Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer (raw, json)
Hash identifier: 7etXTUhJKHUtM0h80ahUwN3fIGDBhQ6CyNOXSlYXhYE=
Subject key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6771DCD8E748E49043C61B6037C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216010
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:67:71:dc:d8:e7:48:e4:90:43:c6:1b:60:37:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954cf721c08c8e9bc5242d56196677217350455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:6d:64:2e:4e:97:da:ba:27:be:4a:54:d7:
20:7e:4a:c1:08:7c:06:13:ce:df:85:e6:20:15:66:
99:0e:95:e1:6b:7a:79:b6:df:b4:50:ba:1b:b3:16:
92:67:10:1a:fb:44:8b:9a:2e:51:ae:42:d9:4f:6a:
a1:c3:cd:21:51:83:2d:87:42:87:68:46:eb:fb:e0:
1f:82:26:c9:c8:1a:47:88:40:dc:75:25:6d:0f:2c:
21:d1:79:c0:9a:5e:48:3b:c7:b8:a6:c6:c1:ae:bb:
bf:ba:34:c0:1d:32:cf:d2:da:ce:84:6f:45:a5:cc:
2b:be:ae:56:b4:40:3e:da:c9:5a:ce:15:7c:e6:14:
a1:1f:49:54:85:85:e4:b0:3c:17:1e:7e:f9:bc:db:
06:25:a9:da:96:a2:f1:b0:e0:60:21:9c:d6:66:21:
7f:f9:d7:a7:36:2f:5e:61:7c:1b:3f:b8:4f:cb:f1:
b3:96:16:14:7f:f4:6d:f6:f5:41:21:a1:9a:81:ea:
09:62:ec:be:67:55:2f:94:6f:ab:f5:f5:65:50:78:
72:bd:e3:00:f3:60:52:8a:e2:97:21:01:02:71:f8:
27:38:d7:aa:92:00:bb:2e:db:ab:ec:59:fc:75:e8:
f5:d0:b1:2c:1d:e7:ac:da:46:09:6f:ae:a6:10:1a:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216010
Signature Algorithm: sha256WithRSAEncryption
77:be:09:65:99:36:22:d0:7b:84:41:c2:63:62:ab:fb:42:c3:
f2:38:16:95:88:6a:62:c9:fc:97:96:96:bc:ee:8c:76:a2:05:
0c:be:be:36:f7:bf:c6:b8:81:e3:4b:bf:66:c8:b3:a7:1f:e0:
ce:4c:db:2b:65:ce:da:35:9d:f1:a5:71:d3:40:45:83:07:3f:
52:2d:3d:bf:33:ba:16:18:ea:e8:6e:00:7d:4e:48:f8:b1:62:
1f:c5:49:6a:8d:cc:7f:38:a0:21:69:d6:d5:96:c1:6f:5e:1b:
af:c8:20:6b:6f:9a:da:6d:eb:32:3e:5c:73:b9:5c:c1:18:13:
1f:90:22:20:d4:12:76:e2:60:fd:d9:4f:72:75:b8:38:56:03:
23:2e:bb:fb:7b:28:ba:a8:03:2d:26:60:84:44:fc:9e:11:c7:
71:41:1a:c8:c8:3f:44:64:e0:84:e6:f1:79:22:14:96:9a:e3:
de:e5:f3:75:7d:44:be:07:fd:25:24:6d:42:f0:8a:a5:22:fd:
76:5d:1c:2f:7f:66:85:25:94:9b:56:09:1f:cf:28:22:15:56:
25:ec:27:9a:1c:23:85:49:bf:9b:20:29:0f:4b:de:60:0c:3a:
99:23:38:d2:34:c8:0d:c2:29:94:9e:3e:5c:e3:35:9c:84:cf:
00:b6:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:00:51 2024 by rpki-client on console-ams.rpki-client.org