Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.cer
File: Xau5xKS_Pfb5GpjWcjJJBA2pbXE.cer (raw, json)
Hash identifier: lYvgl4PtIBUkYYS1sSV/e9wlg+dk0O+cv/3kG15I2A0=
Subject key identifier: 5D:AB:B9:C4:A4:BF:3D:F6:F9:1A:98:D6:72:32:49:04:0D:A9:6D:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010B445CE21108C875DFE3142F4EDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200219
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0b:44:5c:e2:11:08:c8:75:df:e3:14:2f:4e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dabb9c4a4bf3df6f91a98d6723249040da96d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:a5:f5:c1:a4:81:7e:af:55:6c:7c:e3:65:
63:7e:ee:10:3e:2a:f8:e7:95:ad:67:8c:ff:74:e1:
ed:c3:a2:6f:a6:3b:87:de:5d:e4:b1:8e:c2:2b:33:
bb:1c:a0:37:18:49:08:d1:bf:82:f5:c9:52:b1:f3:
37:12:fd:56:68:e4:38:3e:ef:bc:c4:2e:75:ac:aa:
5d:2e:9b:d9:dc:06:7a:ac:23:4d:25:6e:9f:cd:94:
65:1b:bf:b8:9e:a3:be:e4:24:10:ab:99:e9:fb:30:
48:7f:e2:31:be:c5:24:12:a5:ba:4d:c8:70:54:2e:
b1:62:87:4c:0f:f8:0c:ba:cd:ac:a7:8a:8e:99:9a:
fd:bf:d7:79:3d:9b:e1:c4:06:39:e3:68:fa:a0:a8:
e1:0a:34:c5:11:f9:47:79:32:51:88:f6:92:68:a7:
9b:3a:cb:5a:47:b9:58:52:74:d9:1e:c3:5c:8c:89:
ed:4f:f2:7c:bd:38:3b:46:eb:7e:c4:7f:c8:02:18:
a4:d6:8e:85:cb:78:a3:eb:bd:91:f9:df:10:f8:e4:
25:7a:b3:38:c0:00:20:2f:f9:be:ab:3f:b1:41:0b:
cf:b2:94:30:70:d6:3c:c7:9b:2d:a6:20:9d:3c:09:
4e:a2:3a:39:23:6b:4b:a9:c6:e9:ef:ac:ff:ce:89:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:B9:C4:A4:BF:3D:F6:F9:1A:98:D6:72:32:49:04:0D:A9:6D:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200219
Signature Algorithm: sha256WithRSAEncryption
a6:95:e7:33:48:d6:ef:9a:a6:28:e4:0d:70:ea:65:f7:d1:6e:
f7:c9:0f:e8:dd:b1:75:97:cd:7e:b6:aa:5b:d0:4a:ee:10:35:
71:07:00:83:32:cb:9c:b0:1a:ba:31:68:d4:51:ea:18:91:5c:
b2:3d:09:b9:b6:75:69:94:b6:04:6a:cc:40:1a:53:44:3c:aa:
64:e8:80:96:4e:ee:3c:d3:e7:fb:84:e2:aa:47:0e:7c:fe:e8:
e9:ab:12:59:17:9c:8c:37:d3:db:a6:f8:2b:01:85:13:de:e7:
65:8d:07:55:d0:25:b5:28:a1:de:c8:93:c2:dd:39:8f:ca:51:
6c:a2:2d:16:d9:65:7f:2a:f8:9e:8b:7c:8e:b2:1e:df:f4:4e:
c9:fd:fa:e6:52:5b:d0:99:00:8e:45:62:71:5a:3b:fa:57:ba:
b1:83:30:b1:91:b1:af:6e:7b:3c:8f:7d:ac:fb:f7:9e:8b:03:
51:52:fe:27:c0:e6:22:89:44:5f:2d:57:72:83:34:76:d1:fe:
ec:89:d8:66:3a:24:2f:c8:64:77:ef:37:c0:3c:d6:29:f2:ab:
76:e8:ef:32:9f:8f:62:84:c0:d5:23:b7:c5:cd:ed:1e:68:50:
80:4d:76:5c:e3:21:f5:2a:6d:cf:76:18:d4:0c:c7:6d:9c:41:
cc:d3:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:20 2024 by rpki-client on console-ams.rpki-client.org