Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.cer (raw, json)
Hash identifier: F7AZ/BLNT+tLGl1R8VGB4OPS12PMKH8nlXwN5pngUfo=
Subject key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0D8325951C0FAD16CE435FB3F379C855
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 07:28:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215543
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:83:25:95:1c:0f:ad:16:ce:43:5f:b3:f3:79:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 07:28:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:0d:87:12:95:fd:cd:9b:b7:25:43:47:62:
be:8f:8a:00:ac:cd:53:98:36:8a:e0:50:94:ef:05:
01:03:42:cc:33:1e:42:c9:cf:4d:dd:4c:a8:b8:ca:
d4:7c:28:28:5a:7e:38:5e:5a:38:1e:1b:64:a1:85:
ec:30:fc:36:a8:76:83:87:bb:c7:a7:c3:a8:76:e2:
2c:ad:ef:de:c7:32:c2:a4:cd:b8:ca:3c:2c:1c:a6:
7a:8e:01:5e:7d:82:d0:f6:16:c9:d3:5a:38:3f:a3:
1d:0c:39:41:ce:4c:bc:36:f7:1b:c4:0a:10:ca:b3:
03:a4:48:a5:97:b7:da:2b:c4:27:9d:f9:15:a9:71:
1a:15:34:be:c9:5d:94:71:43:b5:ab:4f:e2:84:62:
b2:80:1c:4d:f0:3a:3d:09:bf:81:b7:42:37:76:f4:
34:e3:fe:18:28:56:c3:4f:57:b1:53:87:8b:d8:48:
28:d6:3f:6f:cf:22:64:be:cb:c5:79:df:d5:34:e7:
65:53:64:68:06:df:95:59:94:1a:97:7f:ff:f7:5e:
66:35:3d:b9:63:7a:a5:ec:4f:66:46:37:51:c1:59:
17:1d:2d:01:79:58:df:37:ce:95:ab:ce:35:1b:99:
0e:0f:af:df:88:f7:a6:59:b0:c9:55:cf:6a:92:67:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215543
Signature Algorithm: sha256WithRSAEncryption
6f:ac:aa:a9:4a:62:c9:08:dd:b9:ab:64:b8:83:05:b2:79:c2:
1a:2f:da:2c:f8:b2:f7:39:88:f8:fa:c2:ee:fe:a3:97:2d:d7:
b1:44:31:c7:92:9d:c7:97:67:95:d3:1f:76:b0:0b:e6:41:3a:
4f:d7:05:8b:7f:86:0f:40:80:82:29:29:bf:de:0d:51:cc:ed:
f3:16:7f:d7:fb:cd:f9:98:9f:c9:dc:ea:c3:2c:f0:1e:93:1f:
db:1d:76:d8:01:21:a6:a0:f3:b7:9f:10:ec:ed:6b:1c:ff:4f:
3e:7b:c3:80:ec:79:9b:27:08:90:24:ca:eb:87:e0:b2:d8:59:
16:ea:0e:48:4f:a5:ea:0d:11:07:f4:f3:b9:7f:00:28:80:f3:
81:0b:93:77:54:5e:b7:27:dd:a7:6a:b3:c3:7d:65:90:e4:f1:
7d:3e:ac:11:be:f6:c7:2f:86:35:d2:d5:3c:37:5a:63:c4:2b:
a6:5e:e1:cc:e5:e5:ff:66:ee:e3:79:76:0a:6d:95:23:05:4d:
51:9e:a4:1f:98:ae:ea:23:ea:3c:c6:16:38:2b:f6:13:84:df:
d9:a8:a7:41:19:a5:a8:2e:32:87:d4:1a:89:92:5a:58:94:cb:
1e:41:e6:4a:64:07:b2:76:ea:8c:19:41:69:0e:c3:06:8c:4b:
0a:73:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:16:58 2024 by rpki-client on console-fra.rpki-client.org