Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
File: Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer (raw, json)
Hash identifier: ZfODzVD6HtggzXR/UTxiswDro1MzcfEg49X+ascApf4=
Subject key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191130BC4EC90B7195E377CCA69266E5331
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Aug 2024 12:23:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204291
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Sep 2024 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:0b:c4:ec:90:b7:19:5e:37:7c:ca:69:26:6e:53:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 2 12:23:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:b6:cf:0c:1d:e2:64:a4:40:02:f8:51:fa:
ae:bb:bb:57:f5:04:13:24:72:8d:7f:77:ba:72:e2:
a6:30:c7:c4:4c:d3:35:42:68:d1:97:6a:6f:23:8c:
c3:80:8b:16:56:13:aa:53:a1:53:f1:6a:59:f7:60:
5d:8d:84:60:ba:39:e2:4f:44:ed:c4:02:05:72:9e:
32:a6:a1:ea:94:b7:1b:2a:7e:d7:02:61:39:28:51:
56:c1:1c:97:14:7e:44:e5:06:8c:8e:fb:f4:0a:1c:
6e:be:8d:6a:fd:69:af:4c:b0:f0:31:4b:cd:f4:00:
04:07:e8:cf:a2:ae:ee:4c:9b:23:be:d8:8e:3b:60:
9e:0a:83:de:63:a5:33:ee:60:4c:91:92:59:36:7d:
c5:cb:f9:c9:46:04:e8:53:52:e3:be:20:29:e5:6b:
76:ee:28:58:f7:97:b8:b7:36:c6:60:e9:4f:41:59:
72:b9:7d:84:4b:ef:d1:38:0d:6d:71:16:83:9b:0d:
0e:bc:1a:ff:c5:c8:fe:74:c1:2e:77:30:16:19:57:
4b:d1:4e:55:5e:ec:4b:21:35:32:b7:2e:9d:ac:12:
19:a6:43:4c:e2:9a:8d:35:70:d3:17:ae:91:34:f4:
52:bc:56:aa:bc:2a:f9:33:33:90:65:35:ed:3d:13:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204291
Signature Algorithm: sha256WithRSAEncryption
8a:82:63:81:de:72:0f:56:19:88:b7:4b:0e:36:e6:42:f8:ad:
06:5a:ac:85:7f:e0:ee:59:a4:90:9e:1d:0c:29:4f:03:d6:82:
ff:ab:8d:c2:7b:be:77:f0:17:f4:bb:90:5d:bd:78:5a:75:19:
56:08:74:88:10:6c:f1:37:71:b3:18:43:81:5f:75:79:1b:c2:
f2:df:1f:d1:c6:af:e1:59:10:8c:b3:f1:71:26:59:c0:e8:76:
f2:a9:cb:d3:a6:f6:47:f0:1a:71:9a:6e:1b:a3:57:1d:a4:32:
a5:43:9d:61:dd:26:25:0b:d5:b7:b3:94:81:37:76:92:91:00:
35:28:2b:97:77:59:a5:97:7e:9e:fb:51:a1:0f:36:c0:ab:d7:
12:10:76:f8:89:46:2e:27:54:f6:fd:30:b6:39:c4:69:d8:2a:
89:68:a3:a1:d6:cb:b3:6f:0c:ca:7d:c7:56:70:9a:a8:2b:8f:
e7:04:34:fe:cf:14:91:a7:eb:c5:49:2c:d6:13:7f:c8:55:ad:
0a:92:e6:8e:fe:95:7a:e9:c4:4c:60:63:13:f1:4f:a4:be:28:
1c:5a:0e:45:10:f3:27:e4:79:ec:b2:93:e9:f1:a0:d1:84:ca:
b4:b8:70:04:b1:f6:a3:b3:de:74:89:35:93:9a:2c:e6:be:30:
be:24:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 13:32:23 2024 by rpki-client on console-fra.rpki-client.org