Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bLdrU2M4PWjlVeUnClkx2DQOGA0.cer
File: bLdrU2M4PWjlVeUnClkx2DQOGA0.cer (raw, json)
Hash identifier: aZLZTKUnfocO3ayo2cEVK4/bVRUzJzH8f//yiB1nF+E=
Subject key identifier: 6C:B7:6B:53:63:38:3D:68:E5:55:E5:27:0A:59:31:D8:34:0E:18:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB08A012899AD83170C99237ECD79E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/bLdrU2M4PWjlVeUnClkx2DQOGA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48546
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:08:a0:12:89:9a:d8:31:70:c9:92:37:ec:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb76b5363383d68e555e5270a5931d8340e180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:15:a8:14:5a:21:c3:22:19:57:de:a7:cf:
a3:2e:c5:8d:8a:ed:99:38:02:53:33:dc:cb:8d:36:
0a:fb:37:75:e8:e3:c4:b2:cb:cd:de:47:61:b1:4c:
11:3d:64:93:e3:9d:0d:cf:4e:23:31:10:f2:72:31:
1e:fa:35:0d:cc:a8:9a:a8:92:38:a8:6a:de:61:75:
17:9e:83:a6:2f:8f:73:77:9b:c7:7c:dd:a3:18:a5:
22:89:71:f9:02:82:57:d4:5d:c3:67:7e:4b:5c:ff:
5f:37:67:fd:fe:c3:7a:36:51:fa:d7:4b:53:34:66:
16:36:81:21:41:a6:fe:1b:0c:4d:74:b4:55:5f:ab:
3c:85:de:f5:38:06:c4:e6:6f:d9:de:8e:d3:63:ce:
26:05:cc:f8:ad:95:cd:56:88:ca:50:06:1c:32:c3:
00:17:a7:bd:65:9d:d8:00:ee:f6:63:7a:b2:ee:58:
07:96:a4:cf:22:d3:72:f8:2d:90:89:5c:ae:1b:e8:
5b:1c:c6:86:03:9a:8d:9a:63:be:8b:52:73:58:04:
4f:40:e8:41:39:fd:ea:4f:b8:ac:94:25:03:a1:a7:
d1:66:3f:1b:ef:c0:0b:3d:47:c8:d3:36:a0:45:af:
1d:aa:bf:6e:f9:60:b8:7e:16:85:ec:74:1a:7e:f4:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:6B:53:63:38:3D:68:E5:55:E5:27:0A:59:31:D8:34:0E:18:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6de729-8c2d-4e12-87aa-cb4526fb17d0/1/bLdrU2M4PWjlVeUnClkx2DQOGA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48546
Signature Algorithm: sha256WithRSAEncryption
9c:e3:fd:6e:35:d3:85:8b:df:c7:f8:55:e7:e1:d0:f8:c2:59:
0a:bc:61:4c:47:27:f6:ea:b3:cd:11:1a:0e:f0:f2:a7:87:31:
97:e7:27:9e:56:3e:58:ee:7e:95:1e:03:d8:7e:45:bb:c9:04:
f8:de:67:db:a4:44:e5:5d:88:1d:8d:c2:00:f9:24:ba:78:78:
83:6f:86:03:af:28:7e:ce:6d:88:60:63:de:91:ac:45:b9:27:
b1:d5:e6:23:78:5f:c1:1a:2b:76:51:14:fe:84:6e:cc:e9:a4:
3c:3f:54:2e:cc:ad:59:98:b8:1a:c9:05:52:9b:72:e7:1a:3c:
00:5f:58:0c:74:55:51:47:41:39:d5:47:47:cd:53:91:2d:64:
b9:38:bf:5e:1d:7e:ed:9d:10:b6:4f:e4:78:31:da:44:e4:ae:
8a:ec:ff:70:5b:32:21:df:4b:36:0d:4c:19:46:de:9d:8e:68:
66:11:19:a9:59:85:cf:98:99:1b:ce:c7:1c:07:9d:a6:4b:69:
7b:c1:6e:36:b7:28:33:f4:59:f8:f6:06:30:fb:17:79:a6:de:
c9:36:eb:35:fe:9a:88:82:45:36:be:70:50:89:0e:38:cc:94:
8a:50:03:85:cc:4b:d3:f0:62:af:0d:ab:c3:bc:d4:1e:a8:e6:
f5:ae:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:30:48 2024 by rpki-client on console-fra.rpki-client.org