Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
File: ux1P6zEebC28c9UE_ISQzCFUY4k.cer (raw, json)
Hash identifier: ZfT8dOk4gVpdte4yTNu6U25BNSWRnok7d45ZjMzIn+o=
Subject key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191FFD0916869F153A33B07DA35F13DB859
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Sep 2024 11:49:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210987
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:d0:91:68:69:f1:53:a3:3b:07:da:35:f1:3d:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 11:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:07:84:bd:46:65:3c:da:c4:e8:17:b8:04:
fd:03:c6:6e:b0:55:60:ec:f9:00:d8:9b:02:dd:fc:
6a:b2:55:8f:81:7a:38:d8:7f:25:67:cf:76:c6:1f:
79:41:3d:9e:0f:17:23:22:97:19:77:d8:fd:d1:e6:
c0:c4:45:2d:58:55:5f:60:e4:6c:12:4c:a2:93:bf:
13:8c:c6:cd:50:b6:dc:7c:e1:0b:d1:f9:fa:c2:81:
69:cf:8c:71:82:4b:21:59:18:f4:75:b5:3a:45:9c:
a5:15:08:c4:38:a7:07:0b:9b:8f:05:d0:d0:c8:f7:
3f:69:c6:4a:c1:b6:84:82:20:09:1b:6b:03:20:82:
b7:ae:b8:bd:5f:40:da:cc:3e:b4:22:ee:7a:43:31:
95:33:89:0d:f3:56:72:39:86:19:b5:d7:24:b0:8d:
55:ad:f6:e6:71:a4:8b:ef:42:07:57:d2:d3:0d:1a:
0e:33:4b:27:90:20:c3:68:a4:1d:95:ee:78:a6:1c:
fa:9d:69:71:b4:a0:75:2e:3a:c0:9d:44:25:93:3a:
b3:47:ab:30:e1:f3:87:f6:d2:6f:8c:0a:61:42:e0:
cf:26:c5:25:6d:07:dc:2d:cf:66:68:39:a9:b2:83:
67:68:a0:c6:f0:d0:97:a9:8e:60:2f:95:73:73:ad:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210987
Signature Algorithm: sha256WithRSAEncryption
7b:44:8e:4d:7e:55:55:f7:91:d8:e4:c3:de:84:b9:e4:b1:ab:
62:80:b9:b8:e4:2d:67:75:37:5c:80:27:4f:4e:e4:cb:51:74:
02:83:38:fd:63:07:3a:e7:21:d5:72:e2:c9:5c:a8:1f:bd:87:
51:67:8c:0b:5a:ad:c2:77:a5:e9:28:db:85:c3:6d:7c:62:85:
f7:54:bd:4d:2b:c5:64:e2:9d:22:c4:be:fa:d6:6e:41:e7:13:
37:dd:8b:69:8c:96:dd:1d:62:40:79:2c:c0:05:89:77:86:f7:
51:05:31:f0:f8:30:2b:b5:1b:a2:8d:20:e8:4d:45:cf:51:dd:
e9:60:62:45:b8:78:a1:f8:bc:a4:75:2d:4e:30:13:b3:b7:77:
5f:a8:92:97:ed:df:4d:ba:82:d4:49:a2:c2:5f:bc:d7:7b:80:
63:0e:3d:03:08:96:1b:3c:88:22:60:df:0e:41:08:dc:a6:d7:
10:db:c5:1e:26:15:fb:86:27:5a:99:75:47:76:a4:f7:57:f3:
e0:b0:68:9e:f5:a7:e2:f1:71:f1:68:26:5f:79:a0:9a:74:47:
e1:db:6e:51:3e:db:8a:93:52:38:b2:cc:d6:fb:97:fe:9f:57:
ad:54:50:4d:a7:03:2f:eb:a7:cc:0e:2e:1e:af:2c:c7:12:38:
f0:04:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:08:17 2024 by rpki-client on console-fra.rpki-client.org