Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.cer
File: ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.cer (raw, json)
Hash identifier: LiJA37cIQUpM2AAieuWMHiywBxSS/XcTsMPKED6ntkc=
Subject key identifier: 95:A7:68:A9:5B:49:9B:D3:BD:67:C1:41:27:AB:6F:97:10:A0:3E:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FD27C41966861A2E996A9901233A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203945
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d2:7c:41:96:68:61:a2:e9:96:a9:90:12:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95a768a95b499bd3bd67c14127ab6f9710a03ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:62:db:a5:8a:ee:a1:53:57:37:9a:a7:f0:
49:30:ad:2e:0e:6c:73:16:82:64:40:8a:f5:cc:0d:
1a:a7:07:8d:3e:06:17:3e:54:12:6f:79:17:1f:92:
05:fe:8a:19:2b:de:92:c4:2d:a1:a6:09:3a:25:f2:
ff:01:a3:47:a8:4d:fd:ee:3b:79:ca:29:da:7f:f7:
cd:0b:2a:7a:f6:dc:ae:81:87:23:9b:8e:1d:70:34:
d1:cf:ad:ce:3f:69:5a:bb:b4:e2:03:a2:a1:29:07:
f1:c2:bf:29:06:99:cf:62:e2:e9:ab:88:95:89:9e:
41:e1:da:d3:3d:92:ec:13:48:2f:0b:97:e3:3b:df:
6e:46:74:dc:29:ce:19:08:88:3a:d5:cb:a8:a5:d5:
69:e6:50:e4:e6:f3:bf:5d:ff:bc:a7:87:5c:9a:55:
21:5e:82:ab:b7:3a:7a:d0:7f:a2:34:31:02:68:51:
67:8b:d0:4d:f3:19:5f:1b:7d:52:56:e6:b5:67:c3:
57:b8:d1:88:8e:e8:51:b6:4d:cf:87:9d:0f:ab:b1:
2a:ea:c9:f3:d1:35:77:4e:30:de:3b:64:9b:d9:23:
9a:59:eb:77:94:77:3a:2e:d6:30:cd:04:4c:12:3b:
9f:60:cd:4c:d1:c4:fb:9f:8a:fd:ff:e9:62:c3:cd:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:68:A9:5B:49:9B:D3:BD:67:C1:41:27:AB:6F:97:10:A0:3E:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203945
Signature Algorithm: sha256WithRSAEncryption
90:9b:f1:cf:cf:e3:9f:92:02:c5:8a:cb:3c:94:d3:43:80:6f:
bd:9b:4b:cc:76:1b:ef:ee:4b:d9:91:86:66:fa:54:ce:31:2b:
b3:6b:06:e6:18:b8:13:81:b7:90:34:45:cf:49:e1:53:fb:5b:
28:81:7d:1e:4b:3d:e3:d7:d0:7e:f6:7b:42:8d:42:01:9f:25:
29:b0:8f:03:c4:fc:b4:8b:8a:be:7a:63:0e:68:f1:e4:ca:74:
2b:53:aa:84:7c:e4:e6:d5:a3:af:b4:f7:54:31:62:98:cd:d5:
1c:d1:d5:34:7f:5b:82:ed:66:a5:be:fc:b8:90:88:75:f9:e6:
1a:17:d5:2a:07:99:03:55:1a:a5:80:ee:34:9f:81:a2:7b:d6:
6c:f3:fb:dc:1a:e9:35:87:1c:a7:a2:ad:63:78:29:8b:a8:52:
bd:24:7b:c4:22:81:1f:1f:e7:98:f4:e0:95:27:2d:49:32:68:
64:46:12:c8:a5:ab:f0:d6:f9:af:59:ab:96:1f:04:48:4b:4d:
95:5c:46:a6:07:2a:2a:cd:92:0c:9f:b0:10:f6:f5:b5:20:d9:
cb:c1:b0:75:f2:a6:6f:5c:4d:07:ef:ee:72:18:0f:9f:48:f2:
cb:c9:14:cf:b6:a3:90:44:77:a0:f6:14:c7:a4:57:c8:ca:b4:
2b:51:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:00:53 2024 by rpki-client on console-ams.rpki-client.org