Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer
File: d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer (raw, json)
Hash identifier: atFgZrsnRFOajQe2NaZa095f3HTKb60sY2C+49/uG+0=
Subject key identifier: 77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8D5DAAD383410CDE59E1617EB8EA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210836
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d5:da:ad:38:34:10:cd:e5:9e:16:17:eb:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7763e47fc850acc8ffda06e3da23a4a444c2d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:5f:f4:6b:b1:98:b1:ff:58:cc:60:2e:65:
41:35:d7:f1:a2:0a:f9:83:0d:b7:18:a6:de:0d:60:
ce:7f:64:28:fc:17:46:29:cf:a7:a3:c1:8a:a2:00:
6e:df:ab:3b:eb:cf:b2:ee:97:34:33:89:0b:73:fa:
08:cf:94:8f:22:85:c1:d9:5c:44:4d:5d:a9:b5:58:
42:80:5f:46:b7:c0:4d:b0:9c:27:35:e4:ce:bf:be:
87:a7:a5:80:5c:c1:00:ab:b2:58:d3:c0:ff:a2:bb:
55:10:ec:32:95:6c:5f:60:11:e0:34:ee:de:79:d0:
52:83:19:08:2a:de:80:c0:9e:0c:09:48:21:d4:6a:
0d:56:eb:1f:e1:c2:9c:8f:31:36:2b:41:8c:a1:69:
5c:3a:f8:f0:7c:1c:3e:c5:ec:61:b9:63:fd:2b:d2:
d6:42:70:77:49:6d:69:b9:35:6d:d9:a4:cb:26:bb:
3c:01:49:11:a4:4a:52:c8:00:5c:5e:95:3b:0a:b8:
d9:c3:de:78:c9:c4:72:08:5f:9c:3b:70:8f:14:c5:
0b:31:c7:11:79:87:5c:20:02:7e:13:e8:29:43:a4:
3f:c1:3f:aa:c4:7c:f5:ac:60:b8:df:fb:d0:4b:68:
dc:14:cf:8c:44:f2:7c:b2:fd:c9:3e:6e:9e:82:70:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210836
Signature Algorithm: sha256WithRSAEncryption
a8:14:a0:de:9b:5f:65:f2:93:44:96:0a:bb:c9:f6:99:f9:6c:
86:26:1b:0a:1d:23:a1:a9:34:6b:0a:87:9f:48:68:7b:4c:04:
ef:c0:36:ac:7a:8e:bc:8c:c6:62:11:ba:71:22:57:2f:ba:3e:
3e:db:ad:36:d6:14:67:3a:12:f5:6a:90:6a:1a:fb:df:37:89:
91:d1:89:12:27:e1:0c:f9:6d:ca:1d:15:61:68:79:15:71:bd:
b0:ee:52:c2:e0:74:ad:bd:f8:d7:d1:4c:42:83:c8:2d:50:fc:
67:83:02:3b:4e:91:66:47:ca:45:39:06:8c:a2:e5:43:8d:4e:
a9:96:c3:5e:73:79:e3:c0:41:e3:e3:bf:df:ea:ac:e1:c7:c3:
1a:04:4b:39:65:8c:60:87:b6:32:f2:76:cc:d7:71:0a:f9:f5:
5d:9c:c4:d5:6e:27:73:ec:21:5a:88:db:21:b9:71:f7:52:71:
d6:51:14:6e:32:19:85:2d:c1:d5:11:22:78:e0:e9:5c:b0:da:
de:51:80:26:af:21:c9:7b:9b:4f:ea:65:fb:e4:76:69:72:73:
42:0b:44:ed:6d:45:71:53:3b:3d:87:be:92:f3:e6:de:06:15:
10:e6:78:7d:9f:41:6d:25:8d:fd:fe:e0:7b:ab:0f:2a:65:0a:
17:0f:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:31 2024 by rpki-client on console-fra.rpki-client.org