Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SxwHCg88gNtpHKe7LAsh85DtjKo.cer
File: SxwHCg88gNtpHKe7LAsh85DtjKo.cer (raw, json)
Hash identifier: vydG6ACjyWz7kvtlnGauHZfmhgTHPeBNF0s+q6lZJAQ=
Subject key identifier: 4B:1C:07:0A:0F:3C:80:DB:69:1C:A7:BB:2C:0B:21:F3:90:ED:8C:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC8A4D408ECB594F2F5B16CA020CC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/6a8f69-5acf-4b73-8633-95e1fa156543/1/SxwHCg88gNtpHKe7LAsh85DtjKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/6a8f69-5acf-4b73-8633-95e1fa156543/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212065
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:8a:4d:40:8e:cb:59:4f:2f:5b:16:ca:02:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b1c070a0f3c80db691ca7bb2c0b21f390ed8caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:84:e3:b8:f5:d9:a2:fc:08:87:5d:a3:4f:
45:fd:78:03:16:ac:ba:ef:84:b2:21:3d:b6:49:11:
ac:c5:d4:b5:89:ab:4d:f7:a1:92:dd:62:f6:c1:fb:
2b:8e:d5:c6:79:be:fb:5d:a3:33:e1:14:62:51:2b:
4f:ca:fc:a9:d4:82:3a:6f:d9:4e:d2:d6:c9:1a:1b:
c7:9a:af:92:07:11:32:1b:7e:a2:fa:da:58:33:98:
d1:30:12:57:54:b1:84:04:f1:67:a0:e0:1a:95:38:
b8:13:00:09:51:99:69:d3:97:dd:6d:9e:dd:46:f9:
5f:09:fe:be:97:e0:ae:8f:5e:03:53:73:88:9a:32:
b6:89:31:85:e4:a3:6a:fd:e5:68:3f:06:03:d8:db:
9e:cb:0c:cf:61:dd:94:9e:d4:9f:eb:d8:3d:31:57:
07:1b:ec:0c:7a:47:ae:50:84:f6:46:b2:a5:5e:07:
a9:5f:f2:35:d0:33:4c:9f:62:d3:97:70:3c:49:66:
23:3c:c9:5d:5e:21:48:c3:3e:90:06:e5:b7:79:c5:
3f:58:ee:50:5b:e1:a6:41:3b:49:b7:0b:4b:26:e4:
2e:c3:29:83:a3:72:98:ab:4f:a1:93:92:fd:3c:0a:
fa:b9:33:b8:93:b6:db:45:bd:7a:50:6f:30:e4:d8:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:07:0A:0F:3C:80:DB:69:1C:A7:BB:2C:0B:21:F3:90:ED:8C:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6a8f69-5acf-4b73-8633-95e1fa156543/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6a8f69-5acf-4b73-8633-95e1fa156543/1/SxwHCg88gNtpHKe7LAsh85DtjKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212065
Signature Algorithm: sha256WithRSAEncryption
82:9a:be:d9:6b:d3:6f:bb:78:68:2b:bf:b3:aa:54:ff:1b:fd:
dd:66:4e:6b:cb:00:39:aa:e7:1c:f8:3c:2c:cd:40:39:0f:98:
31:47:5e:5f:e1:85:b4:62:1b:5d:bc:d2:f6:a7:2b:14:4a:a5:
6f:4e:85:4a:4a:e6:c3:18:84:9d:1d:6d:e8:da:9c:8a:73:ab:
b8:75:07:7e:62:71:65:20:41:c7:3d:af:ae:a8:33:83:7f:37:
a4:54:c8:e7:17:1e:d8:0b:f6:21:a1:e7:44:17:19:1e:49:c7:
c5:8c:30:84:44:25:d3:27:d9:3d:32:bc:87:f8:ec:0c:a0:fa:
72:b5:a5:72:9b:ce:a3:1f:a7:1f:de:ec:8a:30:f2:79:50:43:
fe:8d:70:df:fb:c0:77:4a:97:97:2b:ac:29:e1:4f:eb:e6:84:
8d:77:fe:92:68:84:d2:8e:cc:a7:fa:40:b8:96:5c:89:72:a9:
50:f0:0e:96:85:2f:61:ac:9d:5a:29:02:65:b3:aa:54:f9:f7:
df:f3:dd:48:36:e1:27:58:ff:63:8f:3d:2a:da:f3:8e:2e:df:
e2:c3:40:95:e1:30:69:2e:1e:a3:5e:65:db:28:54:5d:20:b4:
91:71:35:13:47:b9:3b:bf:05:6a:a6:b9:7b:3d:2d:82:ab:17:
af:82:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:35:53 2024 by rpki-client on console-fra.rpki-client.org