Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
File: Y5-G_U81pnvLwn-OtveHq4veSfk.cer (raw, json)
Hash identifier: /2HxjSFy0bZEhmQv+ZcOdBAGeQI38yjSwfu4vxTICLo=
Subject key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E64D5C9C39DDB9F644DD58F50D949
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205404
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:64:d5:c9:c3:9d:db:9f:64:4d:d5:8f:50:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:9e:11:af:ee:7e:28:b0:2d:e2:66:34:82:
90:8e:8a:d3:fc:b8:78:93:39:78:5b:1e:33:56:03:
c4:0c:27:00:00:91:55:ef:4b:c7:8e:70:c8:d0:e9:
fa:78:b8:d6:bd:21:f0:49:d0:84:a2:10:b2:fb:15:
98:fa:9f:1e:1b:a1:92:12:16:79:a5:52:38:e0:6e:
69:a0:23:af:52:74:85:90:98:0b:ec:a6:02:b2:91:
9f:0d:76:a3:a5:5d:22:2b:e0:9d:48:b3:14:fe:4b:
3d:66:70:3d:e8:b3:33:0c:32:e0:a4:fe:ce:5a:7d:
a8:0d:4d:0c:2f:66:74:b6:85:ba:a0:74:e7:a7:c8:
65:23:82:9f:71:c7:3d:25:82:45:73:17:68:19:9c:
d9:9e:4e:0c:c2:60:e9:20:aa:ea:4f:56:dc:00:28:
53:f1:b6:0c:c0:c7:33:66:70:dd:36:05:a0:5f:35:
9d:ae:1e:4f:d9:70:b1:76:f9:81:be:f2:1a:ab:f4:
c5:a2:55:cd:46:e0:fe:06:81:80:57:c2:59:f1:66:
ee:58:5f:ae:3d:67:24:4b:9f:53:c2:0e:d0:d5:2b:
9c:93:c0:ba:e2:14:78:9f:a4:86:ed:74:31:52:2f:
7b:19:51:94:00:95:73:63:26:a1:8b:5d:47:30:7a:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205404
Signature Algorithm: sha256WithRSAEncryption
43:cc:8f:8c:8c:a9:2e:7e:6d:95:9c:2c:89:6a:12:ac:59:8a:
b4:28:e0:5c:83:48:93:3e:b9:19:68:11:d6:e2:41:48:e0:71:
4a:70:06:42:a1:78:22:bc:d7:2f:79:87:e9:96:1c:64:26:2b:
1e:54:77:ee:11:53:90:65:78:8b:31:4e:d1:f0:86:fa:62:06:
01:32:9b:ad:6c:79:37:31:9d:c0:dd:31:af:5a:9f:88:d6:4a:
06:c0:8b:df:62:e2:03:32:a8:a4:34:55:90:6f:19:5d:f7:ac:
8c:ef:7e:81:52:a5:ea:68:98:c7:01:17:ac:84:3e:83:8c:c0:
ee:61:74:c9:fb:5d:7b:13:be:c4:1f:b8:1a:52:fe:46:87:7b:
55:15:24:6e:69:5c:f4:e6:7a:26:b7:b9:c9:81:eb:76:29:ff:
c5:f8:bb:9d:51:7f:46:06:98:f5:19:ee:71:d4:c1:7d:f9:5c:
23:a8:98:8e:f0:09:bd:54:f2:b0:3f:ae:b8:03:ab:11:6e:c9:
79:7e:54:fd:42:50:43:6e:fc:05:a8:cd:9b:2e:e4:8c:8e:74:
0e:92:32:00:de:63:48:53:15:c6:5d:9b:06:41:f0:5c:01:5f:
e4:7e:e8:75:b6:57:f4:1e:46:9f:ab:24:4f:6f:80:9d:5b:46:
90:a2:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:36:30 2024 by rpki-client on console-ams.rpki-client.org