Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
File: _30XNGbvuybSoRkpi7l5mgk8MjA.cer (raw, json)
Hash identifier: PkRPmS67JvrXwxgJdQblezKZegCvbfeMP/prZJNLUkA=
Subject key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEA57FE97A095268B98E94B270AF54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212121
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a5:7f:e9:7a:09:52:68:b9:8e:94:b2:70:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:82:46:b6:c2:07:67:1e:34:42:8c:f2:b6:
c9:bd:1e:56:b3:01:db:89:33:45:57:32:3b:ea:fc:
8d:e9:2f:dd:ab:80:97:79:13:f8:4a:09:4f:51:77:
bf:d8:d5:af:53:05:af:af:ee:c2:87:bc:9e:a0:76:
83:5e:77:f7:c0:35:0d:99:5d:2a:af:cd:ea:18:5a:
06:cc:03:ee:31:08:f1:6c:59:93:26:fb:b0:c3:77:
74:14:e4:d3:41:bb:59:c9:04:31:e9:6b:81:9d:48:
cc:62:e7:21:79:8b:ca:99:51:9d:e6:c1:c7:e1:3e:
51:8d:f3:99:d1:f5:8c:33:e2:37:6c:51:9a:d3:b0:
72:fb:fd:a3:42:3e:e3:5e:5a:0e:a1:e1:bd:28:d8:
6d:57:3c:0f:81:d3:67:ee:c7:72:07:38:24:26:7a:
ef:93:5f:c4:c2:21:e3:7c:41:c7:61:4e:4d:f8:dd:
58:2f:fe:dc:3f:91:e9:1a:59:66:91:48:33:7e:4c:
2a:7c:da:24:2d:36:b6:f8:91:f1:07:ee:7e:6b:76:
fb:1f:e9:c8:f3:28:5f:09:09:be:2b:54:80:92:ea:
31:b0:fe:37:5b:62:ba:8b:d5:ea:1c:d7:ac:0f:da:
f7:ee:3b:14:b8:86:79:80:b2:7e:6d:d4:fa:70:ed:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212121
Signature Algorithm: sha256WithRSAEncryption
97:51:40:0a:92:d4:a7:b4:bb:35:57:da:0e:ef:72:1e:9b:cf:
d3:cf:ca:2e:eb:13:31:97:cd:8f:ed:3a:dd:b3:c2:5c:40:4c:
0a:20:b4:fa:c0:9d:a7:76:cc:41:e4:d3:05:c8:5a:3a:ac:6b:
bc:1c:d2:ae:f0:89:49:1a:34:1b:cb:5d:85:6e:1c:8a:6f:76:
9c:bc:cd:58:85:c3:4f:0d:58:c5:a1:aa:76:35:61:d2:9e:5a:
e5:49:e5:22:5e:88:1f:66:53:85:1b:de:f0:e7:5e:1b:43:16:
c6:fe:fd:be:5e:b0:d0:01:82:a9:45:9c:28:74:a7:af:d6:96:
f2:eb:0e:50:da:03:be:3a:eb:a3:ea:a7:8a:73:40:65:97:87:
88:df:8e:62:44:a9:4c:fc:5d:e0:bf:98:4c:78:56:2b:87:d5:
62:ae:90:10:4c:a0:1a:0b:ed:f0:e3:7f:61:c5:af:bd:6b:e0:
8a:88:c6:3d:96:f4:15:8f:bc:2a:38:1f:98:7b:ec:49:52:7e:
b2:1c:1c:8c:2e:27:f1:a7:64:3c:14:ce:fa:3a:ad:34:fd:e9:
25:a6:5b:1c:39:c2:41:03:42:05:37:1a:43:0a:73:0d:a1:8b:
f0:72:74:0a:45:c7:75:8d:a4:ca:9a:c9:85:d8:5c:69:82:e3:
09:6d:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:06:57 2024 by rpki-client on console-fra.rpki-client.org