Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.cer (raw, json)
Hash identifier: 189k1L07igf1/6Fjz26dtGT50n3S9cZMnMle30xZPWI=
Subject key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF7C8A1912F8A423BEB97CC332BB84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198071
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7c:8a:19:12:f8:a4:23:be:b9:7c:c3:32:bb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:16:fc:36:7c:16:5a:81:6a:e4:65:ab:72:
42:b5:fd:ba:12:ae:52:bb:c5:e8:78:a9:c6:ce:7d:
f9:2c:09:b8:4b:78:b9:a7:ff:d4:a1:42:43:62:72:
c6:d9:da:18:75:08:cf:35:b3:99:02:ef:0b:58:3a:
32:be:f9:25:ac:16:ae:71:bc:0d:15:f2:24:20:c3:
67:aa:e9:99:f3:d6:92:a9:b8:9f:1c:c4:c2:23:59:
28:a6:5d:b2:34:64:2e:e2:22:4d:66:f5:49:a5:68:
00:3f:5a:8e:57:55:85:f0:77:bf:6f:f1:7a:24:3d:
b2:12:db:4b:9a:4d:4e:09:bf:00:61:05:9f:4b:93:
62:56:00:d4:04:0b:a5:e0:34:cf:b8:8b:18:44:c4:
65:09:58:a8:86:79:30:35:ea:ca:cc:24:2c:7f:85:
56:a2:7c:39:af:d0:e8:d0:b6:ef:13:92:42:aa:ad:
c4:3c:7e:d7:81:b7:d8:16:17:7c:d0:b0:cf:83:b7:
09:f9:0a:99:a4:06:b1:91:e1:8c:42:17:b0:93:f4:
f1:aa:c6:bd:a1:a2:68:b6:ef:1d:7a:35:f2:60:6d:
62:38:39:ac:c2:c6:21:0c:68:07:f4:2b:57:23:1f:
b9:8f:33:81:fe:04:71:59:88:b6:8e:66:c4:16:b9:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198071
Signature Algorithm: sha256WithRSAEncryption
8a:47:3c:d7:21:84:b7:1c:f4:dd:e2:a3:54:8d:2d:40:fd:a3:
87:c9:b4:2c:de:4c:91:a6:e5:68:52:9e:33:3c:af:d1:4a:fb:
fd:56:62:aa:33:4e:16:2c:3f:6e:8a:c4:65:86:4f:4e:5c:a2:
8b:c9:84:97:52:9d:2c:bf:be:f0:1c:e5:74:e4:59:1b:f0:91:
cf:25:c5:06:7c:b0:8a:5d:63:09:45:20:de:c6:23:7c:02:a7:
c4:21:b1:ea:f2:3e:47:d0:ba:56:51:f2:2a:57:42:40:ea:21:
f8:41:46:96:3b:d7:d3:fb:d4:4f:5b:64:a3:73:b7:aa:02:d5:
b7:02:28:24:c2:f8:ab:45:02:d0:22:1a:21:16:bc:6b:ec:c3:
c5:c6:e9:47:71:71:33:9a:e7:22:cb:54:19:9c:cf:b8:e2:e0:
d2:a0:81:db:2a:04:15:23:bf:da:fe:93:63:cd:4c:bd:f6:ec:
22:76:0b:da:6c:9a:b9:50:92:9e:e7:25:b5:ed:fe:d4:f4:bb:
66:ba:c8:16:44:61:27:ab:82:81:e2:4d:1f:53:9b:2b:84:6e:
83:58:39:1f:5a:c8:42:64:53:4d:16:a4:25:83:a2:60:92:5e:
51:ed:29:ab:b7:6a:c6:75:b0:3c:17:d7:df:54:5b:ab:af:95:
33:32:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:46 2024 by rpki-client on console-fra.rpki-client.org