Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
File: eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer (raw, json)
Hash identifier: zm2RGGmuXQ7VWYRUr4T9NYxUr6dZJ0HhzvQgLPSX+xg=
Subject key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254E192999F4CE2889B3069095CCF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213015
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4e:19:29:99:f4:ce:28:89:b3:06:90:95:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:94:83:be:af:7b:d9:04:93:ec:64:cc:0a:
c6:d3:4a:0e:48:52:d5:0f:16:55:b1:15:98:ff:c8:
fd:8f:3b:1d:24:fa:e5:c8:4d:72:3a:ed:89:f2:95:
79:f6:8d:e6:ec:57:84:18:83:b2:2c:a2:f7:9a:98:
38:56:9f:35:61:f9:dc:12:66:57:63:09:b8:47:8c:
b6:d4:47:8f:31:86:db:c5:17:f7:49:5f:76:33:cb:
ae:82:4c:75:54:50:47:5c:24:1b:3f:d2:05:86:0e:
a4:b8:d9:b7:f4:b8:a2:21:52:46:d4:6d:d5:fa:f7:
34:3e:78:54:c0:cd:1d:1c:61:8d:36:1a:4a:fd:12:
3d:e1:35:ca:38:19:9f:87:04:04:e6:00:3e:84:a5:
69:d7:3d:66:97:2a:7e:19:84:70:ea:f4:d8:aa:fe:
fa:95:ab:3a:7a:a6:a3:00:de:ef:da:a3:f0:75:39:
69:30:bd:7a:89:c7:1c:b4:f4:86:9f:77:3a:44:f0:
a7:fe:dd:45:8b:82:42:e4:fd:0c:45:e1:96:07:a6:
58:d8:79:6b:b2:0f:a1:29:02:34:7a:f0:c7:d3:84:
b1:11:8a:18:66:28:a7:74:09:29:2c:e2:54:9f:34:
7b:c8:9e:c7:14:d8:d7:cf:34:77:af:68:3a:0b:6d:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213015
Signature Algorithm: sha256WithRSAEncryption
9b:a6:cb:ac:5f:4b:e3:25:1b:fe:c1:32:6b:1a:de:5d:b6:83:
9e:b8:ab:ac:51:75:fe:01:e8:f6:50:d0:00:87:01:ea:cf:d7:
21:db:03:6a:15:ca:d3:f8:8b:b8:bf:61:2a:88:6b:06:c4:73:
b0:8c:26:56:ce:8c:7d:97:79:68:43:03:3f:e7:c8:5b:c7:e2:
80:27:ba:14:e0:ea:a1:b2:64:ab:ed:c7:43:91:bb:23:f3:af:
68:09:d3:de:f3:1c:d2:73:8f:21:79:62:9b:17:85:0f:a9:b2:
d8:74:ff:f7:cc:5f:40:65:44:80:ff:1c:2d:2c:82:5a:b8:67:
9b:04:39:dd:87:22:5f:4f:f6:05:f8:45:68:80:71:30:eb:c7:
19:25:c3:6b:6f:10:25:a5:db:95:2d:9f:69:8a:77:39:aa:d9:
29:7b:66:d1:c6:58:d8:a5:4c:bd:68:ab:9f:89:1b:30:f3:f6:
95:cd:a6:a5:3f:44:73:d5:5c:70:45:86:44:08:9b:3a:85:42:
61:3f:0d:96:06:b6:bf:9a:83:23:32:62:97:81:80:d3:ff:3e:
24:c8:ba:92:a3:35:d3:80:69:44:5c:be:e2:98:bc:2f:79:df:
40:82:c4:06:0e:f6:db:23:84:f2:87:ab:e5:45:01:af:c6:83:
6c:d6:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:05:19 2024 by rpki-client on console-fra.rpki-client.org