Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
File: PpPoAxz911eQjNyf-ZJLfEukR48.cer (raw, json)
Hash identifier: hu81Cp55pjUDhjh+woCISxLcPnXGIMmLCALyg1CW6wc=
Subject key identifier: 3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D7AE00878F4FFDD09359165CA904E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200111
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7a:e0:08:78:f4:ff:dd:09:35:91:65:ca:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:5d:d8:30:fd:f1:26:4d:bc:7f:bc:12:43:
d8:d5:4b:92:0d:43:a5:8b:e1:d2:42:cc:4a:89:21:
a8:30:4b:eb:ad:53:41:d6:b3:a6:40:e0:55:91:7c:
4e:5b:b3:37:12:5b:95:b0:ef:6d:d3:2e:76:62:06:
63:95:3a:f3:32:ae:34:f5:ee:6a:a4:52:9a:22:5f:
b5:78:6b:f8:99:5f:bc:3e:8b:bc:c4:49:81:23:7c:
73:23:1f:02:6f:f0:e0:fb:cf:70:0f:cb:c9:bc:22:
16:66:bd:e4:24:c0:96:a2:ba:af:22:49:91:9d:16:
9d:6c:59:1e:b5:e8:bf:08:6d:7f:1c:ab:b2:fa:d4:
21:e8:74:d4:88:bf:06:e7:2c:11:4d:1b:36:ea:b0:
19:25:d4:76:7f:20:bb:5e:dc:6a:76:bc:51:20:da:
3c:af:6e:29:eb:17:86:98:d9:9e:31:39:d2:8a:52:
d0:63:ed:8e:fb:e2:06:dc:31:91:d0:28:d8:8e:0c:
fa:3d:1e:5c:d9:38:98:c1:91:d7:72:88:3f:16:96:
48:35:85:02:fe:03:17:a6:13:80:00:31:f0:dd:19:
6e:00:e7:99:04:8a:fe:02:78:69:34:98:10:f2:db:
1f:fd:f5:75:a0:13:c7:93:f6:b5:88:40:d6:6f:a7:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200111
Signature Algorithm: sha256WithRSAEncryption
9f:f7:81:80:e2:4f:23:18:a8:b5:fa:1b:7b:7a:26:db:fc:92:
00:3a:87:2a:06:b9:98:66:fc:7c:75:b9:16:c9:a6:7b:b8:e1:
87:8b:41:e9:22:23:05:57:bb:68:f4:5b:7f:c9:ca:3c:5e:11:
45:38:8a:06:a9:96:46:94:2e:db:ba:47:15:05:c1:3a:a9:e4:
de:89:ec:6b:fc:23:f8:69:38:84:79:04:f3:d0:c4:d6:9f:bd:
a9:af:fb:d6:c6:22:9a:a1:c0:28:6a:f5:df:e5:26:3a:ea:68:
af:45:d8:f5:b4:82:f2:13:52:3b:05:99:cb:f8:d3:0b:0d:f6:
1d:c5:31:24:dc:15:b0:e9:00:22:97:ae:37:fb:a3:54:a7:54:
5e:4a:54:08:3f:44:67:b0:ea:44:98:c9:35:d4:64:2a:c7:9f:
27:ce:f9:a6:56:ee:08:1b:f7:8b:1b:af:9d:09:55:87:3b:76:
13:0f:07:37:1d:7e:8f:f3:12:d2:6b:e3:a0:28:54:cc:ab:61:
4f:cc:fb:a5:e1:d8:7f:2e:60:ee:00:d6:37:e3:ee:dd:7a:cb:
d0:14:cf:92:1b:35:d9:16:6f:32:01:78:55:9c:f0:70:6e:38:
84:f2:9f:d5:32:5a:99:fb:67:40:d8:55:4f:04:c9:06:1f:39:
d3:c3:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:08:28 2024 by rpki-client on console-fra.rpki-client.org