Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.cer (raw, json)
Hash identifier: +dl6zkU5RhtRy5zK06XpILXlHmAL0IM7p06nblKQrgw=
Subject key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEEF55F621A6EC5D76AF26112C4BD7E63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 16:01:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215750
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:f5:5f:62:1a:6e:c5:d7:6a:f2:61:12:c4:bd:7e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 16:01:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=516d94064f738555e8ce365a1957d69e768809c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:f4:93:02:0f:9c:65:22:72:47:d1:47:6a:
83:78:fe:70:02:34:61:af:80:c8:bd:93:52:0f:a7:
27:53:28:1d:85:08:28:e4:fd:f8:ac:fb:fe:a6:57:
bf:15:bc:74:2b:b4:14:45:8a:eb:33:ec:8e:08:b8:
c1:58:a3:81:d4:a7:a5:cc:c9:6a:a4:8f:8f:79:84:
6f:06:15:9e:42:4d:85:17:fa:87:f1:cb:f5:eb:27:
6b:80:a2:24:20:e5:d7:3e:57:8b:d6:97:dc:bc:12:
02:75:25:aa:32:cd:41:95:f2:b5:8d:4d:bd:6a:00:
98:29:d4:9b:34:70:82:97:6c:c6:0b:18:c8:af:e5:
9d:75:06:eb:f7:f3:27:0f:6a:f9:8b:5e:eb:22:d7:
cb:1d:a8:1a:14:ba:dc:5d:1f:f6:19:bf:0e:42:5d:
a1:5a:3b:01:fa:d8:7e:5e:a7:af:a7:3d:0d:6c:c0:
f1:3b:b5:a0:22:d9:96:41:9c:2f:1b:98:aa:53:12:
db:61:ef:f9:34:16:5b:cc:78:bc:9b:95:a3:00:98:
8a:03:b8:cd:ed:86:6e:e8:d6:06:de:29:46:ee:f2:
f4:55:c5:4d:a5:95:11:a9:0d:c2:b2:b2:2e:fe:fb:
8b:60:ba:f3:1f:64:f6:ca:51:e6:6e:bb:29:e7:4f:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215750
Signature Algorithm: sha256WithRSAEncryption
82:77:11:a9:20:3d:18:0e:77:d8:1a:e3:a7:59:b1:2c:8c:fd:
38:72:d6:c5:6b:ba:e9:d9:ad:0f:c4:af:1a:60:82:f3:1c:aa:
4a:f6:bf:57:be:7f:31:87:cc:1f:2e:23:8f:bc:21:13:1b:e4:
de:2d:e7:4c:81:8b:2d:d9:70:25:6f:50:d2:be:a3:3b:5c:49:
1d:16:2f:25:65:4d:93:82:96:02:0d:50:cc:77:68:6a:5c:84:
ec:a2:54:d5:16:73:db:43:aa:6e:3d:33:97:26:07:36:f6:37:
bc:5b:0b:98:be:5a:28:90:89:05:4c:09:bd:95:ad:8a:c3:43:
7f:bc:32:13:78:b4:69:dc:39:76:82:e5:01:71:53:f4:14:38:
d5:ed:be:5c:72:5b:15:a5:f3:56:30:e5:1d:88:eb:83:39:ae:
22:f4:bd:ab:0f:d5:ee:f3:35:d5:cf:27:dd:3a:ed:5d:23:10:
55:51:75:f5:2f:9c:b0:c7:0c:3b:47:83:74:92:c6:0a:23:1f:
34:a7:ed:e6:b7:9a:a0:2e:fb:56:36:f7:ec:d6:3a:a2:13:49:
77:43:9d:8b:bc:77:93:52:77:d5:0e:44:34:e7:7f:2e:70:60:
fc:22:85:0c:9c:d6:ff:32:71:f7:6d:ef:95:c5:3e:0e:94:57:
8b:29:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:51 2024 by rpki-client on console-ams.rpki-client.org