Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer
File: nVvB3Vb2jL55J_20tIfZHa73KaA.cer (raw, json)
Hash identifier: gawbEvQfXxDgmEeGoYMXkijfLF3qWI89XdOlBXx2l04=
Subject key identifier: 9D:5B:C1:DD:56:F6:8C:BE:79:27:FD:B4:B4:87:D9:1D:AE:F7:29:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC88EC5EBB0AA0F6C17EB773CA501EFAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
caRepository: rsync://rpki.co/repo/Bee/2/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Tue 02 Jan 2024 05:04:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199693
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:8e:c5:eb:b0:aa:0f:6c:17:eb:77:3c:a5:01:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:04:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d5bc1dd56f68cbe7927fdb4b487d91daef729a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:a2:96:de:6c:cc:e5:7f:78:db:43:12:c4:
01:70:5b:4b:d9:fb:dc:cf:b4:6f:8d:ad:af:11:52:
9a:5d:29:de:6a:8c:d8:ae:3c:b5:51:3e:65:77:93:
59:2e:3c:b5:b3:6d:1f:b0:87:0a:a8:37:85:01:a1:
6b:2b:27:18:7c:f1:4f:4e:91:f6:7c:00:9a:86:dc:
34:15:c4:f5:94:19:0a:70:84:fc:f4:19:82:07:92:
0e:39:45:49:e2:17:dd:49:13:ca:17:37:8c:60:02:
57:bd:e5:b0:7f:63:91:5a:1c:9f:f9:41:bb:58:6b:
96:32:cb:a7:37:ba:09:c0:d2:0c:73:08:73:90:b6:
d6:74:0f:2a:df:20:64:f8:2a:13:be:8f:67:b0:2c:
2c:5b:55:59:d3:c2:91:f5:f0:e8:d0:dd:e1:0c:e3:
8e:1f:5e:bc:e4:d2:dc:75:d9:82:7e:d0:05:e0:f1:
0a:18:a5:71:08:8b:23:6a:f3:15:40:da:60:fd:c8:
21:e6:c6:64:71:41:9f:96:cf:86:02:dd:57:a8:00:
52:e8:97:4e:3b:15:03:0c:3c:eb:97:92:a0:6d:9f:
87:88:45:c2:13:7e:53:0d:ea:6c:94:cf:83:5e:73:
c0:95:34:71:90:a3:21:92:98:2d:65:83:b2:4f:9b:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:C1:DD:56:F6:8C:BE:79:27:FD:B4:B4:87:D9:1D:AE:F7:29:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Bee/2/
RPKI Manifest - URI:rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199693
Signature Algorithm: sha256WithRSAEncryption
30:da:e3:25:2a:7c:1c:dc:98:16:c5:d9:86:09:ec:13:16:c5:
33:10:a9:d5:59:09:a5:2c:4e:cd:a3:5e:34:33:e5:7c:b9:cb:
7b:f1:51:2c:84:36:1b:e5:21:d6:b0:9d:71:6d:d0:51:3f:2d:
40:a2:57:c3:e8:25:71:64:a7:4b:2b:07:1a:89:b9:2a:2f:87:
65:74:1a:2d:fd:ce:25:66:ec:05:2a:2c:f6:67:41:67:82:a3:
5f:fa:77:13:21:4c:36:10:69:10:c2:23:5f:2c:dd:04:e7:44:
02:b6:35:f1:41:b3:2f:01:7f:60:73:0e:92:0e:9e:b5:6e:a7:
07:48:51:70:07:8a:9f:74:b4:c3:1a:0f:a1:40:7b:8f:c4:9e:
7a:8a:d1:03:94:6a:ed:ad:97:f4:4d:5d:ef:1d:bc:c2:5c:aa:
93:22:c5:26:7d:7f:21:8e:65:c7:d6:83:8a:d5:01:6a:f4:af:
3c:9d:f6:7d:25:a8:22:a9:01:84:03:d5:57:07:67:9d:d7:bf:
7e:fa:61:79:62:eb:7e:7f:cb:c1:2f:9c:a9:f9:9f:fd:3c:ec:
4f:dc:ed:e4:36:73:5c:69:78:b3:88:55:51:20:09:87:c3:40:
b3:9c:1a:63:32:9f:b9:ae:73:fd:7e:b3:ba:0c:be:74:6a:50:
32:12:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:57:37 2024 by rpki-client on console-fra.rpki-client.org