Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
File: WeJwSorPh8VIkqfbPvmMd_IjJqk.cer (raw, json)
Hash identifier: qevSI/VUVd6ptVfDUeTbZzcY50q8fJioDEnTu4okkTE=
Subject key identifier: 59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DBD2FBDC50C05AD42BF0E4BC97F10301
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 12:05:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203597
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:d2:fb:dc:50:c0:5a:d4:2b:f0:e4:bc:97:f1:03:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:05:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59e2704a8acf87c54892a7db3ef98c77f22326a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:20:aa:7b:67:c7:e5:d5:a6:e9:7b:95:b3:
62:b4:f2:9d:92:4f:69:fd:49:89:3d:22:29:36:88:
6f:c6:7b:13:5b:7c:43:8d:b3:cf:8a:1f:92:df:65:
44:51:39:0f:7e:28:be:29:1f:dc:d0:c7:ed:d5:01:
2a:d7:af:23:e9:9c:cb:ea:e5:c3:80:da:51:1d:6d:
e4:52:ce:89:8f:6d:96:40:34:5f:1b:8e:8e:83:0f:
81:ab:33:b3:83:ea:af:94:0f:c6:ac:d2:bd:d5:7b:
d9:5b:de:c2:a0:52:e5:a2:50:3c:0d:06:e2:14:c7:
ce:22:46:f7:4c:92:bc:ee:6e:9f:dd:8e:7a:e6:74:
88:13:a7:5c:be:14:f9:68:e3:a0:73:85:04:c5:36:
f6:d7:23:aa:3f:21:f8:f5:e5:69:6f:99:24:41:51:
53:b4:c3:f9:b2:2b:31:1d:2c:b6:36:49:4d:e2:9f:
00:97:61:76:65:a3:e2:d3:e1:d6:b0:a9:23:3e:0d:
cd:ce:d4:4e:a7:5f:54:d6:3c:61:af:07:45:57:8b:
59:a6:b5:ab:de:7e:63:6a:92:9c:15:e0:fa:b2:ce:
45:2f:38:47:ce:3f:d7:30:0e:5a:6d:be:c3:39:b8:
70:44:e2:68:79:5e:83:4f:fe:63:25:bc:5b:5a:65:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203597
Signature Algorithm: sha256WithRSAEncryption
b0:45:8e:18:57:9e:22:4e:6b:f6:27:a2:96:a7:d6:e9:48:01:
e9:5b:91:f6:84:0a:19:73:ef:55:9f:7d:a9:74:7c:98:b7:8e:
83:75:d4:45:62:e5:ef:05:3c:ed:e3:6a:a7:c4:cd:85:86:1d:
3e:7c:9b:be:fa:db:f7:a3:71:66:f3:29:e7:90:35:47:69:56:
7d:23:a0:76:a9:18:79:74:e8:73:9e:a4:0c:21:28:62:18:9c:
7a:5c:e3:23:48:1c:c3:87:7c:e0:36:b8:e6:06:76:86:1e:39:
f6:b9:f8:74:be:7b:a5:1e:66:21:9b:11:d1:c8:4b:21:57:91:
52:9e:3e:84:d7:6a:b2:3e:da:2b:49:de:85:6b:85:c0:89:00:
69:b9:92:3f:ef:82:9e:a9:36:ea:b4:b7:66:d8:c7:7f:1f:e7:
5a:34:7d:8d:d4:41:3d:ea:47:33:4a:93:4f:f7:2e:27:c8:af:
23:6c:2f:56:74:ee:c0:6a:e2:5b:c8:5e:73:83:c7:52:02:1a:
ca:85:fe:5e:99:b8:cc:cb:39:bf:f3:1a:be:e6:8a:c3:d1:9d:
9e:7e:23:e6:67:10:60:5b:56:c2:8c:2d:11:3c:20:92:60:38:
28:86:4c:99:e3:8a:41:26:23:b5:ed:d9:ab:87:0d:19:ed:f3:
be:ba:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:20:20 2024 by rpki-client on console-fra.rpki-client.org