Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPV2zob5WC3QMZpOmiXs23s17Dg.cer
File: XPV2zob5WC3QMZpOmiXs23s17Dg.cer (raw, json)
Hash identifier: vwNHlSjLahw+kvEJQHRXpkL6lEQTFUlkm6CgZsyZBHE=
Subject key identifier: 5C:F5:76:CE:86:F9:58:2D:D0:31:9A:4E:9A:25:EC:DB:7B:35:EC:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA6B060045F788F63CEAE11C8C1E8CEFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 14 Feb 2024 08:16:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211481
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:b0:60:04:5f:78:8f:63:ce:ae:11:c8:c1:e8:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 08:16:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf576ce86f9582dd0319a4e9a25ecdb7b35ec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:93:2b:46:4b:9d:91:22:0a:99:ff:53:b5:
b1:21:43:82:ea:a8:12:a3:3a:5c:71:9c:49:d2:7f:
71:f7:c4:55:60:6f:0f:49:c3:65:88:8c:76:2c:cc:
f0:9a:a7:c2:67:71:3b:6f:37:4e:3d:dd:a7:cb:2d:
5d:56:6e:97:d1:d9:fb:a5:db:0a:c8:d5:06:25:39:
98:f0:5f:e8:42:0d:4a:06:ed:3f:18:f7:45:5b:0b:
11:dc:74:43:de:04:81:20:18:38:14:48:8e:06:6d:
e6:17:b9:c3:a8:69:19:d3:f4:16:d1:89:d2:e4:38:
9f:61:3c:00:80:74:45:72:72:20:e5:d8:c7:9a:4b:
55:51:d6:87:ae:3b:ff:4a:a5:b2:3d:17:9c:b3:ee:
86:e6:fe:ee:ac:f7:b4:55:fe:37:75:e7:42:f3:e6:
75:b2:77:d0:f6:94:c7:5c:a7:26:19:3c:f3:78:25:
c9:ed:2f:4d:56:a4:6d:66:84:f5:2f:40:7b:8b:49:
a7:5a:bc:1f:8e:d7:eb:c0:c2:ea:e8:be:23:cc:73:
6f:a0:09:18:d3:c6:79:f2:dd:0c:57:64:b8:77:0b:
69:82:a2:aa:e4:d2:07:92:c5:54:d3:80:53:40:6c:
7e:47:47:01:16:30:c1:c6:35:d7:46:d4:91:44:9c:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:76:CE:86:F9:58:2D:D0:31:9A:4E:9A:25:EC:DB:7B:35:EC:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211481
Signature Algorithm: sha256WithRSAEncryption
02:5b:18:09:ef:f1:9d:8b:15:27:66:c3:28:ee:42:c8:db:14:
7f:ef:03:7d:e8:d6:e6:79:2c:3e:3b:c7:65:c9:6b:c7:71:4f:
9a:f9:be:c0:ad:31:e0:a2:40:41:5e:92:40:b9:4d:98:41:ff:
e5:2e:e5:fa:b8:09:c3:88:9d:58:ec:db:90:af:a5:ae:f7:51:
7d:85:1f:00:a4:e7:f1:07:0e:b9:f1:59:8c:bd:3a:02:f9:13:
de:c0:ea:6a:f1:7f:9b:20:17:9a:58:37:97:88:5c:6b:fc:da:
2a:18:cd:a8:f6:6a:fd:d9:8b:a8:5f:b7:61:58:c2:de:43:98:
7d:20:3a:83:e0:3d:5d:ef:2a:0a:08:01:a9:cb:93:66:d3:38:
83:bf:d2:9c:b9:45:ac:e1:70:e7:4e:21:b3:b4:cf:1b:8f:7c:
bb:f3:a6:0b:ce:40:f3:6b:6a:90:07:9e:2a:ae:47:9e:92:d7:
21:13:0b:78:62:f7:56:50:98:e4:35:6c:16:9c:2c:71:99:69:
b6:47:fe:fb:b1:8b:cf:ae:d6:f2:2e:11:84:ca:29:37:16:01:
b2:2d:0a:46:e5:22:94:f0:1d:60:32:13:ee:c9:de:0f:9d:3d:
c6:0f:8e:23:c3:50:f9:1d:cb:d3:79:4a:21:0b:24:82:16:7a:
57:d0:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:04:25 2024 by rpki-client on console-fra.rpki-client.org