Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rWYOS3wdNLUlznZdBCKdFzEOccc.cer
File: rWYOS3wdNLUlznZdBCKdFzEOccc.cer (raw, json)
Hash identifier: I0ITU306l0xXJAyZCsfuuZ6s8rV1XW3SkfFgbw9JKCQ=
Subject key identifier: AD:66:0E:4B:7C:1D:34:B5:25:CE:76:5D:04:22:9D:17:31:0E:71:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D22CEB10C123807680B91359EA2968C65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 19 Jan 2024 17:39:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200242
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:ce:b1:0c:12:38:07:68:0b:91:35:9e:a2:96:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 19 17:39:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad660e4b7c1d34b525ce765d04229d17310e71c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:8c:14:08:ab:3d:69:3c:57:9b:41:80:cb:
05:5f:68:0f:f3:ec:0c:a4:32:64:c0:c5:26:99:a2:
59:e0:aa:ec:cf:7f:1e:c0:d3:18:64:cb:dd:e8:3a:
f1:65:db:20:97:dc:5f:c2:55:47:5f:66:b8:9e:cb:
35:39:1e:2e:38:fc:ff:7c:c3:56:18:6a:d7:cd:bf:
99:37:b5:7e:b3:c7:13:e7:a2:a5:b2:1c:ea:04:2c:
88:f6:d5:ae:64:6c:7f:86:54:2c:ed:98:6c:49:bf:
dd:9c:19:58:f3:ed:d7:cf:b3:e1:f9:39:86:1a:68:
de:1e:8c:be:a5:49:c8:fa:04:9f:da:e6:6d:41:3c:
28:76:3c:86:d0:0f:15:29:b6:43:aa:6c:64:59:0b:
80:9d:5d:86:f8:34:5b:a8:7b:b0:a5:a8:e6:cf:fb:
8d:90:4d:fa:92:3b:70:0e:ce:e6:51:bd:20:87:cc:
45:aa:b5:3c:15:42:37:23:0f:af:9c:33:a7:ce:4e:
93:2f:e0:d0:0e:20:05:64:82:0a:af:8d:25:38:b0:
ee:e9:51:00:82:d4:a5:d1:17:b9:5f:f4:09:06:7e:
91:ef:ba:d7:a2:66:58:f3:61:dd:20:65:27:d4:a9:
62:a7:10:91:86:f6:82:8c:3d:a5:35:64:fa:3a:16:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:66:0E:4B:7C:1D:34:B5:25:CE:76:5D:04:22:9D:17:31:0E:71:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200242
Signature Algorithm: sha256WithRSAEncryption
2f:28:71:d4:30:ef:e4:3f:87:df:30:df:ad:39:38:94:3d:fe:
20:0e:02:d3:fc:a0:79:d8:5e:66:a3:d2:0c:d4:6f:20:03:bc:
c5:15:19:70:50:df:d5:1a:5a:cf:5a:1b:e0:2c:90:b9:b4:db:
27:b7:27:c0:21:49:13:0a:06:f1:0c:38:83:27:66:05:33:ad:
c9:a7:5c:e8:5e:61:52:89:5f:af:cd:8b:36:e7:4a:62:9f:23:
fe:6d:24:92:5d:47:ec:38:95:50:08:80:4a:e8:6d:79:08:c2:
3e:c4:e8:76:dd:9f:50:fc:e9:d7:fc:35:e6:a6:2a:1b:d5:75:
33:cf:44:2b:40:8f:11:12:47:5d:52:0b:b5:c1:dc:67:e0:a5:
5c:f1:39:ba:15:38:38:89:5f:a2:52:52:a5:4a:dc:17:db:8a:
f6:fc:58:70:9e:66:3a:8a:84:23:56:86:c3:9f:b6:21:9a:e2:
75:b9:78:bb:26:c2:46:a2:49:36:21:45:51:6e:dd:ed:b8:ac:
c3:9b:95:52:52:b4:8b:c6:8f:b5:0f:c3:52:34:14:60:c5:a3:
29:95:81:83:d4:fb:d0:4c:91:f0:a6:78:16:16:18:6a:fb:4c:
54:22:cc:0c:ad:25:98:74:62:96:bd:c5:a2:38:db:2b:7a:dc:
4b:ba:0c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:43 2024 by rpki-client on console-fra.rpki-client.org