:9d:82:a5:e8:6c:87:63:b1:1f:fe:cd:ab:34:
5f:c8:e2:11:2c:99:45:21:6d:46:b0:a1:a2:95:f9:35:c6:3b:
ad:d5:71:7d:bf:cd:e1:14:5a:6b:46:cf:c6:6f:62:3c:07:4d:
75:3c:c6:13:5c:36:dc:e9:e4:15:21:c8:4c:8a:1a:1c:e3:bb:
63:e4:73:31:1d:99:13:9a:8f:09:ac:ea:f8:d8:8f:55:90:f5:
63:66:19:c8:53:87:a9:83:9c:b2:93:dc:92:2e:94:d4:5f:19:
0f:88:9b:5b:a3:cd:7b:e4:78:d6:02:fc:1b:16:f9:3d:cf:f5:
e7:c2:82:a7:fc:3e:bf:cf:9f:31:05:56:94:af:7e:43:e9:b8:
8b:a4:95:6c:da:91:df:cd:15:c3:7e:b7:f7:18:f2:68:4d:42:
3e:94:4f:0f:d9:28:4a:43:7f:c7:c3:e0:4c:d0:03:65:1f:fe:
43:f9:ed:30:59:f6:83:b6:e7:6e:cb:c3:01:07:14:63:59:4f:
2d:25:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:27:14 2024 by rpki-client on console-fra.rpki-client.org