Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer (raw, json)
Hash identifier: JJSYSPORyxErT9sdvf6eej+ESoVQ5vVkqFvOxjjrXrI=
Subject key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BE5E294942FAD0C3E50CDE64AB6B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197601
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e5:e2:94:94:2f:ad:0c:3e:50:cd:e6:4a:b6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:cc:ce:31:40:da:cc:35:7d:f6:d9:c8:b6:
70:63:ba:dd:72:75:96:fb:dd:de:3a:0e:3d:ed:10:
e9:88:49:95:e8:85:fa:a6:9c:63:81:b3:e3:27:51:
2a:68:57:ef:f3:dc:28:8d:92:64:74:15:c6:45:45:
bf:d2:1d:3b:4b:ca:12:c0:af:a1:8b:73:9d:c0:ce:
bc:66:d0:d9:79:e4:34:d6:99:d5:28:03:00:81:cd:
69:79:4b:11:10:06:0a:07:34:2c:18:5a:4f:d4:f7:
be:ef:cf:45:cd:cc:00:df:81:84:52:cd:8b:6b:b5:
e0:8f:6e:3d:84:a4:6a:fd:c4:97:bc:5b:03:82:10:
88:29:ba:b0:2f:e7:43:87:b5:52:de:b4:5b:79:8a:
1b:94:b6:85:00:c3:7d:43:bb:bf:d9:14:47:eb:ba:
56:61:de:c3:7e:ef:8e:14:ef:c8:58:6c:2a:08:c7:
b0:ab:ac:33:8a:79:eb:66:2e:f1:7a:1e:63:aa:f0:
89:19:5c:dd:70:5a:f4:0d:cf:90:54:7a:cd:cc:7b:
0a:78:1c:86:cc:83:c0:2b:e5:3f:3f:67:da:bd:ef:
79:0d:6c:a3:42:68:6d:8e:46:8a:be:ad:6d:85:69:
58:42:59:f0:92:a6:74:30:d6:be:29:5d:2a:09:e6:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197601
Signature Algorithm: sha256WithRSAEncryption
68:38:52:14:2e:c8:8c:ee:4f:ea:74:b3:78:da:34:5f:69:44:
e4:52:d9:3d:79:47:bc:d3:7a:dc:c9:23:1d:e3:04:a5:32:47:
6e:cb:5c:b2:d3:11:75:77:83:da:96:92:8c:3c:29:16:8e:20:
4c:35:64:64:63:76:12:0f:2d:ff:0b:c6:63:66:1b:65:ed:b4:
df:44:d0:7a:d4:85:7e:36:83:f9:79:b7:14:87:4c:ea:69:2c:
bc:7e:04:be:6b:ef:c7:18:f5:4e:2d:82:95:c1:ae:e9:27:89:
23:1b:cb:71:93:7f:ff:10:cf:74:cf:09:e9:da:d1:51:58:36:
d9:81:c1:d2:2e:06:67:d4:ba:9c:51:78:ee:3a:bb:45:c6:28:
a2:37:c3:20:84:b8:0d:d3:fb:e0:73:64:f7:a7:e4:bd:ba:14:
b3:e7:3d:fa:04:00:ee:f4:33:20:f4:55:f1:a6:f3:91:74:aa:
44:df:4f:1b:c0:41:5d:08:54:ab:28:d9:9b:c7:f6:f1:13:36:
70:84:1d:a2:c2:27:7a:01:a3:e2:47:aa:4a:ad:5b:09:92:66:
43:2d:8c:4e:5f:8d:b9:cd:e5:66:4d:27:a7:c4:2d:3e:5b:a0:
6e:67:f1:9a:80:6a:cf:d3:b5:69:05:9e:a6:ac:be:d6:c3:73:
1f:af:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:48 2024 by rpki-client on console-ams.rpki-client.org