Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
File: eruW1HY31HxxYVtg2h9pHEpvC3A.cer (raw, json)
Hash identifier: 1bsGhKNM/aY1lo5PkLab5ODLLH+bjrwaQIMypbParsw=
Subject key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B2DA88AD2ECA9A457708B6B28E3CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59975
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2d:a8:8a:d2:ec:a9:a4:57:70:8b:6b:28:e3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:07:cf:51:93:a4:88:0c:e4:a5:7f:eb:a2:df:
a2:dc:db:36:ca:cb:53:aa:de:c7:5f:ad:50:4c:b3:
66:41:09:1c:86:cf:11:36:6f:2d:60:b8:9b:3a:4b:
0c:db:0f:76:0c:a3:a4:90:8b:9f:b3:b0:67:67:18:
07:34:5d:0a:7b:3a:90:c3:56:82:a6:94:37:01:c2:
81:ac:f0:4a:40:31:46:03:27:16:d6:d6:b8:e9:e0:
dc:3f:37:b9:fe:91:c4:41:ea:20:1f:19:71:11:ee:
b3:21:56:31:f3:8b:38:f5:5f:59:59:18:69:da:5d:
5d:73:c6:04:71:fe:f5:eb:0d:9e:ed:da:2a:e4:95:
ba:75:4c:8e:55:56:90:f9:fa:27:91:38:e9:06:9b:
db:e4:b9:de:9f:87:c2:ae:84:6d:59:7a:79:b9:ef:
54:6d:39:9f:74:61:be:0c:d7:df:40:71:25:65:d6:
eb:6d:a6:97:d7:4e:d3:3e:89:6e:62:e8:cb:8f:eb:
c6:01:16:ef:ce:69:68:02:53:89:25:89:72:55:f4:
33:e7:bf:cb:0a:75:71:5d:3d:37:f3:ae:de:e5:9c:
24:77:45:c4:58:8e:80:fb:e7:54:71:22:93:06:73:
3f:ef:84:e8:85:bd:d1:95:c8:d7:90:44:5b:fe:4d:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59975
Signature Algorithm: sha256WithRSAEncryption
16:6d:61:6f:65:bc:a1:3f:46:ae:44:27:fe:27:01:45:c2:d0:
5d:ed:63:60:f1:8f:7c:ed:ae:f4:4d:1c:de:47:ce:c8:27:db:
d2:f0:f6:b8:fb:be:46:01:0a:03:a4:b0:52:a3:fb:0a:21:ff:
6a:f8:d6:00:17:13:29:e6:5c:79:1e:c2:77:04:b7:15:b3:da:
5f:a0:c8:dd:eb:e0:da:48:4b:f0:f2:44:8a:a3:29:f5:8a:f7:
e0:02:46:5d:ea:4d:07:74:0c:77:2a:47:29:13:5c:43:5f:5e:
42:89:eb:43:7e:f1:10:1b:69:a4:02:11:d4:6a:5d:1b:6b:e3:
2d:bb:46:3c:c2:64:2e:c6:d0:b4:b1:e9:c8:26:0f:f5:f0:9c:
59:db:4d:14:43:d2:b1:1e:6b:bd:89:20:05:d4:6d:05:f4:94:
6d:ab:6c:e4:11:ec:ad:bf:0f:3e:60:74:bc:a7:f2:24:71:f3:
fe:37:de:5b:53:46:69:b8:88:1c:49:55:72:eb:11:c1:3f:3a:
bf:62:a0:e2:38:95:e0:c4:75:a1:a9:05:30:9b:6d:1a:ae:92:
33:af:a6:89:69:a9:ed:ec:1a:ae:a5:75:f1:7d:1e:ff:98:c6:
ad:52:cf:73:67:ef:06:8a:5c:95:65:f4:8f:3c:33:7b:3a:94:
b8:cf:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:30:10 2024 by rpki-client on console-fra.rpki-client.org