Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer (raw, json)
Hash identifier: jHwzZuB/jwtWmd08rn/jw+zbmn+pY1KRjIvNwz64hlQ=
Subject key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49227F84A8267E8E6CAC9F1C2F16D29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210826
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:27:f8:4a:82:67:e8:e6:ca:c9:f1:c2:f1:6d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:57:b5:97:c2:7c:60:2d:ba:21:f8:e5:fe:
cc:1d:31:a7:43:ee:b7:57:8c:6a:39:62:d6:a4:2b:
51:e3:8e:97:7f:d4:3c:a4:e4:22:fa:06:d6:64:c3:
83:9b:4d:c8:a3:fd:2d:2f:c6:91:c7:da:bd:2e:12:
12:d6:87:19:cd:9b:9b:df:00:8d:b7:b1:ba:b3:73:
3e:26:96:7b:6f:3e:63:7f:29:c0:da:0a:fb:46:8c:
d2:6e:52:31:51:73:77:bb:6a:80:ba:8c:37:ba:50:
3e:ae:cf:89:ef:31:04:b4:a5:49:28:c5:72:f1:1e:
a4:ba:bc:1a:1c:8d:38:20:4d:2c:30:ac:cb:f3:ba:
3c:c8:73:f2:b1:d5:7b:7e:c8:2b:d2:6e:b0:23:58:
47:fa:42:40:b6:3c:63:37:9e:15:e3:dd:88:a6:66:
19:90:a5:c5:8a:f4:50:61:39:60:54:7c:b5:4a:d8:
a8:11:c1:84:25:59:6d:cc:55:fd:85:c2:ee:0a:bb:
9f:6b:19:5f:14:ca:9b:6b:53:0f:73:62:bc:35:f9:
7a:9d:0e:54:b9:06:4b:14:05:aa:15:57:89:02:69:
d9:d3:b2:80:70:e1:d4:ca:66:89:f9:36:ed:df:08:
a8:60:00:8e:97:78:d3:aa:4a:a9:72:61:88:6d:dd:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210826
Signature Algorithm: sha256WithRSAEncryption
38:6c:62:23:0d:a6:84:2a:57:ca:35:94:18:de:f9:a1:bf:2d:
cb:28:10:01:63:9d:53:0e:e1:4e:3d:5a:88:75:8d:8a:00:23:
fd:3b:75:d4:f2:1c:0f:20:9f:33:8f:53:de:47:01:10:dc:cf:
ee:86:8a:90:05:75:4a:c4:e4:1e:01:8b:5a:a0:dd:c1:03:17:
18:fc:b0:a4:37:e3:5d:b8:6a:75:e7:2c:91:1f:0a:39:40:c3:
8d:25:84:ad:c1:3e:76:ac:42:2a:4d:a1:02:54:09:e8:48:e9:
aa:20:3d:81:62:58:2f:1c:00:56:ce:5a:e7:97:ff:46:df:3e:
a7:96:9e:12:b1:22:98:11:e8:a4:c5:2c:9b:c6:69:94:cc:b7:
60:56:f8:9e:66:5e:45:5c:c5:07:58:d3:3a:8e:93:d8:9d:73:
90:36:f1:43:7c:42:d3:68:c9:03:bd:25:ba:f7:c6:8b:20:cf:
41:16:0e:81:c4:70:e6:7a:39:55:4c:87:df:c7:4c:e5:21:05:
4d:99:1f:99:c2:19:d3:ff:01:95:48:3f:21:37:9b:59:e6:58:
48:5e:1a:d7:c1:83:7c:aa:21:97:ee:13:94:3d:9a:54:50:80:
1a:d3:c3:f6:d6:b4:d3:a1:81:a0:3b:4f:4e:73:77:ca:27:a5:
4c:85:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:30 2024 by rpki-client on console-ams.rpki-client.org