Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
File: WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer (raw, json)
Hash identifier: mImDQwTssYXpoOG4CPTLwt3ErJiszWkmJggdwoY2E00=
Subject key identifier: 59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01929042C09F9FDC16C214E6B97BCB1A36D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Oct 2024 12:59:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214034
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:42:c0:9f:9f:dc:16:c2:14:e6:b9:7b:cb:1a:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 12:59:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:e7:9b:0f:c7:28:eb:80:be:09:3c:60:6b:
07:08:ec:f6:9b:64:8b:6b:a8:49:33:af:ba:c9:45:
e8:d7:29:f6:b8:be:d5:36:93:2e:b7:97:6e:e1:74:
46:e3:fc:c9:f6:0d:fe:65:e9:7c:ba:b6:79:f4:c4:
33:3e:02:95:ae:c7:a1:eb:f5:54:43:d0:95:ac:05:
0a:b0:d0:ea:8f:d0:b2:09:1e:92:45:fb:cd:c8:4b:
88:14:87:ad:84:f6:59:eb:95:eb:92:af:f9:30:1e:
7f:fd:7c:7d:f3:35:b4:56:2c:79:3a:74:30:55:9d:
d6:e5:eb:8a:1b:3b:53:74:85:94:1e:b6:2e:be:ed:
45:7c:d6:00:d3:75:08:f3:cb:21:f2:ae:d4:0a:fb:
c2:ce:e3:48:8f:cb:ca:df:62:67:02:92:4a:31:77:
8b:11:e7:74:d9:a4:0d:6b:9c:71:8d:a6:24:b4:cf:
f7:ca:3e:44:cf:c8:1d:70:9d:e2:d4:f6:9d:89:ff:
d9:1d:91:34:4a:d7:c1:c1:35:ff:64:cf:c9:46:95:
c8:c6:3c:73:56:a3:09:dc:0b:2d:7a:6a:f8:64:63:
d7:2b:48:d6:05:31:23:c9:e2:f9:f5:28:65:85:6a:
48:4a:a7:fd:5a:99:32:01:11:0d:d8:31:cf:8b:37:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214034
Signature Algorithm: sha256WithRSAEncryption
91:05:f6:8d:c9:b5:05:e2:52:69:0e:c3:c4:ad:d7:30:d2:c3:
b9:41:81:ba:2a:0e:42:5a:e0:95:c4:f6:46:37:09:e6:53:4b:
cb:1d:21:bc:0c:c1:fd:81:e0:7b:82:cc:ba:71:64:97:d9:e8:
7e:da:50:7e:08:b1:8d:9e:fc:38:e2:03:00:f8:75:25:ed:29:
41:98:ca:46:09:ce:47:a2:6d:a9:71:08:ef:13:86:f7:d8:b4:
de:d9:0a:65:8e:2a:32:55:3f:f4:c2:ef:9f:2d:1a:a6:e0:d4:
57:0b:4d:63:c9:be:2b:9f:69:f7:9b:71:4f:1d:86:09:40:2e:
37:10:de:66:57:d1:c9:9d:74:88:17:d4:13:0a:27:6f:48:cc:
12:ab:53:00:1c:29:06:40:48:71:af:da:f5:23:a7:59:31:f9:
dd:8a:cb:ab:12:8e:89:36:11:39:2e:35:a0:e6:a8:a0:8d:cb:
7a:05:75:eb:b7:26:7a:91:12:8f:69:4a:80:8a:33:70:63:eb:
26:e1:67:72:a0:6c:ef:05:bc:8f:69:a6:96:21:b3:37:9e:2c:
f5:0a:9c:1b:de:4d:9f:87:fa:85:98:19:d0:1f:f6:d6:37:92:
24:30:71:a8:27:1b:ba:ca:e4:7a:58:e1:a6:74:ca:9a:72:7d:
15:4b:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:51:25 2024 by rpki-client on console-ams.rpki-client.org