Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer
File: nwDOElva92YyktO-I2S_ZFyGtqY.cer (raw, json)
Hash identifier: nNvXNsixeg4Wpx7EuIFXo8KQVFgiN3CeCuF4nZ8tAzs=
Subject key identifier: 9F:00:CE:12:5B:DA:F7:66:32:92:D3:BE:23:64:BF:64:5C:86:B6:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F9F3D4F1EC7541D068FCDE0935A7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60952
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9f:3d:4f:1e:c7:54:1d:06:8f:cd:e0:93:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f00ce125bdaf7663292d3be2364bf645c86b6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:11:d3:5a:26:14:af:1c:e3:d4:cb:3e:97:
2b:d4:a7:ae:67:e5:a5:16:cb:9b:ae:f2:6c:7f:20:
c5:0f:09:09:5c:d3:a2:d4:06:07:8d:60:c9:05:6c:
0b:81:9c:a2:84:b5:01:8a:d1:ba:d3:e7:02:96:bd:
3b:34:c1:5e:7c:dc:79:d4:cf:ec:71:d9:c1:25:7f:
db:8b:1f:91:df:ba:a8:8a:0b:49:fb:dd:6f:a8:78:
47:b0:cc:2d:37:9f:0b:57:55:cf:15:9a:a2:cb:ab:
6d:c2:6d:a6:18:70:3e:43:d4:fc:07:63:19:0e:61:
bf:6f:cd:58:25:51:a9:6f:ef:d4:17:3d:f6:a7:ce:
88:bc:51:bd:d6:62:11:db:ed:74:8b:b5:92:a5:3d:
9a:20:a4:52:15:ef:fa:45:30:56:c3:68:cf:26:ca:
96:20:aa:09:06:1a:ea:13:8f:e4:24:37:66:2b:14:
f2:3e:bb:b9:91:ea:78:ef:4a:63:0c:01:ce:98:c2:
99:33:b6:ce:af:42:33:83:0d:40:a3:ff:93:29:6b:
58:79:cb:33:2a:d4:8d:f2:d3:c6:80:c3:46:dc:69:
70:50:b9:d3:0d:7e:9a:1d:ee:54:2f:55:55:5e:55:
80:10:08:2c:05:f8:38:bc:5b:46:53:70:ea:fe:44:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:CE:12:5B:DA:F7:66:32:92:D3:BE:23:64:BF:64:5C:86:B6:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60952
Signature Algorithm: sha256WithRSAEncryption
3d:45:e3:09:7e:48:51:52:d3:24:d8:cb:6d:67:32:05:cb:3a:
bd:f6:f4:6b:d4:c9:09:e1:00:9a:87:61:b4:48:b8:f6:1f:39:
f8:bd:b6:be:ab:b9:c1:be:10:f0:2b:14:9b:dd:bf:7d:b2:41:
e1:57:a2:ba:27:bf:60:c2:05:3b:e1:5d:db:60:aa:5c:03:b5:
1c:c4:eb:8d:49:c4:2f:d1:20:88:6c:d3:ae:61:4d:15:dc:5f:
77:79:b9:69:ae:5c:b8:e6:cc:23:52:e9:ad:73:2b:1a:e0:e1:
4d:5b:c6:23:59:0b:97:4b:e9:be:c3:9d:10:a1:a5:84:3d:1b:
e4:6d:61:0e:da:9e:af:f0:bf:06:3a:f0:b6:71:ed:c0:11:ee:
e3:9c:00:cb:26:41:07:d3:9e:dd:de:a4:46:6c:7e:53:96:c3:
5a:bf:39:69:a0:de:27:bd:87:86:94:f8:e5:e6:c3:c0:c1:e3:
6d:0d:6c:57:cb:85:ed:3d:c6:11:76:07:f0:be:5d:59:fc:99:
4d:4c:23:b4:f0:9b:ea:b8:b2:f9:f9:15:91:c5:10:ce:a4:24:
fc:0a:d7:f3:61:ce:d9:d7:bc:b1:00:50:44:57:c4:39:b7:20:
41:a1:b5:f1:98:c3:4f:c6:43:bf:5c:df:ed:18:53:65:51:3e:
5c:4c:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:17:22 2024 by rpki-client on console-fra.rpki-client.org