Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer (raw, json)
Hash identifier: R0NqofUEY3gtiI/45Rl3dTmrPxi+JoflogeAUpH6RAc=
Subject key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348E85E65C522F331174E0FD13005D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204380
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e8:5e:65:c5:22:f3:31:17:4e:0f:d1:30:05:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:ec:1b:22:e1:fc:93:45:5d:34:61:52:c5:
04:ba:d2:ef:f6:a0:de:30:51:f3:a6:9d:9f:80:03:
c1:09:3e:a7:0d:6b:4a:a5:18:ec:89:e6:ee:97:29:
d2:3f:4b:85:8c:3f:34:ae:08:aa:32:1f:0a:a9:07:
52:f5:eb:09:7e:8b:7c:3a:03:68:c3:e8:bc:c1:50:
46:51:a3:61:f7:b1:90:ae:69:ec:65:53:61:76:b4:
8e:73:91:bf:8a:f3:7c:f6:ee:34:46:cc:eb:04:68:
63:49:2f:81:19:0f:a7:f0:c0:72:22:df:be:b2:2c:
e5:a9:79:58:af:39:1f:cf:c8:05:fb:58:91:c2:2b:
ee:3e:59:b1:09:2e:ab:6d:60:e6:39:7b:de:cf:17:
fb:b8:bc:23:84:c4:69:f8:58:98:7e:58:07:12:98:
7d:c6:b0:bc:4f:19:a9:d4:f6:1c:b8:f8:e8:19:1f:
c6:21:13:62:75:00:de:25:ab:4c:a4:e7:6b:55:16:
0c:97:00:3a:cf:2b:0f:27:da:e4:39:09:50:48:cb:
b8:f9:44:2e:3d:51:21:23:36:26:73:a1:f6:7b:88:
16:83:ae:a9:77:1a:ab:9c:b4:0d:6d:12:4b:97:78:
b5:ad:d3:31:86:eb:14:ba:06:47:c2:4c:88:36:17:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204380
Signature Algorithm: sha256WithRSAEncryption
27:14:c7:fd:5c:13:88:eb:f3:08:98:18:e1:fd:56:08:55:2e:
a6:b4:20:9b:19:bb:b9:76:b1:66:03:69:ac:d6:f6:06:19:ff:
21:9e:c7:0d:68:42:6c:6a:15:df:43:65:10:b8:f7:04:a9:57:
9c:ca:0d:36:5f:c6:81:98:08:30:5c:3b:3e:54:a8:27:3b:1c:
56:3b:af:e2:55:eb:c3:dc:21:29:85:69:7c:b7:cf:7e:c0:04:
94:14:50:b4:53:4a:32:04:f0:74:be:42:c4:06:8a:9c:3e:48:
2a:74:83:bb:0c:7c:38:93:67:bd:26:cf:7f:43:a8:78:27:ff:
db:b4:e7:40:cd:04:8c:9f:e1:b4:88:a5:ea:62:b5:a8:64:d8:
b2:87:28:44:a1:89:12:39:62:f8:4e:6a:48:39:45:21:1c:63:
c1:c8:2a:0a:15:3f:75:a5:c2:d9:d7:91:c4:91:05:a7:e2:30:
08:31:2d:a5:19:58:71:1d:69:89:4d:26:a5:cd:d4:84:dc:84:
69:79:26:7b:e9:6c:9b:94:ae:e4:e6:99:22:96:37:1b:1a:59:
2b:64:21:3b:4a:fa:98:0f:a5:0a:61:93:4b:e4:e7:f5:95:c5:
5e:b0:15:24:ff:bc:e2:61:d5:4a:f7:1e:f3:1c:fe:54:c1:6f:
4e:36:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:03:02 2024 by rpki-client on console-fra.rpki-client.org