Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.cer (raw, json)
Hash identifier: 2EGXeZkktmHFXZSRMApR0Px+ntYszav/mueSUKYjuME=
Subject key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DE985C9B6E190C8DD9C49BB9E86401454
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Feb 2024 07:44:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204592
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:85:c9:b6:e1:90:c8:dd:9c:49:bb:9e:86:40:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 07:44:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=477ec15ca4f924d966967545124f655310d2c973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:81:5b:a0:96:a9:6d:85:50:a6:8f:23:d1:
62:b3:a8:c4:5a:9a:60:1a:82:c3:df:43:79:ea:34:
95:5c:34:ba:32:1a:26:cb:d6:28:9c:9b:a9:a0:7a:
3b:07:c5:a9:c9:fa:e1:10:1c:13:d1:69:8e:83:e7:
62:06:9b:74:a6:f1:64:44:85:1a:e4:68:5d:99:06:
bb:d3:ba:1f:f4:ca:ed:b5:12:19:e3:04:af:02:59:
6c:76:78:7b:2a:c5:3f:21:93:55:9c:15:01:ea:9c:
97:4c:19:66:f6:0a:4b:4e:c2:98:5f:34:08:9f:15:
59:c6:4b:94:56:52:3c:35:19:ee:d3:b1:5e:e4:eb:
c6:0a:71:66:f4:58:a1:05:c1:41:5e:70:a0:94:80:
01:73:55:89:46:53:aa:d6:b3:bc:33:37:45:b1:62:
9a:75:c8:5b:e2:31:42:e8:42:23:e3:69:ce:a6:a1:
d1:eb:49:34:9e:7f:c0:99:e4:63:05:30:80:4d:24:
ff:6c:8a:6e:07:49:92:22:d5:f5:f7:69:49:53:ea:
a2:7c:b5:8d:c4:78:95:05:25:42:b1:c6:f7:97:e6:
b7:7f:2a:7d:9c:f6:b9:dc:04:9f:3a:03:ea:b7:65:
2f:5a:d7:2b:91:e7:d3:e4:52:9d:17:bf:da:89:d6:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204592
Signature Algorithm: sha256WithRSAEncryption
06:1c:5b:df:ba:25:02:ed:8a:8d:84:80:60:87:ea:20:ec:89:
8d:f8:37:41:14:c5:08:48:e4:a1:dd:d7:93:b9:da:e0:49:d1:
6b:85:f6:08:4c:f5:78:e9:79:2b:d7:e7:fd:b0:91:bf:8a:f3:
3c:59:62:26:37:36:48:48:fb:e3:cc:61:93:09:23:9a:51:47:
fe:0a:25:49:b3:ac:9c:52:c1:f7:f0:7d:33:f7:05:7f:54:70:
3e:b0:c3:c7:a1:27:0d:8f:2e:13:af:6d:9f:ed:be:aa:0b:3e:
30:8f:67:e1:b0:92:81:e5:55:fa:f7:d8:25:e6:f2:c7:95:0b:
dc:e6:1f:5b:f6:6b:5a:e1:0d:34:db:6b:9e:b7:31:e4:50:5f:
3e:7d:5f:f2:13:94:97:d9:8d:09:26:3b:27:90:e1:36:64:5f:
7a:4a:cc:e7:0b:af:88:7d:e1:19:01:9f:19:d5:0c:68:39:14:
34:0b:66:7c:3c:3d:d3:9d:41:12:e6:a3:cc:13:10:c3:90:71:
12:d2:13:bc:37:df:77:d9:f1:c8:f6:4f:38:60:dd:cc:c8:a0:
e7:07:bd:12:7b:ea:d9:26:28:9f:21:ec:23:c0:8f:f0:fc:9d:
60:35:03:35:6b:34:d1:1d:d2:4a:70:83:b9:77:63:9d:94:fb:
c5:7d:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:18 2024 by rpki-client on console-ams.rpki-client.org