Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WxYvi0DvehEEQ2iq3aOvvkk8ghU.cer
File: WxYvi0DvehEEQ2iq3aOvvkk8ghU.cer (raw, json)
Hash identifier: cg0H5SSXjzQyRw3s5+ZMBqFToiLuWWcqzTQ+eIBkLgQ=
Subject key identifier: 5B:16:2F:8B:40:EF:7A:11:04:43:68:AA:DD:A3:AF:BE:49:3C:82:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B80D44D2C86DE4152463CA4AD58687
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/WxYvi0DvehEEQ2iq3aOvvkk8ghU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210707
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:0d:44:d2:c8:6d:e4:15:24:63:ca:4a:d5:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b162f8b40ef7a11044368aadda3afbe493c8215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:ba:ac:ec:10:eb:d8:1d:43:c6:07:0a:df:
f5:8e:c7:42:e7:1c:ff:3f:f3:67:49:c1:37:cf:73:
0d:4d:4c:e2:29:06:d6:32:ed:be:3a:e3:3b:f9:0d:
a1:1e:7a:7f:a8:a7:e0:9c:97:e2:58:22:b7:f8:b6:
86:d3:df:28:21:30:15:24:98:77:23:34:aa:4d:09:
8e:cd:6b:17:6d:20:5e:30:01:4f:01:e4:c6:d5:3e:
de:4b:7f:16:4b:1a:e4:c5:05:5f:f7:f1:ab:6b:4e:
af:01:35:36:d5:bb:44:1f:c9:3b:62:3d:d3:20:3a:
b7:69:da:1a:8b:49:ff:1e:bf:c4:9b:6f:17:b2:ac:
32:7c:c9:25:39:7d:7a:17:96:da:07:10:e9:22:33:
23:d3:dc:c5:75:66:7d:e7:81:eb:a8:47:c3:1b:48:
92:13:45:50:b8:f1:f0:f7:80:1c:90:1c:b6:1f:2b:
5a:89:bb:06:8c:54:6b:1d:61:0b:89:90:5d:44:62:
7c:a8:44:20:80:cd:e1:26:b8:51:40:82:e8:27:ab:
2c:38:4d:65:d8:35:4d:fc:63:94:30:f3:8c:e9:37:
c1:28:0e:5c:c1:8a:3a:5e:cb:09:f2:09:43:bd:24:
f9:79:a8:88:78:43:ac:48:85:cf:33:90:db:71:29:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:2F:8B:40:EF:7A:11:04:43:68:AA:DD:A3:AF:BE:49:3C:82:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8a2e7a-8dac-491e-ae77-190a25b489ff/1/WxYvi0DvehEEQ2iq3aOvvkk8ghU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210707
Signature Algorithm: sha256WithRSAEncryption
28:34:48:20:7d:91:e8:b7:71:bf:d6:67:4a:ce:1e:bb:58:85:
52:3a:eb:2c:a8:8e:62:e3:96:06:ec:0e:fc:03:0f:a7:67:e6:
dd:31:85:a3:53:f3:52:cb:f6:88:77:93:e4:80:40:09:47:b6:
11:0f:50:40:e7:77:c5:d4:a8:3f:7c:3f:66:32:a3:2a:bb:53:
48:f8:cf:ea:fe:b3:20:59:16:9d:ea:9e:61:03:90:d9:67:88:
f4:dd:7c:2e:7d:8f:66:3c:1d:a6:f3:82:dc:ee:31:32:04:e9:
a5:b3:a5:61:e3:75:43:4a:00:1b:22:47:d1:d0:27:80:59:71:
b1:69:7b:77:b4:76:5d:24:f7:eb:3a:9f:db:e7:e5:df:e8:8d:
d6:56:02:eb:88:1a:63:35:b4:a0:d4:18:30:68:21:e0:7c:3a:
92:95:f3:94:b5:d1:13:b5:b9:e4:ed:42:38:99:02:d8:a3:cd:
f9:a6:ad:80:6f:1c:b5:f2:9d:98:d1:a0:c4:1c:8d:84:fa:df:
4b:0d:3b:43:dc:c5:44:8e:1b:66:6d:2b:3a:e2:f0:12:50:95:
a8:d4:08:4c:d8:42:4d:f3:da:11:ee:23:6c:61:a8:21:13:16:
51:69:bf:7c:52:90:5d:4a:37:06:92:c3:b8:20:99:09:d1:b4:
ab:cf:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:47:09 2024 by rpki-client on console-ams.rpki-client.org