Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.cer
File: oR1tW6LV_Qmx3CCAVKRaLNqNLiU.cer (raw, json)
Hash identifier: gi2QLKjwpeV8NcYiNOJQAUpMWqMBDhF2IHX3XCOQlgs=
Subject key identifier: A1:1D:6D:5B:A2:D5:FD:09:B1:DC:20:80:54:A4:5A:2C:DA:8D:2E:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB562C6EBB670777B1438F1E481B8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213267
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:2c:6e:bb:67:07:77:b1:43:8f:1e:48:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a11d6d5ba2d5fd09b1dc208054a45a2cda8d2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:fa:b0:3a:29:e2:20:fc:e9:6e:d9:14:88:
71:50:29:da:d2:45:5c:49:81:11:d7:e6:58:30:e3:
c6:8e:7b:e9:20:ce:17:04:c1:44:c1:8a:04:42:d6:
4c:f6:8a:c4:c2:74:14:76:4f:8b:7f:4d:24:3c:b8:
25:cb:e1:50:d1:0e:df:a8:56:0e:13:0e:10:07:df:
8a:60:b6:f3:bc:7b:40:71:15:1b:03:67:d9:38:ad:
84:a1:fd:da:d2:6f:a3:6f:49:c5:b9:64:f6:17:b8:
10:65:f9:94:b7:10:80:34:21:e7:07:a7:eb:71:bb:
66:a9:11:1b:3a:d6:53:1d:e6:ef:cd:60:2e:0c:95:
da:43:63:b2:08:f2:35:ca:a0:0e:f4:63:be:90:37:
0c:1c:e3:b7:f7:e1:d2:c5:3b:44:db:47:ff:9d:1b:
16:a7:a8:cc:aa:37:cb:d3:1c:0f:cb:ca:1d:5e:23:
eb:64:6c:af:47:7a:1f:cc:4e:93:64:f1:27:5f:55:
46:e3:2c:2b:dd:52:bf:ac:48:b4:73:15:6d:8a:24:
8b:c5:4d:66:a2:80:67:d2:5a:b3:be:39:85:66:2c:
c3:40:87:ed:52:b9:74:2c:f4:28:14:81:aa:53:a6:
39:8b:58:dc:2e:bd:09:73:9b:a4:af:d6:59:6d:14:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:6D:5B:A2:D5:FD:09:B1:DC:20:80:54:A4:5A:2C:DA:8D:2E:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213267
Signature Algorithm: sha256WithRSAEncryption
a6:cc:ec:81:44:65:07:64:21:e7:14:49:a9:d4:37:0d:1c:1f:
5d:bc:2d:b2:32:01:e2:07:18:a4:8f:fe:4d:c2:8e:77:b1:d5:
88:ae:4b:26:9d:29:85:2d:92:5e:58:1a:dd:c0:56:ea:fb:0e:
3e:37:50:30:f9:b7:6f:09:00:3d:a3:eb:52:ab:9c:69:d8:2b:
d1:ac:fb:93:0d:a7:0d:52:6c:10:d8:a9:f5:24:15:76:8d:53:
2f:83:19:86:aa:54:9e:34:8a:34:36:c2:b3:81:a3:21:b1:43:
d2:e4:11:be:bc:14:69:27:82:fe:a7:59:77:8b:42:be:e7:cc:
a5:92:17:f9:e3:79:99:50:cb:12:53:2f:44:ce:30:ba:c1:1b:
29:59:40:54:a6:a6:eb:cf:0c:c8:52:3c:63:ab:6d:ff:32:33:
45:c8:e6:93:bd:55:20:90:50:6c:10:ed:a4:89:1d:44:9f:f9:
05:d6:f2:05:8a:7b:cd:ec:f4:68:b5:be:65:0d:9c:4e:f2:38:
35:b0:67:ae:bc:dc:00:b3:32:0f:6b:14:54:72:f8:b7:28:c2:
36:fa:52:0c:b2:c2:d5:af:59:da:48:ed:bd:b3:2d:9e:9d:34:
5d:ba:b3:33:e9:c8:91:63:80:94:30:36:16:32:79:c7:36:ec:
bb:a4:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:00:47 2024 by rpki-client on console-fra.rpki-client.org