Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
File: sUgIa40dx_EOND_RZXGSOadVvTQ.cer (raw, json)
Hash identifier: 8k48EZqaBqtqdWTl/HTw9WSFn9NvOo04GiF+NVzJ+Uk=
Subject key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC667717B825D1BF274A6FFCF0D1DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25107
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:66:77:17:b8:25:d1:bf:27:4a:6f:fc:f0:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:f6:8e:7b:a1:9b:e4:60:57:77:a8:d8:f7:
08:b2:b4:a5:52:88:09:7a:8f:61:c6:ea:b8:8e:fc:
b9:94:34:59:79:1e:8b:04:2d:c9:63:24:e3:4b:af:
45:a3:16:2b:a8:7a:04:4b:3c:04:d0:06:54:6a:b1:
c7:04:35:f5:05:f8:2d:f3:a7:84:8a:5a:88:df:78:
df:c6:0b:cf:d7:b3:01:0e:e9:70:f5:6e:b5:4a:b3:
50:b8:8a:f6:dd:8a:41:ca:25:ba:98:22:c0:7c:9e:
cc:ad:a3:e2:5a:c3:38:b0:c7:50:cc:a1:d8:24:16:
4e:08:b2:92:1c:72:b9:6e:7b:dc:85:8e:30:1d:b1:
42:46:6f:3f:52:0c:47:09:07:e9:1e:be:b3:37:66:
40:e9:88:e5:20:ac:93:0f:9d:db:01:09:10:51:49:
f2:d1:6e:0b:84:e2:30:4c:e1:77:54:78:36:69:63:
82:1f:2d:87:f2:0f:17:a4:f0:07:0a:25:cc:94:45:
3a:b4:09:4f:63:88:11:d5:3e:a3:66:dd:42:6b:45:
90:42:49:6a:d2:9d:b3:4d:c3:e4:e4:ab:76:0f:b2:
84:8e:b3:37:91:ef:b7:ea:82:ad:78:a3:57:e8:ee:
9c:5a:49:d0:45:0e:6f:8a:23:c8:fd:62:50:f7:d6:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25107
Signature Algorithm: sha256WithRSAEncryption
35:b0:24:13:2c:8f:17:58:40:04:1f:0a:d9:32:0c:ff:f6:74:
3d:df:ed:c8:47:5c:5b:6c:b0:4c:7c:36:fe:47:1d:23:a0:73:
3b:60:97:b0:2c:aa:ef:56:50:bc:d6:05:a0:6b:83:f2:af:a2:
57:c2:dc:5f:ec:c8:1b:11:68:01:21:43:ad:93:6f:76:e9:29:
f8:bf:11:91:3b:9c:33:23:3e:7b:65:e1:42:10:80:68:a3:a7:
59:7d:63:0d:71:f4:fc:2b:75:7f:68:27:77:92:10:ac:46:12:
c9:48:12:f2:4d:fc:d0:14:43:cd:5e:b4:9d:ce:2f:b3:46:26:
0b:ec:5f:2b:1f:42:4f:b8:f8:4d:de:17:98:b4:c5:a7:1d:7f:
42:73:9f:4a:af:12:21:3e:be:ea:7e:74:d9:64:9a:f4:04:aa:
79:f5:61:11:d4:24:ab:18:51:76:4e:4e:a2:f5:97:3b:ac:ec:
6e:87:d4:30:a1:77:10:1e:02:7b:42:5c:7c:db:85:5e:85:e4:
ed:3a:68:07:f2:26:04:c0:a2:5a:de:d3:2a:ca:68:17:86:9d:
f5:e3:ba:22:46:29:c8:b0:09:11:8c:55:2d:68:30:cd:52:94:
1c:59:21:bf:0f:92:24:e5:4b:08:fb:ce:b8:ff:29:8f:72:c7:
4f:de:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:36 2024 by rpki-client on console-fra.rpki-client.org