Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XSvcBbOGzcqZqhwmOOCX2fVKZBM.cer
File: XSvcBbOGzcqZqhwmOOCX2fVKZBM.cer (raw, json)
Hash identifier: n0uZmrpkT/jo1zcPsxya9rgTBYNQBxKPbuPwUMvb6H4=
Subject key identifier: 5D:2B:DC:05:B3:86:CD:CA:99:AA:1C:26:38:E0:97:D9:F5:4A:64:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B87BAC613E1C9882370C14BC48FA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215829
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:87:ba:c6:13:e1:c9:88:23:70:c1:4b:c4:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d2bdc05b386cdca99aa1c2638e097d9f54a6413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:8e:33:0b:ad:0b:04:3d:a7:ac:8f:3e:b1:
26:99:40:53:09:5e:23:b4:28:70:81:1d:80:62:86:
39:3f:22:80:f3:88:16:ac:05:5d:0f:62:4b:26:f5:
b0:20:2d:18:d3:0f:39:ff:93:08:bc:2a:17:8c:f8:
69:13:56:55:b4:ff:99:54:ff:0a:ac:2e:5a:19:27:
3c:d7:de:f0:3b:53:5f:83:59:da:eb:d0:af:ae:00:
9b:85:b4:9d:ce:c5:72:ec:a2:41:8a:44:0a:4e:53:
8b:8c:f9:3a:db:2c:e1:31:8e:8e:fe:07:24:92:51:
6f:1b:27:6a:a5:2b:7d:f3:66:cf:c6:21:84:3c:8f:
ca:ef:1e:3e:84:12:68:0f:44:5a:2b:21:40:17:50:
c1:06:5c:42:c3:65:91:c7:fb:f0:83:c6:7c:4a:de:
79:57:95:09:0f:b1:56:68:b4:3c:43:2e:43:ae:f8:
24:d9:18:a7:00:52:bd:55:db:a7:49:07:55:2d:f6:
bd:f8:4b:a6:fe:de:13:f1:ea:1f:c6:94:2e:4c:f9:
66:ba:10:83:6f:10:aa:77:6b:2d:7c:c6:03:f8:6f:
1f:3a:d7:e0:dc:bb:ec:d9:cb:b4:88:4d:c0:05:d0:
5d:4e:d1:e9:a4:0f:2a:06:ab:a7:a6:66:fa:b7:c9:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:DC:05:B3:86:CD:CA:99:AA:1C:26:38:E0:97:D9:F5:4A:64:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215829
Signature Algorithm: sha256WithRSAEncryption
33:f4:40:5b:3f:11:e6:8d:36:51:e1:29:88:4d:04:be:db:de:
57:1b:97:bc:da:99:79:71:82:93:40:28:37:f3:a8:71:3a:b5:
db:9b:dd:57:f5:af:d9:aa:76:52:44:1d:97:2c:cd:16:8a:30:
90:ef:21:bf:c5:87:94:99:71:26:b7:da:46:ea:58:32:25:bf:
c2:b0:d4:34:a1:e4:8b:1b:f2:17:e3:b1:80:f2:08:bd:35:ae:
e9:22:cd:18:54:5a:51:9a:0a:f1:55:17:ca:eb:5c:d4:c9:ce:
88:3e:c7:53:07:e6:ec:26:d0:f1:e1:1f:ca:ee:64:5c:7a:73:
f2:1d:dc:2c:d4:fd:af:92:bd:71:84:70:4a:31:fe:d9:28:8e:
c0:05:ae:c1:26:d8:db:8f:af:3a:17:55:06:cd:77:ba:cf:d9:
c2:00:6a:13:15:6e:19:82:90:1a:85:23:40:3c:05:e7:46:54:
0a:b9:85:9b:e3:ec:1b:b1:2d:bd:91:80:71:5a:35:21:ba:b6:
b5:bf:93:bf:f6:61:3c:f7:e2:6d:5b:bf:8c:4e:94:b1:c8:10:
eb:0b:2f:ab:06:33:da:82:a0:03:e6:8f:54:64:5f:e2:08:88:
2f:c4:21:ed:91:19:a6:8b:68:d0:eb:eb:fa:01:4a:43:cc:0c:
a1:1d:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:22:22 2024 by rpki-client on console-fra.rpki-client.org