Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer (raw, json)
Hash identifier: 2825RSmoqCwAaYNYpEey4PPv84L700SURCt3in1iFys=
Subject key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4AC161F476CC195534D07E727242
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213334
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:c1:61:f4:76:cc:19:55:34:d0:7e:72:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:d6:18:78:94:7d:05:a7:be:2f:65:50:f2:
01:4f:62:a1:32:43:d2:3f:23:1c:4f:b9:47:d7:9d:
5d:45:58:6b:b9:f8:40:2a:a0:d8:8e:f7:3b:8e:d9:
cf:37:db:80:31:90:09:e9:c8:39:aa:cd:ea:47:5d:
45:9b:90:a9:92:8e:46:99:17:a5:2f:0e:dd:bf:a9:
58:43:6e:fb:93:a9:a8:0b:f1:ad:b0:d6:f6:ea:5a:
d3:3b:ca:21:74:f7:39:17:d3:77:4f:b2:35:24:50:
fc:7a:b0:91:e8:0f:32:f4:39:2b:52:3b:55:17:b8:
66:8c:2c:2b:e0:b6:90:cf:33:e4:31:c7:89:34:58:
50:f5:b8:dd:33:ba:84:fb:26:13:c2:15:43:e1:03:
ff:f6:aa:53:b3:64:00:dc:7c:94:f5:39:7b:e4:56:
2f:f0:cc:14:34:12:5e:19:79:1d:b9:4c:87:e2:11:
c2:02:53:f3:d2:f2:05:04:bb:1c:a9:22:19:dd:d4:
fc:8b:ad:4b:7b:31:20:a6:f9:98:18:15:60:36:43:
24:ac:8c:7f:0c:af:1c:c6:a5:c9:6f:36:dc:56:32:
9d:00:5d:6d:b7:e5:a4:e4:9d:29:03:81:c0:7b:64:
5d:d3:ad:50:90:f4:e1:98:a4:d2:68:81:a1:f4:ff:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213334
Signature Algorithm: sha256WithRSAEncryption
33:dd:33:01:0d:36:53:41:d2:6c:f5:03:36:f4:78:2b:1c:30:
c9:51:e0:a0:b6:43:ec:10:35:06:02:72:22:a2:ee:c3:72:ae:
5f:80:60:ce:66:23:dc:1c:54:79:3c:20:8b:be:9a:b6:a4:c9:
c5:75:f9:d5:b0:ac:d0:77:03:82:33:55:16:06:00:66:91:a0:
9a:66:df:b8:b2:4f:e1:15:96:7f:81:04:ab:4b:32:df:c5:15:
35:a3:51:a8:9d:e9:4d:58:4e:be:f6:2b:78:c0:b1:37:d6:b0:
5b:2d:04:00:be:1f:0b:8e:89:d4:6f:c4:d4:6b:74:d0:74:c6:
3c:5f:cd:65:df:d3:78:8e:5c:9f:51:3a:05:16:8d:01:05:7a:
28:97:4f:e0:1b:5e:96:9f:f3:dd:45:22:41:f8:fc:af:97:b2:
8c:ee:d0:6e:64:2f:d0:91:5d:46:5d:ab:44:3c:be:32:84:1d:
b6:26:bc:4a:5f:f6:3a:bb:ad:e9:dd:e7:c2:a2:c6:18:40:8d:
5e:42:b0:2d:18:17:69:43:e2:18:bf:79:35:b4:00:e3:d0:c3:
39:39:cc:35:a0:85:e7:a4:ea:86:76:5c:1f:ac:8d:df:32:a9:
8f:72:66:5d:be:d9:f0:7e:38:1b:8b:6e:ca:f4:01:9d:66:fe:
20:12:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:02:15 2024 by rpki-client on console-fra.rpki-client.org