Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zcavt89Uv30aeoM_IfLq7egMFNQ.cer
File: Zcavt89Uv30aeoM_IfLq7egMFNQ.cer (raw, json)
Hash identifier: OMY0F5Yohc36Gk7TCYzk5vr4SACJwcbOHyYd7GoDcio=
Subject key identifier: 65:C6:AF:B7:CF:54:BF:7D:1A:7A:83:3F:21:F2:EA:ED:E8:0C:14:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49341E7FF8915F1FBDCD2162554570F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/1b11d8-3acb-489d-a495-fbb477c9f2c4/1/Zcavt89Uv30aeoM_IfLq7egMFNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/1b11d8-3acb-489d-a495-fbb477c9f2c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209552
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:41:e7:ff:89:15:f1:fb:dc:d2:16:25:54:57:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65c6afb7cf54bf7d1a7a833f21f2eaede80c14d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:35:7a:1b:0b:39:89:f4:97:ae:e6:c4:bb:
66:60:e5:07:7b:b6:32:cb:dd:e1:b8:b7:f2:aa:4a:
14:a8:03:92:2c:9e:f5:21:e6:ce:fb:f9:8b:f7:fa:
2c:fa:0f:38:83:3c:b0:96:95:ab:d9:e2:bf:84:79:
ab:79:00:6e:6f:e1:34:a0:22:64:e8:c4:f8:74:c6:
b5:3b:03:97:ce:20:60:82:d8:f5:05:aa:d4:05:a0:
f6:7c:1f:11:72:88:4f:d9:7b:cf:a5:51:16:ab:91:
0f:2e:d4:bd:53:ff:d9:85:a0:d3:78:15:c9:07:f5:
39:ee:de:67:e0:6d:dd:1f:07:af:6e:9a:aa:f5:6a:
84:ab:ed:5f:d6:63:46:c6:76:9b:1f:24:66:50:96:
85:cf:02:98:7d:0c:e9:b9:b8:e0:51:22:af:4b:32:
80:c2:61:00:08:65:b6:be:54:cc:6e:13:d1:78:49:
76:b8:49:88:df:d6:00:6e:01:06:e6:cc:53:cc:fa:
36:e7:a8:22:da:f1:e2:6d:a7:09:5a:13:e0:eb:61:
cc:5e:3d:ad:e5:34:1e:ad:0d:44:80:42:db:36:d7:
22:90:07:25:9b:d4:a2:31:15:d5:d2:20:31:e2:91:
4a:fd:fe:2e:8f:8a:52:15:28:5c:7d:74:04:dc:84:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:AF:B7:CF:54:BF:7D:1A:7A:83:3F:21:F2:EA:ED:E8:0C:14:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1b11d8-3acb-489d-a495-fbb477c9f2c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1b11d8-3acb-489d-a495-fbb477c9f2c4/1/Zcavt89Uv30aeoM_IfLq7egMFNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209552
Signature Algorithm: sha256WithRSAEncryption
4b:81:0a:54:27:ea:86:b8:12:ea:5f:32:68:cf:2f:77:03:99:
4d:23:73:99:c5:27:22:28:91:58:74:ef:d5:10:1b:e7:74:f0:
f9:f2:d3:2b:52:f9:e3:90:25:54:6e:35:2f:72:50:fd:ed:17:
8f:51:70:9a:ab:96:13:51:15:25:d6:77:7e:62:ba:9c:3a:2e:
cc:fd:5d:9e:3b:02:96:48:8c:f9:a0:8b:87:f3:bd:82:af:6e:
5c:76:5c:a6:62:ec:aa:e6:6e:88:56:6e:d6:34:9c:2b:6e:2f:
a8:b7:c7:76:c4:be:29:d9:84:2d:ba:0e:c2:9f:12:87:89:48:
c0:af:46:92:41:f9:a3:b4:40:a8:1e:40:e9:6a:7c:ae:21:b6:
98:77:e3:73:73:7e:16:6e:b2:91:05:4d:c2:16:be:55:f8:29:
ab:18:0c:53:38:86:b4:94:64:3d:a0:af:59:3e:89:0b:89:d9:
ef:d4:57:91:8d:cd:e5:78:3b:ab:ed:4d:42:85:4a:fb:66:9d:
b2:e3:20:db:09:eb:39:bb:35:67:d8:18:57:0e:2e:7a:d6:c4:
14:4a:99:95:36:1d:a2:a6:a6:fb:ca:a7:5b:95:d8:9c:4e:3d:
0a:cf:4b:72:cd:4a:51:20:fb:43:16:24:bb:d7:a3:b8:85:6b:
6e:77:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:48:47 2024 by rpki-client on console-ams.rpki-client.org