Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.cer (raw, json)
Hash identifier: 2dXpF4AUj6x/X0tgssfec3dMwtzLqyiG+y+JDdRKTmE=
Subject key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801D9C446550D213E18A993AF4F5363
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216435
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d9:c4:46:55:0d:21:3e:18:a9:93:af:4f:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4541f55c16590424fb34c65e0e2eac22882470db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:61:b3:bc:25:b4:76:af:e8:bb:c4:db:d2:
46:11:19:8e:03:09:1c:11:3c:ce:ae:72:fd:2a:fe:
41:c5:92:22:34:b6:c7:84:1b:2f:b2:b7:68:ab:79:
08:67:5b:b3:04:d7:41:0f:cc:15:22:90:08:d5:bf:
0f:7e:ad:fb:88:d2:eb:dc:15:af:2d:f8:74:25:8f:
f2:82:8c:a7:e5:a0:5f:64:d1:c6:d3:67:64:3c:66:
ed:ea:20:b8:6a:8d:46:5e:b2:26:f7:31:ee:f2:1a:
4a:66:39:26:1f:8c:35:ff:0b:65:bc:d2:54:9f:61:
38:aa:21:5d:3f:34:bb:8d:7c:2d:81:53:4e:8d:57:
c0:2d:33:81:81:50:d9:60:97:29:6e:26:de:1a:45:
f6:e8:6f:48:a4:fc:3b:53:bb:21:ae:17:39:75:ad:
1f:64:f9:8d:e1:0b:4c:fe:ef:5b:30:0c:47:e7:78:
1b:1e:fa:aa:61:4f:d5:56:cc:c5:48:41:4d:c3:32:
ac:40:b0:a3:8a:e3:9e:50:be:16:10:9d:a8:1e:32:
65:1e:43:59:ed:3e:4b:fc:c4:2a:5a:95:52:4e:25:
26:ba:3b:9e:a5:68:38:15:4e:54:9e:b6:51:6b:62:
94:1d:17:53:c9:d5:28:0d:39:4c:ac:fb:19:bb:75:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216435
Signature Algorithm: sha256WithRSAEncryption
ae:28:51:05:5a:54:4a:27:fa:94:a1:89:2e:40:b0:b8:96:36:
2e:71:cd:c7:32:5a:89:ee:75:a1:30:d3:96:e6:43:f2:3c:c0:
bc:ed:51:8e:80:d2:c8:ec:09:ac:50:8b:19:c8:e6:f1:c2:a9:
8f:11:0e:72:9f:41:51:ee:d8:b8:16:6a:53:68:83:11:ad:27:
b6:7c:29:be:ca:ec:1a:03:2c:18:57:4a:3b:8e:fd:95:6a:92:
55:1c:f1:59:31:be:60:4c:8e:9c:81:b3:63:1e:c6:a4:e6:9e:
04:11:b7:03:40:a4:cf:70:e2:4d:00:44:6f:78:e5:25:ae:bb:
8a:85:c4:99:44:8f:60:85:9a:71:18:2e:1e:f0:bd:76:fe:0d:
f2:f9:da:fc:ed:a1:0d:46:62:24:69:c2:a4:7f:d3:1d:f2:ad:
b1:bd:38:e4:f5:df:23:c7:9c:29:c9:e7:8f:31:18:6d:a8:9f:
eb:58:3f:76:2f:d5:7e:54:e1:96:eb:44:29:3e:d2:23:66:33:
37:f0:f0:9b:9c:e8:0d:7d:a1:55:f6:c3:0e:dc:68:c5:ce:55:
df:fa:9e:96:a6:63:f2:04:ff:67:fb:48:77:90:76:7d:59:85:
73:d0:46:3e:49:c1:b1:f5:3a:fb:2c:06:28:a0:9d:98:15:e0:
8e:af:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:58 2024 by rpki-client on console-fra.rpki-client.org