Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer
File: e3GzUs9psfJyplQhurrIElGJ0-Q.cer (raw, json)
Hash identifier: XdPciNX4ZWGmFoS8l4INJSTmYqlGJmzUJIhRAw9wEk4=
Subject key identifier: 7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC50B9034A54B276CD49E5CD21B939
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205886
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:50:b9:03:4a:54:b2:76:cd:49:e5:cd:21:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b71b352cf69b1f272a65421babac8125189d3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:66:1a:3f:50:39:d5:2c:fb:7f:93:c2:53:
d6:79:85:05:4b:33:42:e6:5e:35:53:2d:8c:49:27:
c1:64:03:bf:d2:12:7a:7c:dc:d0:09:44:32:29:b6:
f0:72:39:f4:c1:43:79:11:53:f3:5c:68:8c:14:b3:
fb:b2:03:70:82:53:83:62:d7:29:f6:30:41:ac:16:
6a:83:af:a0:2a:ab:c9:d0:7f:2f:33:af:af:71:e6:
46:6b:6e:df:9e:1d:d4:61:a5:72:b5:06:46:f6:40:
3e:20:4f:a6:cc:53:0d:10:a9:23:63:be:50:05:7d:
84:73:72:f1:74:5a:f9:1d:c7:be:35:c3:96:9f:aa:
fe:1f:64:21:1c:06:e3:80:a0:dc:84:47:da:1f:56:
84:2c:54:f2:d3:3b:0c:8b:e2:4b:ff:c4:90:97:70:
73:dd:8b:44:83:a4:f9:e5:24:72:28:14:d8:95:cd:
b4:43:9f:5f:ca:76:87:90:65:11:3a:a1:a2:d4:d6:
e6:ce:2b:58:64:a4:a5:d5:f1:d5:b4:78:ba:d7:2a:
2a:2f:78:3c:45:c5:85:c0:e8:2c:f0:60:18:db:17:
c8:c9:84:17:ee:3c:73:1a:f3:20:ff:30:75:52:e1:
24:90:c8:e1:d7:ac:97:e0:8c:2a:ee:52:a6:98:8a:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205886
Signature Algorithm: sha256WithRSAEncryption
0d:cb:74:fe:06:e2:d8:fc:7a:0c:3d:72:1d:58:e7:ad:34:ba:
c5:ff:97:66:fc:0c:03:40:26:60:72:17:b1:28:6c:24:53:b8:
94:a8:e6:3b:9f:e1:1a:c1:07:cb:b8:f0:6f:9d:2e:d2:97:2d:
04:66:d8:ad:81:79:44:71:63:58:dc:47:f8:bd:d8:75:ea:c1:
b2:35:fd:30:ae:55:79:a0:23:b8:04:4c:34:7f:45:fd:f7:07:
a0:bc:f9:ff:6d:e2:8a:5c:93:3c:e6:36:5f:09:0b:f1:d5:19:
3f:28:5f:37:38:94:05:29:90:dd:a8:60:04:9e:61:d0:4e:45:
49:7f:f2:3a:ae:ba:17:74:03:c0:7e:fc:70:1e:eb:fb:0a:90:
0b:83:e3:9e:b0:76:c0:24:05:58:77:bc:df:52:9c:9e:ef:5a:
37:5e:a7:f2:58:38:9e:b2:9c:db:20:ca:82:6f:a8:a4:61:23:
20:21:75:b3:e5:ea:45:ee:c0:5f:f8:d9:a7:07:b6:00:32:90:
a6:31:34:4d:7d:8e:ed:b1:d6:ce:b8:f2:a0:1e:23:4c:9e:04:
77:6f:d3:ee:99:b7:04:a8:a1:f4:9f:e2:93:1b:f1:cb:37:84:
b7:e0:1e:7c:76:d0:66:73:49:f6:69:7c:81:c0:86:31:6d:31:
5f:4d:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:19:09 2024 by rpki-client on console-ams.rpki-client.org