Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jLZpZy4rodaJZx5CWvSa3X11Nv8.cer
File: jLZpZy4rodaJZx5CWvSa3X11Nv8.cer (raw, json)
Hash identifier: RPItntOd3jU76ep+7jzi9n/+KsEF0sDSJ/hAiH7q2oM=
Subject key identifier: 8C:B6:69:67:2E:2B:A1:D6:89:67:1E:42:5A:F4:9A:DD:7D:75:36:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EAB527037E838F20CDA19400C90CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/dbd6db-f4dc-4a51-9070-8855bb830ff6/1/jLZpZy4rodaJZx5CWvSa3X11Nv8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/dbd6db-f4dc-4a51-9070-8855bb830ff6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212718
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ab:52:70:37:e8:38:f2:0c:da:19:40:0c:90:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb669672e2ba1d689671e425af49add7d7536ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:44:83:02:53:2a:4a:4b:96:4e:db:01:ba:
02:ba:cd:7e:9a:a0:f1:06:72:4b:a9:8a:49:a1:83:
c8:4f:a0:7c:5a:ab:d0:98:2d:d4:c8:7c:cc:ef:43:
3e:42:f1:7f:88:05:b4:15:9f:c5:b6:bd:34:77:69:
19:48:bb:04:65:25:5f:24:78:b2:08:75:6d:8e:21:
d1:b6:71:06:26:9f:66:79:c9:56:6b:a6:f7:94:b9:
b9:cd:27:50:31:54:30:45:1a:8e:7d:ce:ff:74:66:
37:8f:7d:d0:4f:19:96:85:7d:25:fa:d9:d2:dc:39:
47:b2:ff:8b:25:05:84:f4:05:59:7f:c9:61:91:30:
df:55:aa:46:a9:06:eb:32:ab:9e:cc:d9:3d:8b:72:
f4:fa:37:b6:72:e6:74:e4:cc:29:74:9f:d6:da:20:
bc:e3:14:c4:84:96:f9:b3:bd:00:4f:4d:0c:ab:97:
d1:1d:5e:83:35:c5:39:d1:37:f4:d2:a7:0f:59:d0:
7e:bc:8c:1d:29:19:38:e6:41:03:6e:a1:ad:7b:01:
71:9d:eb:2d:b1:c5:75:e8:89:22:e0:42:c9:1e:45:
09:67:d4:35:c7:ef:76:32:3e:f6:fd:2d:53:a2:f6:
ab:1a:2f:99:85:cf:39:01:47:db:64:9d:8d:bb:40:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:69:67:2E:2B:A1:D6:89:67:1E:42:5A:F4:9A:DD:7D:75:36:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dbd6db-f4dc-4a51-9070-8855bb830ff6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dbd6db-f4dc-4a51-9070-8855bb830ff6/1/jLZpZy4rodaJZx5CWvSa3X11Nv8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212718
Signature Algorithm: sha256WithRSAEncryption
2c:12:45:ad:04:31:4a:cb:9d:03:90:9f:0d:0b:a6:15:5c:05:
28:69:ed:d3:3d:b0:e3:63:6e:5e:b2:d2:91:70:c3:93:03:72:
1b:bb:d4:e3:32:76:c0:b9:3c:cb:3d:e3:95:0d:cf:3a:d5:b2:
ba:e7:53:13:0b:c2:d6:cb:f1:c4:36:18:00:38:0f:5f:07:80:
6f:c7:77:f5:55:e1:f6:71:d0:58:03:87:84:9c:c3:f2:e8:9c:
b2:59:90:b9:a8:6f:ad:29:ff:04:14:a4:fd:0a:c5:3c:0d:0c:
83:b6:2e:6e:13:ec:e9:25:87:e1:de:17:dd:f6:ff:92:a2:08:
13:55:d4:c5:b3:e4:c4:f8:2e:43:80:7b:64:29:cf:66:ca:07:
6a:b2:0a:f1:c8:67:1a:f3:fd:78:ed:b4:d4:4f:99:2c:2e:0b:
b8:2b:12:2c:de:6c:87:c8:ed:08:5c:a2:c6:ea:c2:7e:fa:01:
70:97:08:43:31:f7:45:f9:cf:08:5b:8e:a6:78:c7:34:2e:fd:
cf:90:b4:e2:f2:82:52:46:87:d7:d1:91:f7:01:b0:18:c7:8c:
c6:0e:80:9b:55:84:61:bf:6e:f8:21:3f:f8:53:ec:75:8f:16:
e5:b6:47:2c:ef:1b:8c:48:28:38:91:50:ee:5a:aa:19:32:2c:
05:d3:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:56 2024 by rpki-client on console-fra.rpki-client.org