Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer (raw, json)
Hash identifier: +TZNAzXkadHyBeaSL4ZiHuL05b7mZrBE+B84U6suv1o=
Subject key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7942CA51A327E1CFF0BA7A1A55B3F53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209771
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:2c:a5:1a:32:7e:1c:ff:0b:a7:a1:a5:5b:3f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:94:43:24:c5:d9:a1:28:74:1d:07:ce:42:
fd:56:ac:2d:0e:07:84:d2:7e:9b:40:5a:cd:c7:90:
83:26:98:47:19:48:fe:62:9f:5e:34:60:ba:2b:96:
53:3e:60:a8:c3:70:e0:b2:5d:de:61:b5:63:9a:77:
04:be:15:68:73:01:d9:20:57:b6:e5:ee:d2:ed:ea:
ff:aa:7a:f4:67:b5:8e:fb:b5:18:03:33:ee:25:f8:
e4:bc:a2:46:04:99:c9:cc:2e:a8:74:a9:b7:1e:84:
f4:69:e0:e2:a1:51:78:f9:69:c5:6e:ca:b8:2b:84:
64:07:c1:7a:a2:cd:8f:ca:16:7d:8e:85:57:cb:56:
9a:31:b2:42:13:7f:ee:62:bd:fa:d5:30:03:22:6b:
b3:6c:40:51:cd:0a:de:43:c8:28:9d:8a:cc:aa:ce:
16:ab:83:ab:af:30:6e:bb:13:3a:dd:30:92:87:53:
34:23:96:c9:6f:ee:60:9d:51:e7:0e:2b:d8:42:78:
cf:10:40:92:5d:cf:6c:23:d4:5a:2b:b2:37:99:ba:
00:72:7b:7a:8a:10:ab:0d:37:de:fa:d0:e3:fd:62:
67:2f:18:64:11:2a:fd:08:d6:e4:bf:f1:c4:57:30:
85:6c:0e:22:b6:9e:70:71:29:43:fa:b2:b3:24:86:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209771
Signature Algorithm: sha256WithRSAEncryption
54:d7:e7:10:29:63:81:5f:f8:f4:d5:c7:dd:ab:99:56:7f:78:
03:9a:25:e8:76:82:25:6a:f0:01:1e:a5:b6:88:31:34:3c:87:
9d:35:1d:df:0c:15:ce:dd:eb:ac:0c:87:d7:12:d0:fb:ad:e2:
ed:d6:12:90:da:5c:44:bd:56:0f:cf:a8:af:ad:37:63:84:02:
93:1f:94:95:f8:e4:c7:d5:56:c9:ef:b8:89:f0:af:99:57:50:
67:e1:9d:a4:7d:ce:eb:e1:63:7a:bd:26:e7:31:50:cd:02:97:
ea:64:40:29:4d:5a:6b:13:33:f0:0a:d1:bc:5c:1a:a4:dc:9e:
82:cf:a8:ab:09:d0:f6:90:5a:fd:53:ad:f6:9a:58:06:9c:fd:
85:db:f2:60:89:7c:c5:4e:c0:54:d4:33:41:ab:0f:4c:a2:a0:
0c:db:e0:13:a3:7c:44:69:da:9f:40:43:cc:b2:be:a8:6f:71:
d1:4f:8f:8f:28:96:2a:1e:6a:6d:98:95:71:5e:aa:64:26:b2:
d4:30:ed:0e:23:17:70:c0:fe:62:50:51:8e:8a:5d:f6:e6:ec:
38:2d:b7:eb:0c:ce:b4:59:de:45:4b:e0:fc:33:b8:3b:50:fe:
ff:51:0e:3f:55:7f:3b:d0:fd:81:1a:5b:e9:20:49:f9:de:f0:
5e:93:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:18 2024 by rpki-client on console-ams.rpki-client.org