Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
File: PrOh--ecES1TfhORHCeAviHzFVA.cer (raw, json)
Hash identifier: W5mnaRmxU/d5Qan6xhHUXmB84BCRXezzqOfTNPcpWhk=
Subject key identifier: 3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3D975AF2F3D3CA82659C9980FD95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198599
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:97:5a:f2:f3:d3:ca:82:65:9c:99:80:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eb3a1fbe79c112d537e13911c2780be21f31550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:45:7a:3d:8a:33:1e:0c:5f:1c:eb:b8:8c:0b:
1b:91:ca:31:32:52:75:b0:c4:9e:b9:80:25:96:ad:
21:26:cb:3a:63:84:52:4d:c2:e9:72:c1:65:18:f3:
95:b9:d8:62:ad:80:6a:d1:30:44:79:6d:42:9f:11:
58:5a:63:ad:25:31:18:02:96:e8:ea:f6:7a:99:fd:
d7:fb:26:21:1e:57:61:eb:ab:72:ac:22:ca:2b:7c:
76:3c:6d:40:79:fb:e3:74:29:3d:f2:40:20:12:a6:
3e:1b:63:94:53:da:03:c3:be:d9:f4:0f:a3:38:20:
a5:24:48:8d:f6:20:15:48:8e:66:44:44:63:67:f5:
25:c9:d0:08:a3:ce:0a:d7:e9:ba:14:0f:37:73:33:
68:58:51:e8:44:21:fa:0d:92:a0:18:13:16:be:31:
35:bd:b3:97:bb:34:6f:9b:2a:c3:69:b9:0d:19:49:
3d:0b:3c:cb:7e:91:52:fa:9b:2d:03:e7:4a:b6:83:
fe:72:63:7e:25:ef:4d:e9:29:03:34:45:f0:db:bc:
7d:e9:42:ef:e2:db:54:bb:82:37:55:a1:9c:96:3f:
7d:66:dd:6e:f4:f6:5d:fd:1c:d0:4e:e3:cd:3e:8f:
45:2f:ab:92:24:df:3b:a3:6a:96:64:dd:ad:9d:23:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198599
Signature Algorithm: sha256WithRSAEncryption
a3:b3:bb:d5:07:61:df:f7:3a:40:db:e7:4e:5e:c2:ef:aa:bf:
7d:d1:5f:3f:16:c6:c1:32:ff:25:4d:84:3c:c9:b8:d7:80:f1:
ac:29:fc:88:1e:34:e8:4f:bc:f2:9f:98:86:99:71:88:97:14:
ef:b2:98:dc:59:ca:5f:bf:85:5f:75:89:70:81:52:3d:22:7c:
c9:85:77:25:8a:83:75:32:c4:5a:b7:b5:b2:fe:28:2e:37:1e:
f9:cc:1d:d5:3a:3a:56:61:a3:db:c0:71:31:31:ab:1d:8c:32:
e0:86:1f:dc:52:35:86:d2:69:0c:35:6c:b7:0e:52:7c:a6:7a:
b4:94:72:3e:cb:84:a9:ee:09:f1:61:bd:fc:10:8f:80:a4:fb:
48:67:66:b2:a3:23:c7:1b:68:cd:a7:83:16:01:ff:64:5d:63:
a7:33:c9:ed:dd:5c:09:ae:46:3c:3e:62:fa:70:d4:4d:65:cc:
59:44:e2:fd:0f:1b:c0:80:34:9e:61:c0:4f:cf:a4:67:bf:2e:
ad:24:67:ba:32:e5:7a:6c:5e:7b:4c:a5:95:ff:70:15:d7:e5:
62:87:38:91:9a:f0:12:4a:6b:71:2a:69:c4:d4:c8:68:46:a2:
a9:d2:ea:4c:2b:33:f5:c6:1f:39:51:f7:18:7b:f1:d5:a0:18:
0f:a9:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:15:28 2024 by rpki-client on console-fra.rpki-client.org