Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
File: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer (raw, json)
Hash identifier: VnzWUziWJO8f6UVqHIKLinbNoRHN6P8Y8k3D0oDoTNU=
Subject key identifier: AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B909110841CAE819B0C465E5EF5812
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211571
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:09:11:08:41:ca:e8:19:b0:c4:65:e5:ef:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:b6:58:95:9a:57:d1:f2:f4:42:d4:1b:4a:
ee:ef:20:1d:32:6f:31:1b:a8:cb:59:94:ca:83:1f:
ad:ef:31:65:a4:3b:79:b4:a7:bd:c1:e6:37:12:80:
1f:99:2b:68:b3:73:73:4f:0f:9a:67:96:fd:5b:96:
72:41:68:fc:5e:2e:f5:56:3c:9f:a7:bc:6d:b0:8f:
16:b6:8f:67:e3:b2:25:98:7e:4b:12:52:f1:f9:fe:
90:90:64:51:fb:4e:8d:3f:b2:bb:32:5b:3b:99:5a:
07:e7:01:92:95:27:bc:ea:61:ca:8f:be:e6:b1:19:
20:45:f9:40:37:cc:d7:2d:3b:02:da:13:ec:15:fc:
ed:cb:69:12:3e:b7:3a:c2:54:88:bc:25:fa:bb:bb:
f8:98:b2:57:1c:a6:06:3c:cf:65:18:94:02:4f:6c:
9f:0f:17:bf:57:98:ec:0f:74:15:ae:2b:30:54:94:
9b:22:f6:1e:4b:d0:97:7d:d4:a1:95:b2:46:21:2f:
89:1a:7e:4f:55:d6:c1:f2:7f:dd:c9:55:74:b2:46:
e6:89:65:ec:49:91:d7:b2:f2:94:50:5a:f0:50:9a:
a4:80:f1:58:8f:c9:49:e8:d6:e1:f3:f4:b6:10:24:
1d:68:a0:c0:8c:59:16:d8:e2:e6:fb:ea:ef:87:f8:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211571
Signature Algorithm: sha256WithRSAEncryption
a2:86:06:28:f0:bc:b3:85:a6:c5:4e:0e:8c:8f:c1:54:88:d4:
4b:10:76:25:38:66:51:09:cd:bf:38:d2:24:3c:15:d9:a7:5c:
e6:03:2f:7f:0f:3f:c5:b9:41:80:18:85:02:9b:59:ea:bf:76:
cc:bd:e4:89:a2:4f:60:e7:d7:c0:15:21:c1:a9:20:dc:55:ac:
34:86:a9:a2:e6:8a:b5:0e:f3:2d:79:8c:19:58:e5:22:11:ae:
f8:54:7e:62:a4:87:29:cf:b2:77:2a:7a:a2:ed:d8:19:96:77:
58:ed:0a:f9:03:01:5f:73:51:62:c4:e6:3e:f0:b6:e4:3c:f7:
5f:5c:c6:55:a3:8c:5b:5d:00:46:8a:b6:e1:35:0e:b4:d2:ed:
8c:20:0e:e0:db:4f:49:b8:7b:eb:0d:a8:5a:fe:96:cb:11:ae:
48:b2:05:77:88:11:8b:ea:26:7b:4a:22:74:bd:cc:af:77:fe:
e8:78:d0:7a:c2:6f:58:2c:77:1d:02:41:ef:0d:37:cc:70:29:
a9:58:13:ce:6d:00:74:64:16:1e:6d:74:31:2c:f2:40:74:7e:
4f:d3:aa:c3:c9:0f:0a:2f:05:12:f7:e2:cd:9f:a2:77:88:f0:
8a:7b:cf:ed:a0:31:fa:f4:26:2f:1d:d8:9c:b3:ea:0d:5a:62:
f1:83:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:03:31 2024 by rpki-client on console-ams.rpki-client.org