Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer
File: VtU7nYgWaAROXc0J1dGgS5U4j8Q.cer (raw, json)
Hash identifier: Gv2mD1VWAx63c0OmZl7betI989bakxh82IFkZVWJwRc=
Subject key identifier: 56:D5:3B:9D:88:16:68:04:4E:5D:CD:09:D5:D1:A0:4B:95:38:8F:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726CDC118200A3CFDFD16B3F35E85C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43443
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:cd:c1:18:20:0a:3c:fd:fd:16:b3:f3:5e:85:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d53b9d881668044e5dcd09d5d1a04b95388fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:4c:79:5c:ff:f9:f8:5d:c1:b8:33:6e:3c:
f0:e1:1a:8f:57:d3:2b:b3:55:0a:4e:51:76:b7:c9:
a9:40:6f:ee:fd:a9:a9:ee:4f:7c:05:00:df:75:80:
56:1f:6e:ad:1c:4a:9a:48:96:3e:02:21:3f:49:a3:
8d:f5:e6:c6:5e:bf:01:0a:62:d3:8c:f3:3e:83:e1:
ea:3d:b5:70:0d:ec:60:72:c2:8f:0b:f6:81:82:24:
45:82:8e:de:f8:05:c7:01:a7:98:9a:83:87:6f:25:
30:b9:4d:91:bb:af:2f:fe:c7:03:9b:3c:81:af:af:
35:2b:e3:3c:e7:d3:c0:85:44:c4:bf:dd:ab:5a:39:
d5:08:8b:57:df:89:81:4a:b2:29:11:f7:8c:ca:4c:
56:f6:50:de:5c:0d:c6:1b:7f:a4:59:03:43:c3:db:
7a:ed:17:61:87:06:96:52:f7:8b:c4:17:94:41:bb:
f9:af:29:59:ba:53:a2:60:03:8d:79:d7:c1:91:c6:
72:2b:11:ac:3f:03:b4:08:ee:8e:27:18:24:45:0f:
b9:90:e0:ce:81:c7:9f:ef:7d:73:ec:da:cc:cb:1a:
75:8c:a8:57:6e:12:db:f4:8b:ba:27:2e:91:44:e3:
c9:5e:2d:af:3c:c6:17:7d:67:1a:ac:e8:a1:7d:c8:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:3B:9D:88:16:68:04:4E:5D:CD:09:D5:D1:A0:4B:95:38:8F:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a7b589-0286-446d-9cb7-4c789949d6ac/1/VtU7nYgWaAROXc0J1dGgS5U4j8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43443
Signature Algorithm: sha256WithRSAEncryption
55:d1:bd:c4:b9:6e:a5:53:f5:d5:b5:ec:db:37:f4:4a:ad:4f:
56:73:97:e1:8d:10:03:ae:da:45:b1:32:38:ff:40:84:af:5d:
1b:50:14:17:d8:3b:63:e3:e4:4f:47:e0:e9:18:d3:43:b6:96:
3e:b7:bc:45:43:fc:f7:59:12:45:d8:48:09:4e:b4:04:c6:76:
c9:b7:b5:89:e0:ad:a1:04:ca:59:59:73:fa:f4:09:8c:02:12:
1c:19:8d:dc:50:53:37:ba:93:e1:4c:a7:62:cf:30:80:65:c1:
59:a6:26:07:ac:5e:32:24:d2:d0:fa:7e:c4:56:c0:91:59:70:
57:d6:6c:38:0d:d9:f5:35:82:81:68:ce:1d:f8:e7:1a:c6:c4:
75:aa:56:ef:3d:0a:96:53:c0:a4:1d:58:6e:de:18:d0:09:6e:
d3:17:a3:44:72:56:34:82:32:fb:06:d7:29:96:0e:54:da:da:
65:17:b0:ba:b0:ef:bd:30:f3:4a:60:cc:0c:75:59:87:7e:0f:
29:db:0c:7a:6f:af:9d:07:68:3b:c7:e4:1d:db:ef:e3:23:79:
b1:b0:f1:4e:7d:81:a4:fe:f5:94:82:a1:03:fc:ef:08:10:26:
82:2f:c0:e0:be:4d:81:f2:9a:42:4d:f2:ec:c5:6e:76:8c:5e:
1b:fe:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:38:33 2024 by rpki-client on console-fra.rpki-client.org