Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer
File: U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer (raw, json)
Hash identifier: bwRnN+/nmfPsr2dkKazABisN5cVFy3fPab/H2wkm7Hw=
Subject key identifier: 53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34962E1364EE502BC56BF6AC7E265F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212450
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:e1:36:4e:e5:02:bc:56:bf:6a:c7:e2:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53a3c4ee670dcea68b4d79ea6c3185fe029d97b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:62:4b:8e:81:58:81:82:25:b6:dc:b0:08:
c2:b4:5d:1e:1b:af:f4:46:42:f8:39:af:33:d0:b4:
fd:83:85:b1:ed:a9:18:ad:b5:e6:dd:d2:41:97:45:
86:a7:37:df:95:f6:f2:9d:93:74:22:a5:23:dc:77:
83:5a:2b:01:01:b8:23:3c:26:d0:02:99:fe:e2:0c:
e6:bd:33:f3:f1:d3:13:3d:c8:da:cf:02:e9:d8:2e:
84:04:5a:54:ce:30:9c:45:37:6d:1e:3e:cd:45:9a:
a1:74:cf:0c:87:64:48:b0:70:14:a0:a5:82:57:b0:
ff:8a:61:3e:0e:30:08:75:f0:59:5d:b1:ec:3d:6e:
d5:24:de:7f:36:58:4e:8a:53:a8:37:45:79:37:64:
ee:55:33:0a:fc:60:3d:b4:ba:1f:39:ef:cc:e0:cf:
4a:98:ec:7f:1e:e9:8e:9f:24:b8:ad:dd:f9:10:08:
f1:1f:4b:e5:99:94:23:7a:47:da:f1:24:46:70:b0:
8a:1d:00:55:77:62:29:ea:e1:db:12:ec:8d:c0:ed:
b4:cb:0c:96:4f:5e:81:1e:cb:a2:3d:48:9f:00:64:
10:6a:cb:fa:f3:7a:46:ea:cb:61:6a:fd:77:71:7e:
e6:a3:fc:67:c2:f1:57:5c:6e:d6:81:03:5b:a6:af:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212450
Signature Algorithm: sha256WithRSAEncryption
a3:37:f9:84:9d:85:45:02:c7:84:fa:b2:c6:d7:e0:14:3b:82:
a8:56:67:50:d5:e6:d3:2a:80:64:65:f5:33:9e:4c:83:c9:e8:
f2:67:44:0d:71:59:a5:dc:a5:1a:6f:5d:12:77:35:7b:16:c6:
71:27:5b:43:ad:46:82:a5:fb:47:4d:a5:5b:cf:71:8d:29:3e:
bb:c4:bc:96:68:e3:8a:64:ce:78:6f:0d:f3:93:a6:62:09:9f:
b5:1e:9b:fe:54:e4:df:cb:52:de:e2:15:b9:3e:e2:9d:55:07:
68:2b:e6:8e:24:77:d4:06:5f:11:54:d0:f4:79:be:80:d9:51:
cc:22:b2:d8:59:bc:e8:6b:a6:05:4a:1d:d9:e1:15:f7:44:e2:
17:51:a2:18:26:0f:a5:ff:be:fa:05:2c:be:1e:12:59:a9:b5:
ee:8d:a0:da:cb:a7:77:32:91:22:e6:6a:6b:ac:85:61:d9:3e:
9b:ff:df:ea:2a:0f:c3:eb:94:36:56:94:bf:f6:25:28:33:d1:
71:f4:1c:ad:04:79:ef:b5:0a:41:96:39:8d:50:91:02:d9:da:
e6:e5:bd:24:85:d5:00:89:70:27:49:fc:f5:13:db:8b:a8:a8:
58:4a:05:c0:f2:76:45:98:45:0a:01:76:67:b9:06:dd:0b:5c:
26:84:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:19:21 2024 by rpki-client on console-fra.rpki-client.org