Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer (raw, json)
Hash identifier: sy8S1WnWNyld2Qrp3v7msFYg0mF1sqlN3/RSFzRigpM=
Subject key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7935057D5EEBFE02C1289A70EFF70F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204738
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:50:57:d5:ee:bf:e0:2c:12:89:a7:0e:ff:70:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:67:47:3c:e4:80:a2:39:d0:9f:f6:b2:80:
b7:84:cb:f8:80:a2:8c:26:65:fb:40:2d:58:15:07:
e0:7e:ce:4f:59:01:db:87:ce:59:47:94:bc:b7:d6:
ee:cb:8c:12:0d:33:26:11:05:f3:f1:94:c7:45:f1:
25:96:52:84:1d:85:d9:42:e0:48:b5:7f:0d:fc:7c:
2a:bd:28:64:a1:08:12:f9:56:ab:08:69:47:28:95:
1a:81:a4:ab:50:c5:4b:cf:08:bd:0b:27:cb:89:a3:
69:a3:7e:a3:c8:c3:ec:c2:1f:32:cf:06:ac:ae:39:
d9:06:8c:a4:ee:c8:ec:42:de:50:bd:e1:be:5a:d8:
ba:26:d8:95:23:11:f0:3e:0c:51:2e:b9:92:9e:09:
78:f6:71:ec:14:ee:25:04:5b:c7:78:3a:db:aa:89:
cd:92:a1:dd:01:c3:73:2d:07:22:54:ed:7c:c3:d8:
04:b6:8f:98:9e:01:b8:3e:1d:26:c7:df:e9:57:b3:
6b:42:65:ae:ea:44:87:3f:c2:1c:27:28:6e:24:5e:
21:df:e3:7e:a0:3a:7e:ba:f5:bc:4f:c5:72:81:8c:
9c:40:d4:ed:a8:c4:00:14:75:46:58:de:de:18:71:
37:1f:00:c9:b9:0f:31:e4:bc:ec:48:c3:19:57:21:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204738
Signature Algorithm: sha256WithRSAEncryption
73:51:5c:61:0b:29:27:60:70:e6:6e:72:38:64:8d:48:eb:d1:
cb:b6:f5:33:51:7a:1b:7b:9f:a2:7c:32:15:42:b1:cf:86:eb:
2a:f4:55:eb:4a:02:99:c4:00:76:59:17:b8:94:e4:42:b8:d4:
7d:6e:66:3c:fd:4a:5b:57:fa:3e:db:35:64:00:16:35:be:ee:
e4:db:16:eb:2c:3f:df:3a:e1:6e:f0:10:53:6c:aa:cb:00:3d:
c6:e9:5f:10:02:4f:a3:6a:38:a2:ba:a2:25:ef:52:4d:5e:69:
3c:0b:d2:f1:f7:04:1f:cf:0f:a1:de:3a:ab:0e:ce:38:f5:5d:
f1:cd:cc:fd:d3:93:0e:82:ed:8c:00:b9:c5:1a:00:ca:2a:4e:
fd:8d:f5:25:49:b1:dc:fc:2a:6a:ae:26:eb:2b:bd:85:ca:61:
39:fd:bb:25:f0:69:76:95:97:70:fd:43:73:16:75:57:09:65:
c1:79:a9:18:a6:70:de:17:93:f1:e3:2a:0f:35:6a:1a:5a:b7:
b2:fb:95:02:ae:53:12:69:ed:70:79:03:61:a7:5d:d5:9e:2b:
31:b5:b0:fe:ab:7b:01:46:bc:5f:f2:60:29:f5:33:f1:e7:5a:
16:dd:39:c2:59:6e:de:2c:c2:da:32:59:8c:d3:48:91:40:80:
3b:75:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:16:59 2024 by rpki-client on console-fra.rpki-client.org