Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer (raw, json)
Hash identifier: 7dWlAD7RX1AIH8+RnudhNT2pzY2fDC4/Gq4/Iu5wk0k=
Subject key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4246E7D2F269BC87E3910AF13278A9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212896
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6e:7d:2f:26:9b:c8:7e:39:10:af:13:27:8a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:10:c0:46:1f:de:77:ce:9e:8a:00:cd:d6:
de:85:1c:61:d8:5f:1b:2a:7f:d4:60:e3:75:68:d5:
de:f8:5d:a7:0a:8e:23:96:9d:8c:af:5d:02:76:9f:
4b:36:aa:b4:e3:18:b1:ce:cf:12:89:55:9f:a9:69:
a8:0f:ed:a4:8a:66:ab:54:30:64:d9:e6:92:cc:89:
af:f9:79:7e:26:0f:be:f8:1e:9a:ed:b0:c8:8b:7d:
36:15:59:fe:f6:d7:f0:bf:ec:d9:50:fa:b2:8b:74:
dc:3d:d2:84:15:81:4e:8c:1d:ba:6e:72:56:80:0c:
58:26:b8:d3:ac:ef:8e:2c:eb:58:e4:70:9d:be:8e:
a2:6c:87:99:75:9f:f1:3c:6c:7d:0f:34:ce:24:a9:
93:f3:74:97:69:8d:16:52:e3:71:d8:bd:81:00:41:
32:2f:22:92:cf:44:6a:97:84:9a:cd:3b:d2:d9:92:
eb:df:95:1c:f2:d3:9c:64:40:15:90:8f:cd:53:bb:
3c:26:f4:f9:e8:b3:37:de:0d:22:96:28:ba:6e:8b:
3f:e3:b0:18:95:6b:ec:78:6c:cc:73:1f:3c:11:f4:
6e:d3:32:89:81:33:a6:c6:48:21:8e:f0:a9:39:bc:
24:f3:46:3b:a9:2f:fc:11:51:25:18:b8:b0:01:fc:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212896
Signature Algorithm: sha256WithRSAEncryption
9c:b4:e0:24:c5:4f:de:ea:25:fe:a4:82:8b:3d:00:62:63:8c:
5c:10:b4:f4:99:44:8d:1c:66:ae:d3:72:68:aa:86:67:44:eb:
80:63:8c:f0:3f:48:07:69:06:06:ce:3e:1a:85:86:71:74:34:
ca:43:1e:2f:9e:51:59:5d:1b:8b:6a:c1:13:a2:0b:a6:05:83:
03:b5:96:5c:0e:2e:11:cb:98:56:3a:0f:e2:30:c0:64:be:6d:
3e:8b:97:ae:01:28:43:47:16:47:62:71:6e:5b:56:42:2a:5a:
e4:85:9f:0b:6e:b6:15:e8:6d:3e:44:a5:72:ec:cd:58:5f:41:
9f:b6:84:f5:0a:e1:3f:f0:19:ff:7f:73:b1:e6:1d:59:59:ba:
8e:c5:b1:a4:36:9e:e2:11:f0:09:24:8b:ec:28:97:4d:aa:66:
2c:64:7f:0a:54:40:19:06:4c:89:dc:14:dd:6a:4b:c9:f1:43:
7b:43:b8:28:0a:e2:92:b7:e5:79:2b:79:f0:32:ec:35:2d:4d:
1a:28:dd:74:56:16:32:cc:d3:7c:37:a0:28:7f:18:8f:51:5e:
37:75:12:80:22:d4:84:5b:43:d8:cb:1a:e0:f3:92:55:96:ec:
40:54:b8:17:2a:53:7f:49:7b:4a:fe:70:48:37:5d:b6:2e:02:
a7:3d:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:03:59 2024 by rpki-client on console-fra.rpki-client.org