Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q0y4hTtUGA2hPQGs0y0szapfSj4.cer
File: Q0y4hTtUGA2hPQGs0y0szapfSj4.cer (raw, json)
Hash identifier: HDbh1REKhDFm3Z901J5lztS+FJW0HKT2blxHEU8u4nQ=
Subject key identifier: 43:4C:B8:85:3B:54:18:0D:A1:3D:01:AC:D3:2D:2C:CD:AA:5F:4A:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2E23314D9A7960119B17A6C70CDF9A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft
caRepository: rsync://rpki.co/repo/AS211380/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 02:37:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211380
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:e2:33:14:d9:a7:96:01:19:b1:7a:6c:70:cd:f9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:37:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=434cb8853b54180da13d01acd32d2ccdaa5f4a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:64:0b:70:9c:e0:79:5b:ac:8b:6a:ef:73:
cc:20:e5:a2:a1:1d:87:a9:82:ba:bb:ab:b4:89:21:
1d:45:7f:1c:53:7b:8f:07:b4:a6:4d:21:12:e4:16:
f7:4b:46:31:df:ae:0d:58:47:dc:61:57:b4:63:ac:
be:06:f3:97:25:5d:f6:79:0a:b7:b2:87:1b:43:20:
d0:26:d6:27:1f:f6:83:ea:07:30:e5:a4:c4:75:a1:
db:d1:d2:d7:de:b0:86:e1:52:67:c0:94:e4:f8:0f:
5a:09:38:28:87:d0:d3:4d:bf:36:b0:49:40:b1:66:
5f:a4:36:ff:03:d1:ab:78:f1:6e:ff:3e:cb:f7:7a:
be:7f:16:be:6a:46:94:1e:3a:98:78:a2:fb:63:cc:
e8:7d:55:92:5a:33:82:a8:46:af:7c:57:1f:fa:21:
9e:39:36:6e:7e:b0:3e:39:bf:06:69:22:3f:c2:95:
33:26:7f:e9:d8:75:45:b2:b6:24:de:d4:4a:74:ac:
29:24:80:bb:ec:c5:7b:00:95:a8:07:84:8f:94:73:
8e:11:77:1a:07:9d:2d:05:f6:0d:62:b9:2a:2f:8b:
21:19:09:fb:53:44:f0:6c:5a:ed:3d:3e:10:b1:01:
6b:43:f5:59:07:27:f8:16:ba:14:50:07:70:f4:0e:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:B8:85:3B:54:18:0D:A1:3D:01:AC:D3:2D:2C:CD:AA:5F:4A:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS211380/0/
RPKI Manifest - URI:rsync://rpki.co/repo/AS211380/0/434CB8853B54180DA13D01ACD32D2CCDAA5F4A3E.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211380
Signature Algorithm: sha256WithRSAEncryption
0a:03:17:75:b4:52:f1:de:45:87:1d:31:65:6a:bc:c0:1e:42:
be:ec:5b:8c:bb:4d:07:0d:9a:08:94:0a:0a:65:bc:c5:82:be:
fb:7a:4d:d3:c0:cf:f4:8d:b6:4a:07:8c:f3:f4:6d:cc:6f:27:
06:dc:83:9e:eb:b8:6b:f3:84:f0:c0:82:b8:8e:29:17:3b:d1:
34:ef:a3:04:e5:3e:9f:1b:c1:f9:fe:6b:81:e7:6d:8a:f5:ac:
7a:31:24:7c:da:44:a7:1f:1a:03:dd:2c:a0:52:36:b8:a9:e8:
3d:16:fb:b7:47:5c:93:7b:19:a1:bc:33:90:5a:48:7f:6e:35:
78:20:6b:65:80:41:df:16:4c:9c:98:84:b2:04:7b:8d:41:a7:
ff:a0:1f:30:c7:cb:80:19:71:34:0e:66:90:5f:d9:43:9c:4b:
d7:1a:9f:2f:83:f1:97:db:47:21:9e:f1:63:2a:d8:1a:82:8d:
88:ac:b4:a6:d0:65:bc:81:6d:04:1a:c5:c0:cb:55:78:dc:5b:
f9:d6:28:50:78:55:5f:39:0c:5a:c3:6e:bd:87:70:cb:77:58:
a8:1b:d4:c2:24:2e:0d:98:d0:83:df:d4:11:ab:97:4c:05:09:
6c:41:a4:9f:91:af:25:c1:e2:dd:20:11:bd:e2:7b:15:da:82:
21:b0:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:01:32 2024 by rpki-client on console-ams.rpki-client.org