Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
File: mEL3HQwjZ4gu9HCLIGtLbimjezM.cer (raw, json)
Hash identifier: aSdiaDSdF1rW6Iw3x5jla7MYwGUbAzCANqK5DzSTG0I=
Subject key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5013640EA2F7B69531F21352DCB46C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48528
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:36:40:ea:2f:7b:69:53:1f:21:35:2d:cb:46:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:97:da:1d:34:d3:64:a4:19:bc:47:9d:c0:
e3:1d:be:9e:c5:7d:f8:03:f8:c1:d8:f3:ef:53:5b:
f5:63:67:6a:04:99:e7:90:13:10:d3:49:4d:47:07:
cc:70:fe:87:f2:f7:1a:b0:fd:b7:46:5f:82:9c:dc:
04:e1:7f:14:5f:60:bf:b5:78:bd:19:b6:b9:58:69:
1b:9b:44:30:c9:3d:3b:b5:30:d1:ce:68:2b:17:88:
27:b8:2d:e7:e2:cb:14:f6:f0:4d:c9:26:d7:e6:42:
a0:c1:2f:e7:5d:63:96:18:8c:93:1d:e3:97:b4:e2:
57:db:51:4d:30:69:fc:38:a2:28:d1:dd:53:86:aa:
c7:ad:56:dd:ec:18:fd:90:7d:b7:9b:fb:7e:5c:06:
b9:7f:10:05:95:71:62:af:3f:ad:aa:e1:dc:88:0e:
97:04:2c:d5:86:2c:db:2b:d1:6b:42:e0:5e:f0:7d:
b1:f7:46:1e:d7:21:78:84:d7:df:4f:b8:2a:46:ef:
d0:ba:88:40:8b:75:36:26:1d:28:da:3a:c5:28:c3:
ba:75:18:97:87:5b:9c:16:10:da:d5:c6:61:3b:45:
90:b6:61:19:5c:ab:20:14:a6:1f:8d:fb:72:43:5b:
14:82:41:41:89:94:58:ce:15:ab:f5:b5:32:93:61:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48528
Signature Algorithm: sha256WithRSAEncryption
28:46:a3:fc:b3:72:1f:cb:26:44:99:2d:8d:97:22:fb:ec:ec:
61:f1:33:05:20:8a:df:d5:6d:20:7c:de:66:da:36:89:7f:d3:
4b:74:e7:34:b5:05:7b:f8:23:e6:99:74:9d:3f:ee:13:d3:bd:
a5:c2:2c:06:3a:15:f8:73:86:ee:6e:f5:d4:e3:34:a8:f0:dd:
d3:fa:44:93:c1:86:9c:35:4e:93:84:1c:ff:48:26:36:d0:27:
cd:0e:a3:82:a2:10:42:ad:c4:41:27:53:d8:f0:38:7c:c8:43:
e7:4e:06:37:07:59:dd:5c:e5:47:45:e2:6d:c7:56:5c:9f:57:
17:6b:d7:8c:54:58:28:85:64:52:ac:07:d2:05:8d:9a:82:66:
da:8e:1c:89:ec:8c:ec:c1:59:08:04:fa:e7:5d:7a:af:40:de:
92:76:14:7e:47:77:0b:0f:e9:a9:91:dc:e3:f0:0f:2c:0e:d0:
bc:50:26:1e:af:d0:51:1b:0d:e1:20:fe:f6:55:91:3b:44:40:
b9:04:66:21:82:fc:b8:25:af:18:50:b1:a0:b0:f5:1e:c5:d9:
99:0e:c7:a3:a2:42:e4:e5:2b:c5:ce:67:28:47:38:2c:37:19:
25:5b:3d:24:9a:e8:5c:99:a4:04:bc:7b:a4:89:95:e7:1a:41:
66:45:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:21:08 2024 by rpki-client on console-fra.rpki-client.org