Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer (raw, json)
Hash identifier: pQHbqemmRp0YV+TIQ43W9dDt2fdOpZL9IP7ckIS0aPA=
Subject key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5012F5A221CE70792D1CA405B990D2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212946
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2f:5a:22:1c:e7:07:92:d1:ca:40:5b:99:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:69:26:a7:d5:99:0e:fc:b7:80:99:99:27:
28:83:38:9d:ce:23:ea:fc:33:5d:61:40:98:45:06:
28:da:e7:7c:77:eb:61:60:34:76:06:a8:1f:cc:4c:
fe:96:b2:7f:fa:d8:bc:a9:8a:75:48:81:40:17:6e:
42:65:a9:47:6d:f9:a7:da:5a:99:3f:4c:9b:a4:b7:
fd:c7:e4:7c:0d:e7:10:a9:a5:62:5a:e7:61:19:b9:
3c:6e:c7:d6:80:d1:0d:c7:5b:fc:c5:73:04:00:4e:
e5:60:06:ec:4d:dc:76:de:82:3f:d7:ef:cd:d8:ee:
bb:08:86:d7:ce:c3:5f:2b:4e:2c:c2:52:e5:a8:45:
c1:6e:53:46:26:0b:58:07:95:34:3b:6c:31:7e:b7:
6d:20:6c:5c:c4:85:73:8a:ef:45:03:e1:73:9c:42:
5a:9a:ff:06:bb:42:08:9f:80:36:81:57:fd:08:99:
87:74:cb:81:d8:6f:20:9c:2e:74:5b:0b:7d:d8:22:
b3:5d:95:1a:02:d6:b5:65:ee:2b:f1:d4:03:e9:79:
46:b0:e9:81:8c:8c:0e:13:66:85:fd:d4:ad:86:35:
8a:dc:7e:eb:74:1f:4d:09:ff:00:12:be:3a:b7:9c:
2a:98:78:01:a2:4a:3e:eb:8f:58:23:08:62:ae:37:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212946
Signature Algorithm: sha256WithRSAEncryption
11:77:6a:3d:72:ac:d8:90:be:e0:4b:37:9c:5f:0e:f5:87:21:
20:4a:6f:49:33:17:ec:33:47:f1:11:2d:41:38:3c:1c:e5:73:
34:ba:43:8f:ec:49:7c:74:b4:87:89:ed:ae:6c:3a:4a:67:a2:
1b:36:6e:b3:19:e0:a7:e1:94:3a:c0:2f:2a:9b:c1:33:ad:cb:
35:bb:3d:4c:23:58:57:d1:76:07:bf:1f:3d:7c:35:1e:de:6c:
00:a2:6c:63:33:80:9c:06:d5:f8:30:d1:9c:b7:2c:1a:0c:af:
44:19:4b:dd:d6:31:4a:b9:4a:07:00:7f:9e:44:cb:e5:15:59:
de:0c:cf:9e:0c:7a:d7:ff:28:16:51:2c:f5:82:7c:d0:0e:53:
28:6c:68:3a:d7:a0:ac:51:c2:63:90:d7:4d:e3:82:4f:24:f9:
e5:72:e1:46:c2:f7:1f:71:27:8f:a9:c1:c5:46:0b:f1:e1:7c:
33:4b:76:14:ce:6e:1d:5e:90:d4:07:1c:b1:ea:9e:a3:2d:31:
07:8e:f8:52:36:ab:f9:2b:5d:ea:c4:7a:96:48:3b:35:a8:e3:
97:14:07:0f:b3:00:17:bc:3a:a8:ff:56:bb:96:a5:4f:0a:56:
15:ae:09:03:e2:57:07:70:ef:ad:2d:09:fd:f9:7f:56:00:d3:
9c:95:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:12:37 2024 by rpki-client on console-fra.rpki-client.org