Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer (raw, json)
Hash identifier: 5eIqOZeTDn4ON5epFQowGQnl+FXlnxz3q9p6sWTpv9g=
Subject key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E4D4BAB9EDCC7349FC8D425DB0173
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47157
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4d:4b:ab:9e:dc:c7:34:9f:c8:d4:25:db:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:23:17:5a:71:0d:2a:9d:c6:dc:50:7c:5e:
d2:50:6f:2a:29:d0:c7:0c:01:bc:db:a0:58:e8:24:
af:c8:f9:53:4b:55:90:70:54:b1:c1:f8:a6:33:04:
12:35:0a:a0:c5:2e:df:0a:2e:9a:b7:57:e7:d6:24:
34:f7:e0:bb:d3:27:1f:db:49:64:cf:e0:96:76:bb:
b7:40:47:c1:f2:ae:11:bf:c6:f2:cc:6f:21:1a:ed:
8f:54:33:df:cd:08:c5:bd:fe:9b:3f:96:ec:31:0d:
94:91:d4:fc:eb:41:7f:82:74:19:39:45:6c:4f:5f:
1c:9c:b0:d0:15:18:04:c2:c7:43:01:13:55:5c:89:
58:a6:35:71:25:b7:9c:d5:8e:6f:57:9e:ca:37:4d:
70:cf:07:67:86:8c:80:10:76:f6:93:b9:8b:dd:a0:
21:49:1a:9f:55:44:b7:b7:18:6c:5a:56:4c:8d:8f:
9d:ee:e3:2f:e7:3f:5e:a4:e0:f7:dd:66:8e:cc:a9:
3b:53:57:05:d1:92:53:5a:19:f7:ad:8e:25:3f:57:
45:3a:cb:67:af:0f:47:e9:6b:22:a9:e2:0a:5f:7e:
d8:9e:30:bf:c0:53:e3:58:c6:b3:e9:d4:19:8c:e1:
50:97:ee:60:6e:8b:3a:32:62:52:9e:3c:65:29:2b:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47157
Signature Algorithm: sha256WithRSAEncryption
85:1c:69:66:ac:28:14:92:a1:d6:c5:dc:7d:9d:09:fc:4a:c5:
47:2c:1b:af:ff:3a:97:b6:f5:8f:a3:4f:e5:1a:d7:6b:82:ce:
91:fe:41:79:2d:8c:b6:ff:e0:ac:d2:96:b6:84:3e:a1:8f:ba:
8c:de:c8:e2:19:e5:2c:3e:28:d6:7c:4d:60:54:65:36:87:5b:
68:50:1b:0c:5f:f7:69:7c:1a:80:bd:63:96:d6:6e:ba:76:85:
71:52:c4:ef:44:99:20:40:fc:a8:bb:39:4a:7a:a6:e0:17:b4:
b6:5e:57:28:41:eb:ba:7f:54:39:81:42:3b:77:f9:59:5b:a2:
72:bf:2e:a7:8a:48:54:cf:77:b5:99:91:05:0d:7c:4f:b3:8c:
e8:6f:84:a6:d6:a6:65:59:7a:93:85:ca:87:11:7b:40:79:08:
99:17:2c:5d:05:e9:a9:50:7a:77:82:97:f0:d0:b1:1f:e8:51:
18:69:b0:4b:4e:b1:91:54:03:c5:f8:39:05:c1:d0:c6:a0:10:
b9:c9:42:d2:3d:5f:2a:72:a1:1d:de:f4:84:0c:5e:7a:aa:0d:
1b:7d:14:c2:c1:ad:2d:92:64:ac:ed:65:8e:f8:1f:c4:0e:2f:
10:b4:14:72:a6:e3:8e:6a:b7:f4:75:3f:20:ce:ad:f8:9c:8f:
52:45:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:16:22 2024 by rpki-client on console-fra.rpki-client.org