Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eylHREhZAKyWM7duV4vRXvgjhBg.cer
File: eylHREhZAKyWM7duV4vRXvgjhBg.cer (raw, json)
Hash identifier: 9K4VaO4+WCTM3F//xtbohRmTWN7Zg1SSddRTQIEIGag=
Subject key identifier: 7B:29:47:44:48:59:00:AC:96:33:B7:6E:57:8B:D1:5E:F8:23:84:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF43978B339F5A653CCC57D4872C76F9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 09:37:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215496
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:39:78:b3:39:f5:a6:53:cc:c5:7d:48:72:c7:6f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 09:37:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b294744485900ac9633b76e578bd15ef8238418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:b7:94:fc:6d:88:f9:56:31:3d:94:94:02:
89:9e:a3:7d:8f:fc:4f:9c:d5:44:6c:22:85:01:cc:
6a:8f:d9:aa:f6:58:5e:3e:d1:c2:7c:9b:0c:a3:93:
de:72:38:79:aa:14:ef:0c:47:48:76:ac:32:97:3a:
bb:df:af:7f:21:a3:19:da:ef:dc:e1:8b:13:94:2f:
d6:7e:10:1d:18:7a:c8:f4:8a:c4:14:f2:27:04:7c:
33:ea:e7:69:a4:f5:ae:49:12:d7:a0:44:42:e8:70:
85:56:e1:68:4a:f5:0d:40:e2:ba:fa:de:9d:c9:99:
5f:75:20:cd:84:bf:2a:bb:02:8a:12:9f:ea:23:2c:
93:0d:66:b7:0d:01:36:4b:c5:4d:cc:63:ac:2a:5a:
73:1b:6d:96:21:f8:09:26:b9:3b:d7:93:c2:8c:f6:
21:f9:3e:93:db:2e:33:28:41:41:55:c1:5c:7d:03:
1d:1c:52:ce:c9:8f:34:4a:31:28:a5:06:97:16:0d:
5e:4c:8a:c5:27:20:2c:60:17:22:fb:46:44:b7:90:
5b:15:4a:a6:d9:99:e0:dc:e0:d9:95:49:3d:dc:d6:
a3:32:fe:29:26:ab:80:62:0a:d1:6c:a6:f3:41:29:
d6:92:9c:ef:29:d2:b2:c1:f0:c9:9a:8b:c4:7e:34:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:47:44:48:59:00:AC:96:33:B7:6E:57:8B:D1:5E:F8:23:84:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215496
Signature Algorithm: sha256WithRSAEncryption
8c:ad:fc:86:f1:9c:2c:74:e8:74:51:40:57:9f:9b:f5:d0:40:
b4:fc:5b:1d:d7:d2:a2:37:c2:2b:66:54:fc:18:b7:fe:cb:df:
59:c3:1f:ce:ec:7f:1c:a5:21:32:0f:8f:0a:7e:f5:d3:ff:89:
64:22:f5:29:0e:8b:46:d3:6f:ac:57:26:ea:b1:fb:e0:fc:9f:
34:57:54:db:18:4f:3d:20:ad:f2:2e:bd:ec:bc:25:e2:7c:34:
fb:8d:54:ed:a9:cf:b3:1d:36:c2:7a:aa:a0:37:a1:b6:91:36:
9d:d8:89:61:bf:0c:2a:90:88:be:e1:14:ac:fa:6e:6d:d9:5c:
65:ca:3a:5c:32:f5:f4:af:19:01:6a:ad:bf:a9:e3:ff:2f:e7:
f1:b4:bb:19:42:64:ef:1d:c5:62:b1:d2:06:30:12:f2:1c:a9:
35:b9:bc:0d:78:b7:48:62:c8:57:14:b9:21:fe:c1:3c:56:a1:
db:39:69:4d:40:8b:f0:34:d2:36:2c:6c:36:80:7b:38:cf:24:
16:73:33:1a:b0:d7:0f:4d:5a:30:b0:f7:5e:d2:a2:cd:94:85:
b8:9f:00:14:86:f4:69:94:2d:16:8c:57:92:e1:f8:f5:e0:ad:
68:e5:ec:91:01:70:21:06:f2:ee:6b:70:b0:09:d4:22:cf:ac:
78:db:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:21:38 2024 by rpki-client on console-ams.rpki-client.org